@astrale-domains/services 0.8.2 → 0.8.3

package/README.md

@@ -52,13 +52,10 @@ caller in three groups also reaches the Services of each.
   Service of the group, deletion included.
 - `OwnDeployment` gives a deployment to the owner of its Service.
 
-Every Method is `authenticated`: a deployer's identities on the Admin instance hold no `can_use`
-on Services' Functions, which an `authorized` Method requires of every non-Root caller.
-Each handler asks the Kernel `Identity.can` for the caller on its own session before it reads
-anything: a caller who does not own the Service finds none (`SERVICE_NOT_FOUND`,
-`DEPLOYMENT_NOT_FOUND`), and a deploy of another owner's Service is refused
-`service-owned-elsewhere`. The day the Admin instance grants deployers `can_use` on these Methods,
-they become `authorized` with the Policy and the handler checks go.
+Every Method is `authenticated`. Each handler asks the Kernel `Identity.can` for the caller on its
+own session before it reads anything: a caller who does not own the Service finds none
+(`SERVICE_NOT_FOUND`, `DEPLOYMENT_NOT_FOUND`), and a deploy of another owner's Service is refused
+`service-owned-elsewhere`.
 
 `list` reads Services under the Services Domain credential and keeps those the Kernel answers
 `OwnService` for, in batches: a caller-mode read does not reach the Identity end of
@@ -231,6 +228,11 @@ sets `SERVICES_SECRET_DIGEST_KEY` (at least 32 UTF-8 bytes), `CLOUDFLARE_DISPATC
 `CLOUDFLARE_SCHEDULE_KV_ID`; the configuration refuses a file without them or one that sets a
 hosting var.
 
+`.env.admin.tpl` is that file with each secret as a 1Password reference.
+`scripts/with-secrets.sh admin -- <command>` resolves it for one command: `.env.admin` (0600)
+exists while the command runs, its values are in the command's environment, and the file is
+removed afterwards. A resolved `.env.admin` left on disk is refused rather than overwritten.
+
 `pnpm run deploy admin` makes one immutable deployment of this release in the platform dispatch
 namespace. Deploying never installs: install the deployed URL with
 `astrale domain install <url> -i <instance>`. The Cloudflare Provider and its operator tooling

package/dist/schema/modules/deployment/classes/cloudflare-deployment.d.ts

@@ -102,5 +102,6 @@ export declare const CloudflareDeployment: import("@astrale-os/sdk/schema").Auth
     };
     readonly policies: {
         read: () => import("@astrale-os/sdk/schema").Policy;
+        traverse: () => import("@astrale-os/sdk/schema").Policy;
     };
 }>;

package/dist/schema/modules/deployment/classes/cloudflare-deployment.js

@@ -8,5 +8,5 @@ export const CloudflareDeployment = nodeClass({
     icon: classIcon.lucide(CloudUpload),
     extends: [Deployment],
     methods: { retire: retireDeployment },
-    policies: { read: () => OwnDeployment },
+    policies: { read: () => OwnDeployment, traverse: () => OwnDeployment },
 });

package/dist/schema/modules/deployment/classes/current-deployment.js

@@ -9,5 +9,5 @@ export const current_deployment = edgeClass.directed({
     description: 'The deployment one Service currently serves.',
     source: { as: 'service', accepts: [() => Service], outgoing: '0..1' },
     target: { as: 'deployment', accepts: [() => Deployment], incoming: '0..1' },
-    policies: { traverse: () => TraverseOwnedService },
+    policies: { read: () => TraverseOwnedService, traverse: () => TraverseOwnedService },
 });

package/dist/schema/modules/deployment/classes/deployment-of.js

@@ -7,5 +7,8 @@ export const deployment_of = edgeClass.directed({
     description: 'The Service one Deployment is a version of.',
     source: { as: 'deployment', accepts: [() => Deployment], outgoing: '1' },
     target: { as: 'service', accepts: [() => Service], incoming: '0..*' },
-    policies: { traverse: () => TraverseOwnedServiceDeployment },
+    policies: {
+        read: () => TraverseOwnedServiceDeployment,
+        traverse: () => TraverseOwnedServiceDeployment,
+    },
 });

package/dist/schema/modules/deployment/functions/retire-deployment.d.ts

@@ -4,9 +4,7 @@
  * retired alone: promote another one first, or delete the Service.
  *
  * Only the owner of the deployment's Service, or an Identity acting as it, withdraws it: the
- * handler asks the Kernel `OwnDeployment` for the caller before it reads the deployment. An
- * `authorized` Method would also require the caller's principal to hold `can_use` on this
- * Function, which no deployer identity holds on the Admin instance.
+ * handler asks the Kernel `OwnDeployment` for the caller before it reads the deployment.
  */
 export declare const retireDeployment: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';

package/dist/schema/modules/deployment/functions/retire-deployment.js

@@ -6,9 +6,7 @@ import { retireDeploymentInput, retireDeploymentOutput } from '../types/deployme
  * retired alone: promote another one first, or delete the Service.
  *
  * Only the owner of the deployment's Service, or an Identity acting as it, withdraws it: the
- * handler asks the Kernel `OwnDeployment` for the caller before it reads the deployment. An
- * `authorized` Method would also require the caller's principal to hold `can_use` on this
- * Function, which no deployer identity holds on the Admin instance.
+ * handler asks the Kernel `OwnDeployment` for the caller before it reads the deployment.
  */
 export const retireDeployment = method({
     description: 'Withdraw this deployment for good.',

package/dist/schema/modules/service/classes/cloudflare-service.d.ts

@@ -239,5 +239,6 @@ export declare const CloudflareService: import("@astrale-os/sdk/schema").Authore
     };
     readonly policies: {
         read: () => import("@astrale-os/sdk/schema").Policy;
+        traverse: () => import("@astrale-os/sdk/schema").Policy;
     };
 }>;

package/dist/schema/modules/service/classes/cloudflare-service.js

@@ -34,5 +34,5 @@ export const CloudflareService = nodeClass({
         logs: listServiceLogs,
         delete: deleteService,
     },
-    policies: { read: () => OwnService },
+    policies: { read: () => OwnService, traverse: () => OwnService },
 });

package/dist/schema/modules/service/classes/service-owned-by.js

@@ -5,5 +5,5 @@ export const service_owned_by = edgeClass.directed({
     description: 'The authenticated Identity that owns and may manage one Service.',
     source: { as: 'service', accepts: [() => Service], outgoing: '1' },
     target: { as: 'owner', accepts: [K.classes.Identity], incoming: '0..*' },
-    policies: { traverse: () => TraverseOwnedService },
+    policies: { read: () => TraverseOwnedService, traverse: () => TraverseOwnedService },
 });

package/dist/schema/modules/service/types/service-management.js

@@ -2,12 +2,9 @@ import { z } from 'zod';
 import { deploymentRejection, deploymentSecretRejection } from '../../deployment/index.js';
 import { secretName } from './service-secret-name.js';
 /**
- * Every Service Method is `authenticated`: a deployer's identities on the Admin instance hold no
- * `can_use` on Services' Functions, which an `authorized` Method requires of every non-Root
- * caller. Each handler asks the Kernel `OwnService` for the caller on its own session before it
- * reads anything, and a caller who does not own the Service finds none (`SERVICE_NOT_FOUND`). The
- * day the Admin instance grants deployers `can_use` on these Methods, they become `authorized` with
- * the `OwnService` Policy and the handler checks go.
+ * Every Service Method is `authenticated`. Each handler asks the Kernel `OwnService` for the caller
+ * on its own session before it reads anything, and a caller who does not own the Service finds
+ * none (`SERVICE_NOT_FOUND`).
  */
 /** One deployment of this Service, named by its label. */
 const deploymentLabel = z.string().min(33).max(57);

package/dist/schema/schema.d.ts

@@ -263,6 +263,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
             };
             readonly policies: {
                 read: () => import("@astrale-os/sdk/schema").Policy;
+                traverse: () => import("@astrale-os/sdk/schema").Policy;
             };
         }>;
         readonly service_owned_by: import("@astrale-os/sdk/schema").DirectedEdgeClass<{
@@ -468,6 +469,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
             };
             readonly policies: {
                 read: () => import("@astrale-os/sdk/schema").Policy;
+                traverse: () => import("@astrale-os/sdk/schema").Policy;
             };
         }>;
         readonly deployment_of: import("@astrale-os/sdk/schema").DirectedEdgeClass<{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-domains/services",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/astrale-os/domains.git",
@@ -31,15 +31,15 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@astrale-os/sdk": "0.6.0-beta.25",
+    "@astrale-os/sdk": "0.6.0-beta.28",
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@astrale-os/adapter-astrale": "0.5.0-beta.173",
-    "@astrale-os/adapter-cloudflare": "0.5.0-beta.180",
+    "@astrale-os/adapter-astrale": "0.5.0-beta.176",
+    "@astrale-os/adapter-cloudflare": "0.5.0-beta.183",
     "@astrale-os/ox": ">=0.1.4 <1.0.0",
-    "@astrale-os/shell": "0.7.0-beta.1",
-    "@astrale-os/shell-react": "0.6.0-beta.1",
+    "@astrale-os/shell": "0.7.0-beta.2",
+    "@astrale-os/shell-react": "0.6.0-beta.3",
     "@astrale-os/ui": "1.0.0-beta.32",
     "@cloudflare/workers-types": "5.20260821.1",
     "@tailwindcss/vite": "^4.3.3",