@astrale-domains/services 0.9.0 → 0.9.1

package/README.md

@@ -19,9 +19,11 @@ lifecycle evidence.
   origin. Its `name` is the opaque 16-character `serviceName(project, environment)`, unique among
   Services, the DNS label of `url`, `https://<name>.<routing domain>`. `state` is `active`, or
   `deleting` while its deletion retires its deployments.
-- **`service_owned_by`**: every Service has exactly one owner, an Identity: a user, a group or a
+- **`service_owned_by`**: a Service has at most one owner, an Identity: a user, a group or a
   service account. It is chosen once, when the first deploy creates the Service, and changes only
-  by `transfer`.
+  by `transfer`. The Kernel cannot restrict the deletion of an Identity
+  ([kernel#1498](https://github.com/astrale-os/kernel/pull/1498)): deleting the owner detaches
+  the Edge, and the Service survives without an owner ([below](#a-service-without-an-owner)).
 - **`Deployment` / `CloudflareDeployment`**: one immutable release of a Service, served by one
   Workers for Platforms script at its own URL, `https://<label>.<routing domain>`, where `label` is
   `<name>-<content16>` and the content covers the build digest and the configuration digest. It
@@ -62,6 +64,21 @@ own session before it reads anything: a caller who does not own the Service find
 `service_owned_by` for an owner the caller reaches through `extends_with`
 ([kernel#1138](https://github.com/astrale-os/kernel/issues/1138)).
 
+### A Service without an owner
+
+Once its owner Identity is deleted, a Service is nobody's: no caller satisfies `OwnService` on it,
+not even the Kernel root, whose `Identity.can` answers are factual. Only an authority beyond
+ownership still reaches it, such as the root writing the graph directly. The handlers treat it as
+a declared state:
+
+- Its Methods find no Service (`SERVICE_NOT_FOUND`), as for any Service the caller does not own.
+- A deploy of its project and environment is refused `service-owned-elsewhere`, with a message
+  that it has no owner and must be transferred to one first.
+- `list` never lists it.
+- A `transfer` or a `delete` whose caller proved it owned the Service before its owner was deleted
+  completes: the transfer gives the Service the owner it names, and the deletion deletes it without
+  an owner Edge. Each Mutation fences on the owner it read, or on the Service still having none.
+
 ## Methods
 
 Call them on the Admin instance (`astrale call ... --admin`). Their wire contract is

package/dist/schema/modules/deployment/classes/cloudflare-deployment.d.ts

@@ -98,7 +98,7 @@ export declare const CloudflareDeployment: import("@astrale-os/sdk/schema").Auth
                 kind: "retiring";
                 retryAfterMs: number;
             };
-        }, "authenticated", false, false, undefined>>;
+        }, "authenticated", false, false, undefined, undefined>>;
     };
     readonly policies: {
         read: () => import("@astrale-os/sdk/schema").Policy;

package/dist/schema/modules/deployment/functions/retire-deployment.d.ts

@@ -19,4 +19,4 @@ export declare const retireDeployment: import("@astrale-os/sdk/schema").Method<i
         message: string;
         retryAfter?: string | undefined;
     };
-}, "authenticated", false, false, undefined>>;
+}, "authenticated", false, false, undefined, undefined>>;

package/dist/schema/modules/service/classes/cloudflare-service.d.ts

@@ -119,13 +119,13 @@ export declare const CloudflareService: import("@astrale-os/sdk/schema").Authore
                     } | undefined;
                 };
             };
-        }, "authenticated", true, false, undefined>>;
+        }, "authenticated", true, false, undefined, undefined>>;
         hosting: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: {
                 routingDomain: string;
             };
-        }, "authenticated", true, false, undefined>>;
+        }, "authenticated", true, false, undefined, undefined>>;
         list: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             project?: string | undefined;
             environment?: string | undefined;
@@ -154,7 +154,7 @@ export declare const CloudflareService: import("@astrale-os/sdk/schema").Authore
                     } | undefined;
                 }[];
             };
-        }, "authenticated", true, false, undefined>>;
+        }, "authenticated", true, false, undefined, undefined>>;
         promote: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             label: string;
         }, {
@@ -167,7 +167,7 @@ export declare const CloudflareService: import("@astrale-os/sdk/schema").Authore
             } | {
                 current: string;
             };
-        }, "authenticated", false, false, undefined>>;
+        }, "authenticated", false, false, undefined, undefined>>;
         transfer: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             owner: string;
         }, {
@@ -180,7 +180,7 @@ export declare const CloudflareService: import("@astrale-os/sdk/schema").Authore
             } | {
                 owner: string;
             };
-        }, "authenticated", false, false, undefined>>;
+        }, "authenticated", false, false, undefined, undefined>>;
         setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             name: string;
             value: string;
@@ -194,11 +194,11 @@ export declare const CloudflareService: import("@astrale-os/sdk/schema").Authore
                 message: string;
                 retryAfter?: string | undefined;
             };
-        }, "authenticated", false, false, undefined>>;
+        }, "authenticated", false, false, undefined, undefined>>;
         secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authenticated", false, false, undefined>>;
+        }, "authenticated", false, false, undefined, undefined>>;
         setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             crons: string[];
         }, {
@@ -209,11 +209,11 @@ export declare const CloudflareService: import("@astrale-os/sdk/schema").Authore
                 kind: "rejected";
                 reason: "invalid-schedule" | "service-unavailable";
             };
-        }, "authenticated", false, false, undefined>>;
+        }, "authenticated", false, false, undefined, undefined>>;
         schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: string[];
-        }, "authenticated", false, false, undefined>>;
+        }, "authenticated", false, false, undefined, undefined>>;
         logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
             label?: string | undefined;
             tail?: number | undefined;
@@ -226,7 +226,7 @@ export declare const CloudflareService: import("@astrale-os/sdk/schema").Authore
                 level: string;
                 line: string;
             }[];
-        }, "authenticated", false, false, undefined>>;
+        }, "authenticated", false, false, undefined, undefined>>;
         delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
             readonly mode: 'value';
             readonly value: {
@@ -235,7 +235,7 @@ export declare const CloudflareService: import("@astrale-os/sdk/schema").Authore
                 kind: "deleting";
                 retryAfterMs: number;
             };
-        }, "authenticated", false, false, undefined>>;
+        }, "authenticated", false, false, undefined, undefined>>;
     };
     readonly policies: {
         read: () => import("@astrale-os/sdk/schema").Policy;

package/dist/schema/modules/service/classes/service-owned-by.d.ts

@@ -5,7 +5,7 @@ export declare const service_owned_by: import("@astrale-os/sdk/schema").Directed
     readonly properties: never;
     readonly source: {
         readonly as: "service";
-        readonly outgoing: "1";
+        readonly outgoing: "0..1";
     };
     readonly target: {
         readonly as: "owner";

package/dist/schema/modules/service/classes/service-owned-by.js

@@ -3,7 +3,9 @@ import { TraverseOwnedService } from '../policies/index.js';
 import { Service } from './service.js';
 export const service_owned_by = edgeClass.directed({
     description: 'The authenticated Identity that owns and may manage one Service.',
-    source: { as: 'service', accepts: [() => Service], outgoing: '1' },
+    // `service` is optional: `owner` holds a Kernel Identity, whose deletion the Edge cannot
+    // restrict, so the Edge detaches and the Service outlives its owner (kernel#1498).
+    source: { as: 'service', accepts: [() => Service], outgoing: '0..1' },
     target: { as: 'owner', accepts: [K.classes.Identity], incoming: '0..*' },
     policies: { read: () => TraverseOwnedService, traverse: () => TraverseOwnedService },
 });

package/dist/schema/modules/service/classes/service.d.ts

@@ -1,10 +1,11 @@
 import { z } from 'zod';
 /**
- * One Service: the stable identity of one project in one environment, owned by one Identity,
- * whatever its Worker serves (an Astrale Domain release, an API, a cron job). Every deploy adds an
- * immutable Deployment of it, and its URL serves the one it currently points at. Its `name` is the
- * SDK's `serviceName(project, environment)`: the DNS label of the Service and the prefix of each
- * deployment's label, unique among Services, and free again once the Service is deleted.
+ * One Service: the stable identity of one project in one environment, owned by one Identity until
+ * that Identity is deleted, whatever its Worker serves (an Astrale Domain release, an API, a cron
+ * job). Every deploy adds an immutable Deployment of it, and its URL serves the one it currently
+ * points at. Its `name` is the SDK's `serviceName(project, environment)`: the DNS label of the
+ * Service and the prefix of each deployment's label, unique among Services, and free again once
+ * the Service is deleted.
  */
 export declare const Service: import("@astrale-os/sdk/schema").AuthoredNodeClass<{
     readonly abstract: true;

package/dist/schema/modules/service/classes/service.js

@@ -3,11 +3,12 @@ import { Server } from '@astrale-os/sdk/schema/icons';
 import { z } from 'zod';
 import { serviceLifecycle } from '../states/index.js';
 /**
- * One Service: the stable identity of one project in one environment, owned by one Identity,
- * whatever its Worker serves (an Astrale Domain release, an API, a cron job). Every deploy adds an
- * immutable Deployment of it, and its URL serves the one it currently points at. Its `name` is the
- * SDK's `serviceName(project, environment)`: the DNS label of the Service and the prefix of each
- * deployment's label, unique among Services, and free again once the Service is deleted.
+ * One Service: the stable identity of one project in one environment, owned by one Identity until
+ * that Identity is deleted, whatever its Worker serves (an Astrale Domain release, an API, a cron
+ * job). Every deploy adds an immutable Deployment of it, and its URL serves the one it currently
+ * points at. Its `name` is the SDK's `serviceName(project, environment)`: the DNS label of the
+ * Service and the prefix of each deployment's label, unique among Services, and free again once
+ * the Service is deleted.
  */
 export const Service = nodeClass({
     abstract: true,

package/dist/schema/modules/service/functions/delete-service.d.ts

@@ -6,4 +6,4 @@ export declare const deleteService: import("@astrale-os/sdk/schema").Method<impo
         kind: "deleting";
         retryAfterMs: number;
     };
-}, "authenticated", false, false, undefined>>;
+}, "authenticated", false, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/deploy-service.d.ts

@@ -96,4 +96,4 @@ export declare const deployService: import("@astrale-os/sdk/schema").Method<impo
             } | undefined;
         };
     };
-}, "authenticated", true, false, undefined>>;
+}, "authenticated", true, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/describe-hosting.d.ts

@@ -4,4 +4,4 @@ export declare const describeHosting: import("@astrale-os/sdk/schema").Method<im
     readonly value: {
         routingDomain: string;
     };
-}, "authenticated", true, false, undefined>>;
+}, "authenticated", true, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/list-service-deployments.d.ts

@@ -27,4 +27,4 @@ export declare const listServiceDeployments: import("@astrale-os/sdk/schema").Me
             } | undefined;
         }[];
     };
-}, "authenticated", true, false, undefined>>;
+}, "authenticated", true, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/list-service-logs.d.ts

@@ -10,4 +10,4 @@ export declare const listServiceLogs: import("@astrale-os/sdk/schema").Method<im
         level: string;
         line: string;
     }[];
-}, "authenticated", false, false, undefined>>;
+}, "authenticated", false, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/list-service-schedules.d.ts

@@ -1,4 +1,4 @@
 export declare const listServiceSchedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';
     readonly value: string[];
-}, "authenticated", false, false, undefined>>;
+}, "authenticated", false, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/list-service-secret-names.d.ts

@@ -1,4 +1,4 @@
 export declare const listServiceSecretNames: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
     readonly mode: 'value';
     readonly value: string[];
-}, "authenticated", false, false, undefined>>;
+}, "authenticated", false, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/promote-service.d.ts

@@ -11,4 +11,4 @@ export declare const promoteService: import("@astrale-os/sdk/schema").Method<imp
     } | {
         current: string;
     };
-}, "authenticated", false, false, undefined>>;
+}, "authenticated", false, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/replace-service-schedules.d.ts

@@ -8,4 +8,4 @@ export declare const replaceServiceSchedules: import("@astrale-os/sdk/schema").M
         kind: "rejected";
         reason: "invalid-schedule" | "service-unavailable";
     };
-}, "authenticated", false, false, undefined>>;
+}, "authenticated", false, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/set-service-secret.d.ts

@@ -11,4 +11,4 @@ export declare const setServiceSecret: import("@astrale-os/sdk/schema").Method<i
     } | {
         name: string;
     };
-}, "authenticated", false, false, undefined>>;
+}, "authenticated", false, false, undefined, undefined>>;

package/dist/schema/modules/service/functions/transfer-service.d.ts

@@ -11,4 +11,4 @@ export declare const transferService: import("@astrale-os/sdk/schema").Method<im
         message: string;
         retryAfter?: string | undefined;
     };
-}, "authenticated", false, false, undefined>>;
+}, "authenticated", false, false, undefined, undefined>>;

package/dist/schema/schema.d.ts

@@ -143,13 +143,13 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                             } | undefined;
                         };
                     };
-                }, "authenticated", true, false, undefined>>;
+                }, "authenticated", true, false, undefined, undefined>>;
                 hosting: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                     readonly mode: 'value';
                     readonly value: {
                         routingDomain: string;
                     };
-                }, "authenticated", true, false, undefined>>;
+                }, "authenticated", true, false, undefined, undefined>>;
                 list: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     project?: string | undefined;
                     environment?: string | undefined;
@@ -178,7 +178,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                             } | undefined;
                         }[];
                     };
-                }, "authenticated", true, false, undefined>>;
+                }, "authenticated", true, false, undefined, undefined>>;
                 promote: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     label: string;
                 }, {
@@ -191,7 +191,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                     } | {
                         current: string;
                     };
-                }, "authenticated", false, false, undefined>>;
+                }, "authenticated", false, false, undefined, undefined>>;
                 transfer: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     owner: string;
                 }, {
@@ -204,7 +204,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                     } | {
                         owner: string;
                     };
-                }, "authenticated", false, false, undefined>>;
+                }, "authenticated", false, false, undefined, undefined>>;
                 setSecret: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     name: string;
                     value: string;
@@ -218,11 +218,11 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         message: string;
                         retryAfter?: string | undefined;
                     };
-                }, "authenticated", false, false, undefined>>;
+                }, "authenticated", false, false, undefined, undefined>>;
                 secrets: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                     readonly mode: 'value';
                     readonly value: string[];
-                }, "authenticated", false, false, undefined>>;
+                }, "authenticated", false, false, undefined, undefined>>;
                 setSchedule: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     crons: string[];
                 }, {
@@ -233,11 +233,11 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         kind: "rejected";
                         reason: "invalid-schedule" | "service-unavailable";
                     };
-                }, "authenticated", false, false, undefined>>;
+                }, "authenticated", false, false, undefined, undefined>>;
                 schedules: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                     readonly mode: 'value';
                     readonly value: string[];
-                }, "authenticated", false, false, undefined>>;
+                }, "authenticated", false, false, undefined, undefined>>;
                 logs: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<{
                     label?: string | undefined;
                     tail?: number | undefined;
@@ -250,7 +250,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         level: string;
                         line: string;
                     }[];
-                }, "authenticated", false, false, undefined>>;
+                }, "authenticated", false, false, undefined, undefined>>;
                 delete: import("@astrale-os/sdk/schema").Method<import("@astrale-os/sdk/schema").CallableProjection<Record<string, never>, {
                     readonly mode: 'value';
                     readonly value: {
@@ -259,7 +259,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         kind: "deleting";
                         retryAfterMs: number;
                     };
-                }, "authenticated", false, false, undefined>>;
+                }, "authenticated", false, false, undefined, undefined>>;
             };
             readonly policies: {
                 read: () => import("@astrale-os/sdk/schema").Policy;
@@ -273,7 +273,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
             readonly properties: never;
             readonly source: {
                 readonly as: "service";
-                readonly outgoing: "1";
+                readonly outgoing: "0..1";
             };
             readonly target: {
                 readonly as: "owner";
@@ -465,7 +465,7 @@ export declare const schema: import("@astrale-os/sdk/schema").AuthoredSchema<"se
                         kind: "retiring";
                         retryAfterMs: number;
                     };
-                }, "authenticated", false, false, undefined>>;
+                }, "authenticated", false, false, undefined, undefined>>;
             };
             readonly policies: {
                 read: () => import("@astrale-os/sdk/schema").Policy;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-domains/services",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/astrale-os/domains.git",
@@ -31,15 +31,15 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@astrale-os/sdk": "0.6.0-beta.31",
+    "@astrale-os/sdk": "0.6.0-beta.38",
     "zod": "4.4.3"
   },
   "devDependencies": {
-    "@astrale-os/adapter-astrale": "0.5.0-beta.179",
-    "@astrale-os/adapter-cloudflare": "0.5.0-beta.186",
+    "@astrale-os/adapter-astrale": "0.5.0-beta.186",
+    "@astrale-os/adapter-cloudflare": "0.5.0-beta.193",
     "@astrale-os/ox": ">=0.1.4 <1.0.0",
-    "@astrale-os/shell": "0.7.0-beta.5",
-    "@astrale-os/shell-react": "0.6.0-beta.4",
+    "@astrale-os/shell": "0.7.0-beta.7",
+    "@astrale-os/shell-react": "0.6.0-beta.8",
     "@astrale-os/ui": "1.0.0-beta.37",
     "@cloudflare/workers-types": "5.20260821.1",
     "@tailwindcss/vite": "^4.3.3",