@astrale-os/adapter-cloudflare 0.1.2 → 0.1.4

package/dist/astrale.d.ts

@@ -0,0 +1,27 @@
+/**
+ * `astrale(envs)` — the Astrale-managed deployment adapter.
+ *
+ * Ships the domain THROUGH the platform instead of to the author's own cloud
+ * account: `deploy` builds the same single-module workerd bundle the Cloudflare
+ * adapter ships (shared codegen + `wrangler deploy --dry-run`), then publishes
+ * it via the admin domain's catalog — `DomainPublished.register` →
+ * `::release { bundleBase64 }` (the worker stages the bytes in the platform
+ * registry) → `::install { instanceId, source: { kind: 'package' } }`, which
+ * deploys it as a host-local Service next to the target instance and installs
+ * the domain on it. No Cloudflare account, no wrangler auth — the only
+ * credential is the author's Astrale identity, supplied by the `astrale` CLI
+ * session this adapter shells out to (the same trust source as
+ * `astrale instance install`).
+ *
+ * `watch` is identical to the Cloudflare adapter's local dev (wrangler dev on
+ * localhost) — managed deploys change WHERE the worker runs, not how you
+ * iterate locally.
+ *
+ * Current limits (v1): client/ SPA assets are not shipped (managed packages
+ * serve no `/ui` yet) and no runtime secrets reach the service — the bundle
+ * must be self-contained (its signing identity is baked in by the codegen).
+ */
+import type { DomainAdapter } from '@astrale-os/devkit';
+import type { AstraleParams } from './params';
+export declare function astrale(envs: Record<string, AstraleParams>): DomainAdapter<AstraleParams>;
+//# sourceMappingURL=astrale.d.ts.map

package/dist/astrale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"astrale.d.ts","sourceRoot":"","sources":["../src/astrale.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAQvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAU7C,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,aAAa,CAAC,aAAa,CAAC,CAiGzF"}

package/dist/astrale.js

@@ -0,0 +1,167 @@
+/**
+ * `astrale(envs)` — the Astrale-managed deployment adapter.
+ *
+ * Ships the domain THROUGH the platform instead of to the author's own cloud
+ * account: `deploy` builds the same single-module workerd bundle the Cloudflare
+ * adapter ships (shared codegen + `wrangler deploy --dry-run`), then publishes
+ * it via the admin domain's catalog — `DomainPublished.register` →
+ * `::release { bundleBase64 }` (the worker stages the bytes in the platform
+ * registry) → `::install { instanceId, source: { kind: 'package' } }`, which
+ * deploys it as a host-local Service next to the target instance and installs
+ * the domain on it. No Cloudflare account, no wrangler auth — the only
+ * credential is the author's Astrale identity, supplied by the `astrale` CLI
+ * session this adapter shells out to (the same trust source as
+ * `astrale instance install`).
+ *
+ * `watch` is identical to the Cloudflare adapter's local dev (wrangler dev on
+ * localhost) — managed deploys change WHERE the worker runs, not how you
+ * iterate locally.
+ *
+ * Current limits (v1): client/ SPA assets are not shipped (managed packages
+ * serve no `/ui` yet) and no runtime secrets reach the service — the bundle
+ * must be self-contained (its signing identity is baked in by the codegen).
+ */
+import { defineAdapter } from '@astrale-os/devkit';
+import { spawn } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { logTo, prepare } from './cloudflare';
+import { runWranglerBundle, runWranglerDev } from './wrangler-cli';
+const DEFAULT_PORT = 8787;
+const DEFAULT_ADMIN_URL = 'https://admin.eu.astrale.ai/api';
+const DEFAULT_REGION = 'eu';
+const ADMIN_ORIGIN = 'admin.astrale.ai';
+export function astrale(envs) {
+    return defineAdapter({
+        name: 'astrale',
+        envs,
+        // Local dev is unchanged: wrangler dev on localhost. Managed deploys change
+        // WHERE the worker ships, not the inner loop.
+        async watch(params, ctx) {
+            const { configPath } = await prepare({ ...(params.vars ? { vars: params.vars } : {}), port: params.port ?? DEFAULT_PORT }, ctx, 'dev');
+            const handle = await runWranglerDev({
+                projectDir: ctx.projectDir,
+                configPath,
+                port: params.port ?? DEFAULT_PORT,
+                remote: false,
+                onReload: ctx.onReload,
+                onLog: logTo(),
+            });
+            return { url: handle.url, stop: handle.stop };
+        },
+        async deploy(params, ctx) {
+            const log = logTo();
+            if (!params.instance) {
+                throw new Error(`astrale adapter: this env has no "instance" — managed deploys need the target ` +
+                    `instance slug (e.g. prod: { instance: '<your-instance-slug>' }).`);
+            }
+            if (ctx.clientDir) {
+                log(`client/ detected — managed deploys do not ship SPA assets yet; ` +
+                    `/ui will not serve on the managed service (functions/methods are unaffected).`);
+            }
+            // 1. Codegen + bundle: the exact worker module a Cloudflare deploy would
+            //    ship, produced locally with `wrangler deploy --dry-run` (no auth).
+            //    `clientDir` is stripped: managed packages don't ship SPA assets yet,
+            //    and leaving it in would put a dangling `assets.directory` (the
+            //    unbuilt dist-client) into the generated config.
+            const { clientDir: _omitted, ...bundleCtx } = ctx;
+            const { configPath } = await prepare({}, bundleCtx, 'dev');
+            const outDir = join(ctx.projectDir, '.astrale', 'dist-managed');
+            const bundlePath = await runWranglerBundle({
+                projectDir: ctx.projectDir,
+                configPath,
+                outDir,
+                onLog: log,
+            });
+            const bundle = await readFile(bundlePath);
+            // 2. Publish through the platform, authenticated by the author's astrale
+            //    CLI session. The release payload rides STDIN — a bundle is megabytes
+            //    of base64, far past argv limits.
+            const name = params.name ?? packageNameFor(ctx.domain.origin);
+            const adminUrl = params.adminUrl ?? DEFAULT_ADMIN_URL;
+            const version = `0.0.0-managed.${Date.now()}`;
+            log(`registering "${name}" (${ctx.domain.origin}) in the platform catalog…`);
+            await astraleCall(ctx.projectDir, params, adminUrl, {
+                path: `/${ADMIN_ORIGIN}/class.DomainPublished/register`,
+                data: { origin: ctx.domain.origin, name },
+            });
+            log(`publishing ${name}@${version} (${bundle.length} bytes)…`);
+            await astraleCall(ctx.projectDir, params, adminUrl, {
+                path: `/admin/domains/${name}::release`,
+                data: { version, bundleBase64: bundle.toString('base64'), makeCurrent: true },
+                viaStdin: true,
+            });
+            log(`installing on instance "${params.instance}"…`);
+            const installed = (await astraleCall(ctx.projectDir, params, adminUrl, {
+                path: `/admin/domains/${name}::install`,
+                data: { instanceId: params.instance, source: { kind: 'package' } },
+            }));
+            if (installed.error || installed.state !== 'installed') {
+                throw new Error(`managed install failed: state=${installed.state ?? '?'} error=${installed.error ?? '?'}`);
+            }
+            if (!installed.serviceSlug) {
+                throw new Error('managed install returned no serviceSlug — cannot derive the service URL');
+            }
+            const region = params.region ?? DEFAULT_REGION;
+            return { url: `https://${installed.serviceSlug}.svc.${region}.astrale.ai` };
+        },
+        secretsFile(params) {
+            return params.secrets;
+        },
+    });
+}
+/** Catalog package name from the origin: first DNS label (e.g. `my-notes.example.dev` → `my-notes`). */
+function packageNameFor(origin) {
+    const label = origin.split('.')[0] ?? origin;
+    return label.toLowerCase().replace(/[^a-z0-9-]+/g, '-');
+}
+/**
+ * Invoke the user's `astrale` CLI for one platform call and parse its JSON
+ * output. The CLI owns identity (IdP session, audience scoping, delegation
+ * minting) — reimplementing that here would fork the trust path.
+ */
+async function astraleCall(projectDir, params, adminUrl, call) {
+    const args = ['call', call.path, '--url', adminUrl, '--json'];
+    if (params.identity)
+        args.push('--as', params.identity);
+    const payload = JSON.stringify(call.data);
+    if (!call.viaStdin)
+        args.push('--data', payload);
+    const { code, out } = await new Promise((resolve, reject) => {
+        const child = spawn(astraleBin(projectDir), args, {
+            cwd: projectDir,
+            stdio: [call.viaStdin ? 'pipe' : 'ignore', 'pipe', 'pipe'],
+        });
+        let out = '';
+        child.stdout?.on('data', (b) => (out += b.toString()));
+        child.stderr?.on('data', (b) => (out += b.toString()));
+        child.on('exit', (c) => resolve({ code: c ?? 1, out }));
+        child.on('error', reject);
+        if (call.viaStdin) {
+            child.stdin?.write(payload);
+            child.stdin?.end();
+        }
+    });
+    if (code !== 0) {
+        throw new Error(`astrale call ${call.path} failed (exit ${code}): ${out.trim().slice(0, 500)}\n` +
+            `Is the astrale CLI installed and signed in? (astrale auth login)`);
+    }
+    try {
+        return JSON.parse(out);
+    }
+    catch {
+        throw new Error(`astrale call ${call.path}: could not parse CLI output: ${out.slice(0, 300)}`);
+    }
+}
+/** The user's astrale CLI: ~/.astrale/bin/astrale when present, else PATH. */
+function astraleBin(_projectDir) {
+    const home = process.env.HOME;
+    if (home) {
+        const installed = join(home, '.astrale', 'bin', 'astrale');
+        if (existsSync(installed))
+            return installed;
+    }
+    return 'astrale';
+}
+//# sourceMappingURL=astrale.js.map

package/dist/astrale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"astrale.js","sourceRoot":"","sources":["../src/astrale.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAElE,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,iBAAiB,GAAG,iCAAiC,CAAA;AAC3D,MAAM,cAAc,GAAG,IAAI,CAAA;AAC3B,MAAM,YAAY,GAAG,kBAAkB,CAAA;AAEvC,MAAM,UAAU,OAAO,CAAC,IAAmC;IACzD,OAAO,aAAa,CAAgB;QAClC,IAAI,EAAE,SAAS;QACf,IAAI;QAEJ,4EAA4E;QAC5E,8CAA8C;QAC9C,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG;YACrB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,OAAO,CAClC,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,YAAY,EAAE,EACpF,GAAG,EACH,KAAK,CACN,CAAA;YACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;gBAClC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU;gBACV,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,YAAY;gBACjC,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,KAAK,EAAE;aACf,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;QAC/C,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG;YACtB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAA;YACnB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,gFAAgF;oBAC9E,kEAAkE,CACrE,CAAA;YACH,CAAC;YACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,GAAG,CACD,iEAAiE;oBAC/D,+EAA+E,CAClF,CAAA;YACH,CAAC;YAED,yEAAyE;YACzE,wEAAwE;YACxE,0EAA0E;YAC1E,oEAAoE;YACpE,qDAAqD;YACrD,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,SAAS,EAAE,GAAG,GAAG,CAAA;YACjD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;YAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC,CAAA;YAC/D,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;gBACzC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU;gBACV,MAAM;gBACN,KAAK,EAAE,GAAG;aACX,CAAC,CAAA;YACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAA;YAEzC,yEAAyE;YACzE,0EAA0E;YAC1E,sCAAsC;YACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAA;YACrD,MAAM,OAAO,GAAG,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE,CAAA;YAE7C,GAAG,CAAC,gBAAgB,IAAI,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,4BAA4B,CAAC,CAAA;YAC5E,MAAM,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAClD,IAAI,EAAE,IAAI,YAAY,iCAAiC;gBACvD,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE;aAC1C,CAAC,CAAA;YAEF,GAAG,CAAC,cAAc,IAAI,IAAI,OAAO,KAAK,MAAM,CAAC,MAAM,UAAU,CAAC,CAAA;YAC9D,MAAM,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE;gBAClD,IAAI,EAAE,kBAAkB,IAAI,WAAW;gBACvC,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE;gBAC7E,QAAQ,EAAE,IAAI;aACf,CAAC,CAAA;YAEF,GAAG,CAAC,2BAA2B,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAA;YACnD,MAAM,SAAS,GAAG,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACrE,IAAI,EAAE,kBAAkB,IAAI,WAAW;gBACvC,IAAI,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;aACnE,CAAC,CAAoE,CAAA;YAEtE,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBACvD,MAAM,IAAI,KAAK,CACb,iCAAiC,SAAS,CAAC,KAAK,IAAI,GAAG,UAAU,SAAS,CAAC,KAAK,IAAI,GAAG,EAAE,CAC1F,CAAA;YACH,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;YAC5F,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,cAAc,CAAA;YAC9C,OAAO,EAAE,GAAG,EAAE,WAAW,SAAS,CAAC,WAAW,QAAQ,MAAM,aAAa,EAAE,CAAA;QAC7E,CAAC;QAED,WAAW,CAAC,MAAM;YAChB,OAAO,MAAM,CAAC,OAAO,CAAA;QACvB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,wGAAwG;AACxG,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAA;IAC5C,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAA;AACzD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,WAAW,CACxB,UAAkB,EAClB,MAAqB,EACrB,QAAgB,EAChB,IAAyD;IAEzD,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC7D,IAAI,MAAM,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,CAAC,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IAEhD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,OAAO,CAAgC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACzF,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE;YAChD,GAAG,EAAE,UAAU;YACf,KAAK,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAC3D,CAAC,CAAA;QACF,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC9D,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC9D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QACvD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACzB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YAC3B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAA;QACpB,CAAC;IACH,CAAC,CAAC,CAAA;IACF,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,CAAC,IAAI,iBAAiB,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI;YAC9E,kEAAkE,CACrE,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,IAAI,iCAAiC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,UAAU,CAAC,WAAmB;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA;IAC7B,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,CAAA;QAC1D,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IAC7C,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/cloudflare.d.ts

@@ -8,8 +8,15 @@
  * `wrangler secret bulk`. Both `watch` and `deploy` return the URL the devkit
  * prints and `astrale instance install <url>` consumes.
  */
-import type { DomainAdapter } from '@astrale-os/devkit';
+import type { DeployCtx, DomainAdapter, WatchCtx } from '@astrale-os/devkit';
 import type { CloudflareParams } from './params';
 export declare function cloudflare(envs: Record<string, CloudflareParams>): DomainAdapter<CloudflareParams>;
+export declare function prepare(params: CloudflareParams, ctx: WatchCtx | DeployCtx, mode: 'dev' | 'deploy'): Promise<{
+    configPath: string;
+    fallbackConfigPath?: string;
+    port: number;
+    workerName: string;
+}>;
 export declare function workerName(params: CloudflareParams, origin: string): string;
+export declare function logTo(): (line: string) => void;
 //# sourceMappingURL=cloudflare.d.ts.map

package/dist/cloudflare.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../src/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAa,aAAa,EAAY,MAAM,oBAAoB,CAAA;AAM5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAUhD,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACrC,aAAa,CAAC,gBAAgB,CAAC,CAsDjC;AAsHD,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAsB3E"}
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../src/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAM5E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAUhD,wBAAgB,UAAU,CACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GACrC,aAAa,CAAC,gBAAgB,CAAC,CAsDjC;AAID,wBAAsB,OAAO,CAC3B,MAAM,EAAE,gBAAgB,EACxB,GAAG,EAAE,QAAQ,GAAG,SAAS,EACzB,IAAI,EAAE,KAAK,GAAG,QAAQ,GACrB,OAAO,CAAC;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CA0EhG;AAoCD,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAsB3E;AAED,wBAAgB,KAAK,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAE9C"}

package/dist/cloudflare.js

@@ -68,7 +68,7 @@ export function cloudflare(envs) {
     });
 }
 // ── codegen orchestration ──────────────────────────────────────────────────
-async function prepare(params, ctx, mode) {
+export async function prepare(params, ctx, mode) {
     const astraleDir = join(ctx.projectDir, '.astrale');
     await mkdir(astraleDir, { recursive: true });
     await ensureIdentity(astraleDir, ctx.domain.origin);
@@ -180,7 +180,7 @@ export function workerName(params, origin) {
         .slice(0, 54)
         .replace(/^-+|-+$/g, '');
 }
-function logTo() {
+export function logTo() {
     return (line) => process.stderr.write(`\x1b[2m  ${line}\x1b[0m\n`);
 }
 //# sourceMappingURL=cloudflare.js.map

package/dist/cloudflare.js.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../src/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAElF,MAAM,YAAY,GAAG,IAAI,CAAA;AAEzB,MAAM,UAAU,UAAU,CACxB,IAAsC;IAEtC,OAAO,aAAa,CAAmB;QACrC,IAAI,EAAE,YAAY;QAClB,IAAI;QAEJ,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG;YACrB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YAC9D,IAAI,GAAG,CAAC,SAAS;gBAAE,MAAM,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;YAC5E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;gBAClC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU;gBACV,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,KAAK,EAAE;aACf,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;QAC/C,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG;YACtB,MAAM,EACJ,UAAU,EACV,kBAAkB,EAClB,UAAU,EAAE,IAAI,GACjB,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;YACxC,IAAI,GAAG,CAAC,SAAS;gBAAE,MAAM,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;YAC5E,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC;gBACtC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU;gBACV,UAAU,EAAE,IAAI;gBAChB,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,KAAK,EAAE,KAAK,EAAE;aACf,CAAC,CAAA;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,cAAc,CAAC;oBACnB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,UAAU;oBACV,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,KAAK,EAAE,KAAK,EAAE;iBACf,CAAC,CAAA;YACJ,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,oEAAoE;YACpE,mDAAmD;YACnD,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;YACjC,OAAO,EAAE,GAAG,EAAE,CAAA;QAChB,CAAC;QAED,WAAW,CAAC,MAAM;YAChB,OAAO,MAAM,CAAC,OAAO,CAAA;QACvB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAE9E,KAAK,UAAU,OAAO,CACpB,MAAwB,EACxB,GAAyB,EACzB,IAAsB;IAEtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IACnD,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEnD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,6EAA6E;IAC7E,wEAAwE;IACxE,6EAA6E;IAC7E,uCAAuC;IACvC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACvD,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAExC,MAAM,SAAS,CACb,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EACjC,mBAAmB,CAAC;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QACzB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ;QAC7B,QAAQ;QACR,YAAY;QACZ,SAAS;KACV,CAAC,CACH,CAAA;IAED,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,SAAS,GAAG,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAE3F,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;KAC9E,CAAA;IAED,MAAM,UAAU,GAAG;QACjB,UAAU,EAAE,IAAI;QAChB,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,SAAS;QACT,IAAI;QACJ,4EAA4E;QAC5E,6EAA6E;QAC7E,oEAAoE;QACpE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAA;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,2EAA2E;IAC3E,gFAAgF;IAChF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;IACzD,MAAM,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEzF,IAAI,kBAAsC,CAAA;IAC1C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,kBAAkB,GAAG,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAA;QACnE,MAAM,SAAS,CACb,kBAAkB,EAClB,sBAAsB,CAAC,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAC9D,CAAA;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,YAAY;QACjC,UAAU,EAAE,IAAI;KACjB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,KAA6B,EAC7B,SAAS,GAAG,MAAM;IAElB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IACvC,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;YACtD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAM;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,+BAA+B,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,2BAA2B,CAAC,CAAA;YAC7F,OAAM;QACR,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAA;YACb,KAAK,CAAC,kEAAkE,CAAC,CAAA;QAC3E,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,sBAAsB,CAAA;AAE7C,MAAM,UAAU,UAAU,CAAC,MAAwB,EAAE,MAAc;IACjE,2EAA2E;IAC3E,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CACb,+CAA+C,MAAM,CAAC,UAAU,yBAAyB;gBACvF,yFAAyF;gBACzF,kCAAkC,CACrC,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAA;IAC1B,CAAC;IACD,gFAAgF;IAChF,gFAAgF;IAChF,gCAAgC;IAChC,OAAO,MAAM;SACV,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;AAC5B,CAAC;AAED,SAAS,KAAK;IACZ,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,WAAW,CAAC,CAAA;AAC5E,CAAC"}
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../src/cloudflare.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIhC,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAElF,MAAM,YAAY,GAAG,IAAI,CAAA;AAEzB,MAAM,UAAU,UAAU,CACxB,IAAsC;IAEtC,OAAO,aAAa,CAAmB;QACrC,IAAI,EAAE,YAAY;QAClB,IAAI;QAEJ,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG;YACrB,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAA;YAC9D,IAAI,GAAG,CAAC,SAAS;gBAAE,MAAM,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;YAC5E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;gBAClC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU;gBACV,IAAI;gBACJ,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAE,KAAK,EAAE;aACf,CAAC,CAAA;YACF,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;QAC/C,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG;YACtB,MAAM,EACJ,UAAU,EACV,kBAAkB,EAClB,UAAU,EAAE,IAAI,GACjB,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;YACxC,IAAI,GAAG,CAAC,SAAS;gBAAE,MAAM,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;YAC5E,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC;gBACtC,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,UAAU;gBACV,UAAU,EAAE,IAAI;gBAChB,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChD,KAAK,EAAE,KAAK,EAAE;aACf,CAAC,CAAA;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxC,MAAM,cAAc,CAAC;oBACnB,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,UAAU;oBACV,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,KAAK,EAAE,KAAK,EAAE;iBACf,CAAC,CAAA;YACJ,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,oEAAoE;YACpE,mDAAmD;YACnD,MAAM,aAAa,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;YACjC,OAAO,EAAE,GAAG,EAAE,CAAA;QAChB,CAAC;QAED,WAAW,CAAC,MAAM;YAChB,OAAO,MAAM,CAAC,OAAO,CAAA;QACvB,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAwB,EACxB,GAAyB,EACzB,IAAsB;IAEtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAA;IACnD,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAEnD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAClD,6EAA6E;IAC7E,wEAAwE;IACxE,6EAA6E;IAC7E,uCAAuC;IACvC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;IACvD,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;IAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAExC,MAAM,SAAS,CACb,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,EACjC,mBAAmB,CAAC;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QACzB,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ;QAC7B,QAAQ;QACR,YAAY;QACZ,SAAS;KACV,CAAC,CACH,CAAA;IAED,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,2EAA2E;IAC3E,uEAAuE;IACvE,kEAAkE;IAClE,MAAM,SAAS,GAAG,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IAE3F,0EAA0E;IAC1E,4EAA4E;IAC5E,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;KAC9E,CAAA;IAED,MAAM,UAAU,GAAG;QACjB,UAAU,EAAE,IAAI;QAChB,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,SAAS;QACT,IAAI;QACJ,4EAA4E;QAC5E,6EAA6E;QAC7E,oEAAoE;QACpE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAA;IAED,+EAA+E;IAC/E,8EAA8E;IAC9E,2EAA2E;IAC3E,gFAAgF;IAChF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;IACzD,MAAM,SAAS,CAAC,UAAU,EAAE,sBAAsB,CAAC,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAEzF,IAAI,kBAAsC,CAAA;IAC1C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,kBAAkB,GAAG,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAA;QACnE,MAAM,SAAS,CACb,kBAAkB,EAClB,sBAAsB,CAAC,EAAE,GAAG,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAC9D,CAAA;IACH,CAAC;IAED,OAAO;QACL,UAAU;QACV,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,YAAY;QACjC,UAAU,EAAE,IAAI;KACjB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAW,EACX,KAA6B,EAC7B,SAAS,GAAG,MAAM;IAElB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;IACvC,IAAI,MAAM,GAAG,KAAK,CAAA;IAClB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAA;YACtD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAM;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,+BAA+B,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,2BAA2B,CAAC,CAAA;YAC7F,OAAM;QACR,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,IAAI,CAAA;YACb,KAAK,CAAC,kEAAkE,CAAC,CAAA;QAC3E,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAAG,sBAAsB,CAAA;AAE7C,MAAM,UAAU,UAAU,CAAC,MAAwB,EAAE,MAAc;IACjE,2EAA2E;IAC3E,8EAA8E;IAC9E,wEAAwE;IACxE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CACb,+CAA+C,MAAM,CAAC,UAAU,yBAAyB;gBACvF,yFAAyF;gBACzF,kCAAkC,CACrC,CAAA;QACH,CAAC;QACD,OAAO,MAAM,CAAC,UAAU,CAAA;IAC1B,CAAC;IACD,gFAAgF;IAChF,gFAAgF;IAChF,gCAAgC;IAChC,OAAO,MAAM;SACV,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SACZ,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;AAC5B,CAAC;AAED,MAAM,UAAU,KAAK;IACnB,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,WAAW,CAAC,CAAA;AAC5E,CAAC"}

package/dist/index.d.ts

@@ -12,6 +12,7 @@
  * `dev` runs `wrangler dev` locally; an env with no `route` ships to
  * `*.workers.dev`; an env with a `route` ships to that custom domain.
  */
+export { astrale } from './astrale';
 export { cloudflare } from './cloudflare';
-export type { CloudflareParams } from './params';
+export type { AstraleParams, CloudflareParams } from './params';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,YAAY,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA"}

package/dist/index.js

@@ -12,5 +12,6 @@
  * `dev` runs `wrangler dev` locally; an env with no `route` ships to
  * `*.workers.dev`; an env with a `route` ships to that custom domain.
  */
+export { astrale } from './astrale';
 export { cloudflare } from './cloudflare';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA"}

package/dist/params.d.ts

@@ -47,4 +47,27 @@ export interface CloudflareParams {
      */
     wrangler?: Record<string, unknown>;
 }
+/** Params for the Astrale-managed adapter (`astrale(envs)`). */
+export interface AstraleParams {
+    /**
+     * Target instance slug the domain installs onto (e.g. `'bryan-e2e5'`).
+     * Required for `deploy` (managed publish + install); ignored by `watch`
+     * (local dev) — so dev-only envs may omit it.
+     */
+    instance?: string;
+    /** Catalog package name. Default: the origin's first DNS label. */
+    name?: string;
+    /** Admin kernel URL the publish calls target. Default the platform admin. */
+    adminUrl?: string;
+    /** Routing region of the `.svc` service URL. Default `'eu'`. */
+    region?: string;
+    /** CLI identity (`--as`) for the publish calls. Default: the CLI's active identity. */
+    identity?: string;
+    /** Gitignored secrets file — injected ONLY into local `watch` (managed services receive no secrets yet). */
+    secrets?: string;
+    /** Local dev port for `wrangler dev`. Default 8787. */
+    port?: number;
+    /** Extra plain vars for local `watch`. */
+    vars?: Record<string, string>;
+}
 //# sourceMappingURL=params.d.ts.map

package/dist/params.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../src/params.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC"}
+{"version":3,"file":"params.d.ts","sourceRoot":"","sources":["../src/params.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,2EAA2E;IAC3E,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,8DAA8D;IAC9D,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC7B;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,gEAAgE;AAChE,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mEAAmE;IACnE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,4GAA4G;IAC5G,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC9B"}

package/dist/wrangler-cli.d.ts

@@ -60,4 +60,15 @@ export declare function bulkPutSecrets(args: {
     secrets: Record<string, string>;
     onLog?: (line: string) => void;
 }): Promise<void>;
+/**
+ * Build the single-module worker bundle WITHOUT deploying — `wrangler deploy
+ * --dry-run --outdir` (no Cloudflare auth required). Returns the path of the
+ * bundled .js module (the managed adapter publishes its bytes).
+ */
+export declare function runWranglerBundle(args: {
+    projectDir: string;
+    configPath: string;
+    outDir: string;
+    onLog?: (line: string) => void;
+}): Promise<string>;
 //# sourceMappingURL=wrangler-cli.d.ts.map

package/dist/wrangler-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wrangler-cli.d.ts","sourceRoot":"","sources":["../src/wrangler-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkBH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,MAAM,IAAI,CAAA;IACpB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B,GAAG,OAAO,CAAC,SAAS,CAAC,CAkErB;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,qFAAqF;IACrF,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAKvC;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,EACtE,IAAI,EAAE,UAAU,GACf,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAwBvC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAO9E;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBhB"}
+{"version":3,"file":"wrangler-cli.d.ts","sourceRoot":"","sources":["../src/wrangler-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkBH,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,OAAO,CAAA;IACf,QAAQ,EAAE,MAAM,IAAI,CAAA;IACpB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B,GAAG,OAAO,CAAC,SAAS,CAAC,CAkErB;AAED,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,qFAAqF;IACrF,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,UAAU,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GACxC,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAKvC;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,EACtE,IAAI,EAAE,UAAU,GACf,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAwBvC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAO9E;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBhB;AAyCD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC/B,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB"}

package/dist/wrangler-cli.js

@@ -7,7 +7,7 @@
  * falling back to `npx wrangler`.
  */
 import { spawn } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { existsSync, readdirSync } from 'node:fs';
 import { mkdtemp, rm, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
@@ -182,4 +182,20 @@ async function stopChild(child) {
         }, 4000).unref?.();
     });
 }
+/**
+ * Build the single-module worker bundle WITHOUT deploying — `wrangler deploy
+ * --dry-run --outdir` (no Cloudflare auth required). Returns the path of the
+ * bundled .js module (the managed adapter publishes its bytes).
+ */
+export async function runWranglerBundle(args) {
+    const { cmd, prefix } = wranglerCommand(args.projectDir);
+    const { code, out } = await runCapture(cmd, [...prefix, 'deploy', '--dry-run', '--outdir', args.outDir, '--config', args.configPath], args.projectDir, args.onLog);
+    if (code !== 0)
+        throw new Error(`wrangler bundle failed (exit ${code}): ${out.slice(-400)}`);
+    const js = readdirSync(args.outDir).filter((f) => f.endsWith('.js'));
+    if (js.length === 0)
+        throw new Error(`wrangler bundle produced no .js in ${args.outDir}`);
+    const preferred = js.find((f) => f.startsWith('worker')) ?? js[0];
+    return join(args.outDir, preferred);
+}
 //# sourceMappingURL=wrangler-cli.js.map

package/dist/wrangler-cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"wrangler-cli.js","sourceRoot":"","sources":["../src/wrangler-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AACpC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEjE,SAAS,eAAe,CAAC,UAAkB;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IACxD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAA;AACtD,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAOpC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,YAAY,GAAG;QACnB,GAAG,MAAM;QACT,KAAK;QACL,UAAU;QACV,IAAI,CAAC,UAAU;QACf,QAAQ;QACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,kBAAkB;QAClB,MAAM;QACN,MAAM;QACN,WAAW;QACX,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE;QACrC,GAAG,EAAE,IAAI,CAAC,UAAU;QACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE;KACxD,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAA;IACnD,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAA;YACrC,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC/C,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,GAAG,IAAI,CAAA;oBACf,OAAO,CAAC,KAAK,CAAC,CAAA;gBAChB,CAAC;YACH,CAAC;iBAAM,IAAI,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,QAAQ,EAAE,CAAA;YACjB,CAAC;QACH,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,IAAI,IAAI,MAAM,IAAI,CAAC,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,CAAC,GAAG,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CAAC,CAAA;QACF,6EAA6E;QAC7E,mDAAmD;QACnD,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACzC,QAAQ,GAAG,IAAI,CAAA;gBACf,OAAO,CAAC,WAAW,CAAC,CAAA;YACtB,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;AAC9C,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAyC;IAEzC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,CAAC,UAAkB,EAAE,EAAE,CACpC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7F,OAAO,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAsE,EACtE,IAAgB;IAEhB,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAEjD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,KAAK,EAAE,CACV,oGAAoG,CACrG,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CACzF,CAAA;QACH,CAAC;QACD,CAAC;QAAA,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,UAAmB;IACnE,MAAM,YAAY,GAChB,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;QACtC,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC;QACvC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACxD,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAKpC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAC9B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACtC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACnD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CACpC,GAAG,EACH,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAChE,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,KAAK,CACX,CAAA;QACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,UAAU,CACjB,GAAW,EACX,IAAc,EACd,GAAW,EACX,KAA8B;IAE9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE;SACxD,CAAC,CAAA;QACF,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC3B,GAAG,IAAI,IAAI,CAAA;YACX,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAA;QACrE,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAC7D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAmB;IAC1C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAM;IACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACjC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrB,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAClD,OAAO,EAAE,CAAA;QACX,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"wrangler-cli.js","sourceRoot":"","sources":["../src/wrangler-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AAEjE,SAAS,eAAe,CAAC,UAAkB;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;IAClE,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IACxD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAA;AACtD,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAOpC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,YAAY,GAAG;QACnB,GAAG,MAAM;QACT,KAAK;QACL,UAAU;QACV,IAAI,CAAC,UAAU;QACf,QAAQ;QACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,kBAAkB;QAClB,MAAM;QACN,MAAM;QACN,WAAW;QACX,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACrC,CAAA;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE;QACrC,GAAG,EAAE,IAAI,CAAC,UAAU;QACpB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE;KACxD,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAA;IACnD,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAA;YACrC,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;gBAC/C,IAAI,KAAK,EAAE,CAAC;oBACV,QAAQ,GAAG,IAAI,CAAA;oBACf,OAAO,CAAC,KAAK,CAAC,CAAA;gBAChB,CAAC;YACH,CAAC;iBAAM,IAAI,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,QAAQ,EAAE,CAAA;YACjB,CAAC;QACH,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,IAAI,IAAI,MAAM,IAAI,CAAC,CAAC,CAAA;YAC1F,CAAC;QACH,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,CAAA;gBACf,MAAM,CAAC,GAAG,CAAC,CAAA;YACb,CAAC;QACH,CAAC,CAAC,CAAA;QACF,6EAA6E;QAC7E,mDAAmD;QACnD,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACzC,QAAQ,GAAG,IAAI,CAAA;gBACf,OAAO,CAAC,WAAW,CAAC,CAAA;YACtB,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAA;AAC9C,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAyC;IAEzC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,CAAC,UAAkB,EAAE,EAAE,CACpC,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7F,OAAO,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAsE,EACtE,IAAgB;IAEhB,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAEjD,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,KAAK,EAAE,CACV,oGAAoG,CACrG,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CACzF,CAAA;QACH,CAAC;QACD,CAAC;QAAA,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IAClD,CAAC;IAED,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,2DAA2D,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,UAAmB;IACnE,MAAM,YAAY,GAChB,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC;QACtC,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC;QACvC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACxD,OAAO,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAKpC;IACC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IAC9B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;IACtC,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA;QACnD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CACpC,GAAG,EACH,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAChE,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,KAAK,CACX,CAAA;QACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IACjD,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,SAAS,UAAU,CACjB,GAAW,EACX,IAAc,EACd,GAAW,EACX,KAA8B;IAE9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE;SACxD,CAAC,CAAA;QACF,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;YAC3B,GAAG,IAAI,IAAI,CAAA;YACX,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,IAAI,IAAI,CAAC,IAAI,EAAE;oBAAE,KAAK,EAAE,CAAC,IAAI,CAAC,CAAA;QACrE,CAAC,CAAA;QACD,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;QAC7D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAmB;IAC1C,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAM;IACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAA;QACjC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrB,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAClD,OAAO,EAAE,CAAA;QACX,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAA;IACpB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAKvC;IACC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,UAAU,CACpC,GAAG,EACH,CAAC,GAAG,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EACxF,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,KAAK,CACX,CAAA;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC5F,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IACpE,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;IACzF,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,CAAA;IAClE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;AACrC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/adapter-cloudflare",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Deploy an Astrale domain as a standalone Cloudflare Worker",
   "keywords": [
     "adapter",
@@ -28,7 +28,7 @@
   },
   "dependencies": {
     "jose": "^6.1.3",
-    "@astrale-os/devkit": "^0.1.2"
+    "@astrale-os/devkit": "^0.1.3"
   },
   "devDependencies": {
     "@astrale-os/ox": ">=0.1.0 <1.0.0",

package/src/astrale.ts

@@ -0,0 +1,200 @@
+/**
+ * `astrale(envs)` — the Astrale-managed deployment adapter.
+ *
+ * Ships the domain THROUGH the platform instead of to the author's own cloud
+ * account: `deploy` builds the same single-module workerd bundle the Cloudflare
+ * adapter ships (shared codegen + `wrangler deploy --dry-run`), then publishes
+ * it via the admin domain's catalog — `DomainPublished.register` →
+ * `::release { bundleBase64 }` (the worker stages the bytes in the platform
+ * registry) → `::install { instanceId, source: { kind: 'package' } }`, which
+ * deploys it as a host-local Service next to the target instance and installs
+ * the domain on it. No Cloudflare account, no wrangler auth — the only
+ * credential is the author's Astrale identity, supplied by the `astrale` CLI
+ * session this adapter shells out to (the same trust source as
+ * `astrale instance install`).
+ *
+ * `watch` is identical to the Cloudflare adapter's local dev (wrangler dev on
+ * localhost) — managed deploys change WHERE the worker runs, not how you
+ * iterate locally.
+ *
+ * Current limits (v1): client/ SPA assets are not shipped (managed packages
+ * serve no `/ui` yet) and no runtime secrets reach the service — the bundle
+ * must be self-contained (its signing identity is baked in by the codegen).
+ */
+
+import type { DomainAdapter } from '@astrale-os/devkit'
+
+import { defineAdapter } from '@astrale-os/devkit'
+import { spawn } from 'node:child_process'
+import { existsSync } from 'node:fs'
+import { readFile } from 'node:fs/promises'
+import { join } from 'node:path'
+
+import type { AstraleParams } from './params'
+
+import { logTo, prepare } from './cloudflare'
+import { runWranglerBundle, runWranglerDev } from './wrangler-cli'
+
+const DEFAULT_PORT = 8787
+const DEFAULT_ADMIN_URL = 'https://admin.eu.astrale.ai/api'
+const DEFAULT_REGION = 'eu'
+const ADMIN_ORIGIN = 'admin.astrale.ai'
+
+export function astrale(envs: Record<string, AstraleParams>): DomainAdapter<AstraleParams> {
+  return defineAdapter<AstraleParams>({
+    name: 'astrale',
+    envs,
+
+    // Local dev is unchanged: wrangler dev on localhost. Managed deploys change
+    // WHERE the worker ships, not the inner loop.
+    async watch(params, ctx) {
+      const { configPath } = await prepare(
+        { ...(params.vars ? { vars: params.vars } : {}), port: params.port ?? DEFAULT_PORT },
+        ctx,
+        'dev',
+      )
+      const handle = await runWranglerDev({
+        projectDir: ctx.projectDir,
+        configPath,
+        port: params.port ?? DEFAULT_PORT,
+        remote: false,
+        onReload: ctx.onReload,
+        onLog: logTo(),
+      })
+      return { url: handle.url, stop: handle.stop }
+    },
+
+    async deploy(params, ctx) {
+      const log = logTo()
+      if (!params.instance) {
+        throw new Error(
+          `astrale adapter: this env has no "instance" — managed deploys need the target ` +
+            `instance slug (e.g. prod: { instance: '<your-instance-slug>' }).`,
+        )
+      }
+      if (ctx.clientDir) {
+        log(
+          `client/ detected — managed deploys do not ship SPA assets yet; ` +
+            `/ui will not serve on the managed service (functions/methods are unaffected).`,
+        )
+      }
+
+      // 1. Codegen + bundle: the exact worker module a Cloudflare deploy would
+      //    ship, produced locally with `wrangler deploy --dry-run` (no auth).
+      //    `clientDir` is stripped: managed packages don't ship SPA assets yet,
+      //    and leaving it in would put a dangling `assets.directory` (the
+      //    unbuilt dist-client) into the generated config.
+      const { clientDir: _omitted, ...bundleCtx } = ctx
+      const { configPath } = await prepare({}, bundleCtx, 'dev')
+      const outDir = join(ctx.projectDir, '.astrale', 'dist-managed')
+      const bundlePath = await runWranglerBundle({
+        projectDir: ctx.projectDir,
+        configPath,
+        outDir,
+        onLog: log,
+      })
+      const bundle = await readFile(bundlePath)
+
+      // 2. Publish through the platform, authenticated by the author's astrale
+      //    CLI session. The release payload rides STDIN — a bundle is megabytes
+      //    of base64, far past argv limits.
+      const name = params.name ?? packageNameFor(ctx.domain.origin)
+      const adminUrl = params.adminUrl ?? DEFAULT_ADMIN_URL
+      const version = `0.0.0-managed.${Date.now()}`
+
+      log(`registering "${name}" (${ctx.domain.origin}) in the platform catalog…`)
+      await astraleCall(ctx.projectDir, params, adminUrl, {
+        path: `/${ADMIN_ORIGIN}/class.DomainPublished/register`,
+        data: { origin: ctx.domain.origin, name },
+      })
+
+      log(`publishing ${name}@${version} (${bundle.length} bytes)…`)
+      await astraleCall(ctx.projectDir, params, adminUrl, {
+        path: `/admin/domains/${name}::release`,
+        data: { version, bundleBase64: bundle.toString('base64'), makeCurrent: true },
+        viaStdin: true,
+      })
+
+      log(`installing on instance "${params.instance}"…`)
+      const installed = (await astraleCall(ctx.projectDir, params, adminUrl, {
+        path: `/admin/domains/${name}::install`,
+        data: { instanceId: params.instance, source: { kind: 'package' } },
+      })) as { serviceSlug?: string; state?: string; error?: string | null }
+
+      if (installed.error || installed.state !== 'installed') {
+        throw new Error(
+          `managed install failed: state=${installed.state ?? '?'} error=${installed.error ?? '?'}`,
+        )
+      }
+      if (!installed.serviceSlug) {
+        throw new Error('managed install returned no serviceSlug — cannot derive the service URL')
+      }
+      const region = params.region ?? DEFAULT_REGION
+      return { url: `https://${installed.serviceSlug}.svc.${region}.astrale.ai` }
+    },
+
+    secretsFile(params) {
+      return params.secrets
+    },
+  })
+}
+
+/** Catalog package name from the origin: first DNS label (e.g. `my-notes.example.dev` → `my-notes`). */
+function packageNameFor(origin: string): string {
+  const label = origin.split('.')[0] ?? origin
+  return label.toLowerCase().replace(/[^a-z0-9-]+/g, '-')
+}
+
+/**
+ * Invoke the user's `astrale` CLI for one platform call and parse its JSON
+ * output. The CLI owns identity (IdP session, audience scoping, delegation
+ * minting) — reimplementing that here would fork the trust path.
+ */
+async function astraleCall(
+  projectDir: string,
+  params: AstraleParams,
+  adminUrl: string,
+  call: { path: string; data: unknown; viaStdin?: boolean },
+): Promise<unknown> {
+  const args = ['call', call.path, '--url', adminUrl, '--json']
+  if (params.identity) args.push('--as', params.identity)
+  const payload = JSON.stringify(call.data)
+  if (!call.viaStdin) args.push('--data', payload)
+
+  const { code, out } = await new Promise<{ code: number; out: string }>((resolve, reject) => {
+    const child = spawn(astraleBin(projectDir), args, {
+      cwd: projectDir,
+      stdio: [call.viaStdin ? 'pipe' : 'ignore', 'pipe', 'pipe'],
+    })
+    let out = ''
+    child.stdout?.on('data', (b: Buffer) => (out += b.toString()))
+    child.stderr?.on('data', (b: Buffer) => (out += b.toString()))
+    child.on('exit', (c) => resolve({ code: c ?? 1, out }))
+    child.on('error', reject)
+    if (call.viaStdin) {
+      child.stdin?.write(payload)
+      child.stdin?.end()
+    }
+  })
+  if (code !== 0) {
+    throw new Error(
+      `astrale call ${call.path} failed (exit ${code}): ${out.trim().slice(0, 500)}\n` +
+        `Is the astrale CLI installed and signed in? (astrale auth login)`,
+    )
+  }
+  try {
+    return JSON.parse(out)
+  } catch {
+    throw new Error(`astrale call ${call.path}: could not parse CLI output: ${out.slice(0, 300)}`)
+  }
+}
+
+/** The user's astrale CLI: ~/.astrale/bin/astrale when present, else PATH. */
+function astraleBin(_projectDir: string): string {
+  const home = process.env.HOME
+  if (home) {
+    const installed = join(home, '.astrale', 'bin', 'astrale')
+    if (existsSync(installed)) return installed
+  }
+  return 'astrale'
+}

package/src/cloudflare.ts

@@ -85,7 +85,7 @@ export function cloudflare(
 
 // ── codegen orchestration ──────────────────────────────────────────────────
 
-async function prepare(
+export async function prepare(
   params: CloudflareParams,
   ctx: WatchCtx | DeployCtx,
   mode: 'dev' | 'deploy',
@@ -223,6 +223,6 @@ export function workerName(params: CloudflareParams, origin: string): string {
     .replace(/^-+|-+$/g, '')
 }
 
-function logTo(): (line: string) => void {
+export function logTo(): (line: string) => void {
   return (line: string) => process.stderr.write(`\x1b[2m  ${line}\x1b[0m\n`)
 }

package/src/index.ts

@@ -13,5 +13,6 @@
  * `*.workers.dev`; an env with a `route` ships to that custom domain.
  */
 
+export { astrale } from './astrale'
 export { cloudflare } from './cloudflare'
-export type { CloudflareParams } from './params'
+export type { AstraleParams, CloudflareParams } from './params'

package/src/params.ts

@@ -47,3 +47,27 @@ export interface CloudflareParams {
    */
   wrangler?: Record<string, unknown>
 }
+
+/** Params for the Astrale-managed adapter (`astrale(envs)`). */
+export interface AstraleParams {
+  /**
+   * Target instance slug the domain installs onto (e.g. `'bryan-e2e5'`).
+   * Required for `deploy` (managed publish + install); ignored by `watch`
+   * (local dev) — so dev-only envs may omit it.
+   */
+  instance?: string
+  /** Catalog package name. Default: the origin's first DNS label. */
+  name?: string
+  /** Admin kernel URL the publish calls target. Default the platform admin. */
+  adminUrl?: string
+  /** Routing region of the `.svc` service URL. Default `'eu'`. */
+  region?: string
+  /** CLI identity (`--as`) for the publish calls. Default: the CLI's active identity. */
+  identity?: string
+  /** Gitignored secrets file — injected ONLY into local `watch` (managed services receive no secrets yet). */
+  secrets?: string
+  /** Local dev port for `wrangler dev`. Default 8787. */
+  port?: number
+  /** Extra plain vars for local `watch`. */
+  vars?: Record<string, string>
+}

package/src/wrangler-cli.ts

@@ -10,7 +10,7 @@
 import type { ChildProcess } from 'node:child_process'
 
 import { spawn } from 'node:child_process'
-import { existsSync } from 'node:fs'
+import { existsSync, readdirSync } from 'node:fs'
 import { mkdtemp, rm, writeFile } from 'node:fs/promises'
 import { tmpdir } from 'node:os'
 import { join } from 'node:path'
@@ -238,3 +238,28 @@ async function stopChild(child: ChildProcess): Promise<void> {
     }, 4000).unref?.()
   })
 }
+
+/**
+ * Build the single-module worker bundle WITHOUT deploying — `wrangler deploy
+ * --dry-run --outdir` (no Cloudflare auth required). Returns the path of the
+ * bundled .js module (the managed adapter publishes its bytes).
+ */
+export async function runWranglerBundle(args: {
+  projectDir: string
+  configPath: string
+  outDir: string
+  onLog?: (line: string) => void
+}): Promise<string> {
+  const { cmd, prefix } = wranglerCommand(args.projectDir)
+  const { code, out } = await runCapture(
+    cmd,
+    [...prefix, 'deploy', '--dry-run', '--outdir', args.outDir, '--config', args.configPath],
+    args.projectDir,
+    args.onLog,
+  )
+  if (code !== 0) throw new Error(`wrangler bundle failed (exit ${code}): ${out.slice(-400)}`)
+  const js = readdirSync(args.outDir).filter((f) => f.endsWith('.js'))
+  if (js.length === 0) throw new Error(`wrangler bundle produced no .js in ${args.outDir}`)
+  const preferred = js.find((f) => f.startsWith('worker')) ?? js[0]!
+  return join(args.outDir, preferred)
+}

package/template/.agents/skills/astrale-domain/SKILL.md

@@ -0,0 +1,303 @@
+---
+name: Astrale Domain
+description: Develop, deploy, and iterate an Astrale domain end-to-end — schema modeling (classes, interfaces, edges, methods), handler implementation, calling the kernel and other domains from handlers, integrating external APIs (the core use case — DI, secrets, idempotency, sagas), views, testing, and the deploy/install loop with the cloudflare or astrale adapter. Use whenever creating a domain, adding classes/methods/views, structuring external API calls, or debugging install/dispatch/permission errors. Pairs with the astrale-cli skill (CLI ops) — together they cover working an Astrale instance autonomously.
+---
+
+# Astrale Domain — the authoring bible
+
+An Astrale **domain** is a typed contract installed into a kernel's graph plus a
+**worker you own** that executes it. The kernel stores the schema (classes,
+edges, function contracts), enforces permissions, and routes calls; every
+method body runs on YOUR worker (Cloudflare worker or Astrale-managed service).
+The graph is the database AND the bus: domains read/write nodes+edges through
+the kernel and call each other's functions through it.
+
+**Mental model:** schema = what exists and what's callable · graph = state ·
+worker = behavior · kernel = router + authorizer. You never run a database or
+an RPC layer; you declare a contract and implement handlers.
+
+## 0 · Start
+
+```bash
+npx -y create-astrale-domain@latest my-domain --yes   # scaffold
+cd my-domain && pnpm install
+pnpm dev      # local wrangler dev (prints a URL; install it on an instance to test)
+pnpm prod     # deploy + (astrale adapter) auto-install on your instance
+```
+
+Project anatomy (the scaffold is the reference — read its comments):
+
+```
+astrale.config.ts   # THE manifest: schema + postInstall + adapter (where it ships)
+schema/             # classes/interfaces/edges — the contract (zod props, fn signatures)
+methods/            # handler logic (transport-agnostic fns) + thin wiring (index.ts)
+services/           # RECOMMENDED: ports + factories for external APIs (see §4)
+functions/          # standalone remote functions (webhook-shaped endpoints)
+views/              # iframe-mountable UI declarations (defineView)
+client/             # the SPA served under /ui (vite)
+env.ts              # typed worker env — config + secrets arrive here, as ctx.deps
+```
+
+Iteration loop: edit → `pnpm prod` → call it. Managed redeploys keep the same
+service URL and reinstall the contract; schema changes are merge/reconcile
+(removed entries can leave old nodes behind — see the astrale-live-domain-edit
+skill for graph-level cleanup).
+
+## 1 · Schema modeling
+
+```ts
+import { KernelSchema, defineSchema, edgeClass, nodeClass, nodeInterface } from '@astrale-os/kernel-core'
+import { fn } from '@astrale-os/kernel-dsl'
+import { z } from 'zod'
+
+export const ContactOps = nodeInterface({           // interface = shared contract
+  methods: { createContact: fn({ static: true, params: {...}, returns: ... }) },
+})
+export const Contact = nodeClass({
+  implements: [ContactOps, KernelSchema.interfaces.Container],  // Container → can hold children
+  props: { email: z.string(), company: z.string().optional() },
+  methods: { assign: fn({ params: { project: z.string(), role: z.string() }, returns: ... }) },
+})
+export const works_on = edgeClass(                  // edges are CLASSES with PROPS
+  { as: 'contact', types: [Contact] },
+  { as: 'project', types: [Project] },
+  { props: { role: z.string() } },
+)
+export const schema = defineSchema('my-domain.example.dev', {
+  interfaces: { ContactOps },
+  classes: { Contact, Project, works_on },  // EDGE classes register under `classes` too
+  imports: [KernelSchema],
+})
+```
+
+Conventions and rules:
+- Naming: classes/interfaces `PascalCase`, methods `camelCase`, **edges `snake_case`**.
+- `static: true` = called on the class (`/origin/class.X/method`); otherwise
+  instance-dispatched (`/path/to/node::method`, handler gets `self`). Statics
+  work on classes AND interfaces, wired through the same `method()` /
+  `classMethods()` helpers (the scaffold's `seed` is a class-hosted static).
+- Model relations as **edges with props** (not foreign-key strings): create via
+  `::link {edgeClass, target, props}`, walk via `::getLinks`. Prefer FLAT nodes
+  + edges for peer resources; use Folders (Container) only for list-able
+  hierarchies (`::listChildren` works on Folders).
+- Props are zod; they land in the graph under QUALIFIED keys
+  (`origin:class.X.property.y`). Never hand-write key strings — derive them
+  from the compiled schema: `D.Contact.email.key`, `K.Named.name.key`.
+- Known sharp edges: `::update` currently drops `z.enum()` props silently
+  (create is fine — track status as plain string if you must update it); edge
+  prop accessors exist at runtime but not in types yet (cast).
+
+## 2 · Handlers
+
+Separate LOGIC from WIRING. Logic = plain async functions taking the kernel
+client + ports + params (testable with fakes). Wiring = `method()` /
+`classMethods()` / `interfaceMethods()` in `methods/index.ts`:
+
+```ts
+const kickoff = method(schema, 'Project', 'kickoff', {
+  authorize: async () => undefined,   // see §6 for real authorization
+  execute: ({ kernel, self, params, deps }) => {
+    if (!kernel) throw new Error('kickoff requires a kernel credential')
+    return kickoffLogic(kernel, createWeatherClient(deps), self.path.raw, params)
+  },
+})
+```
+
+Handler context: `kernel` (callback client bound to the composed credential —
+caller's delegated authority ∪ this function's own), `self` (instance methods),
+`params` (zod-validated), `deps` (your typed `Env`), `auth` (principal,
+verified claims). Construct external clients from `deps` per request — NEVER
+at module load (workers must be import-side-effect-free).
+
+## 3 · Talking to the kernel (and other domains)
+
+Everything is `kernel.call(path, params)`. Addressing forms:
+
+| Form | Example | Use |
+|---|---|---|
+| tree path + `::method` | `/projects/apollo::get` | instance dispatch on a node |
+| static slash form | `/origin/class.X/method` | static class/interface methods |
+| colon MethodPath | `/:origin:class.X:method` | canonical form; REQUIRED in postInstall |
+| `@<uuid>::method` | `@4548…::get` | by graph id (NOT slugs/paths) |
+
+Core ops from handlers (all proven patterns):
+
+```ts
+await kernel.call(K.Node.createNode.path.method.raw, { class: D.Contact.path.class.raw, path, props })
+await kernel.call(`${path}::update`, { props: { [D.Project.title.key]: 'New' } })
+// Edge props use QUALIFIED keys; the edge-prop TYPE accessor is missing today — use this cast:
+const ROLE_KEY = (D.works_on as unknown as { role: { key: string } }).role.key
+await kernel.call(`${path}::link`, { edgeClass: D.works_on.path.class.raw, target, props: { [ROLE_KEY]: role } })
+const links = await kernel.call(`${path}::getLinks`, {})       // filter by edge class
+await kernel.call('/other.domain/class.Echo/echo', { message }) // ANOTHER domain's function
+```
+
+- **Cross-function calls work** (same- or cross-domain): the kernel redirects
+  to the target worker and your worker mints a next-hop delegation as ITSELF —
+  the receiver sees your function as the caller, with the original caller's
+  authority threaded through the grant chain. Design service-to-service flows
+  on this; no direct HTTP between workers.
+- Upsert idiom: try `createNode`, on path-conflict fall back to `::update`.
+- A missing parent yields `Permission denied: EDIT on /<parent>` — read that
+  error as "does the parent exist?" first. Seed required folders in postInstall.
+
+## 4 · External APIs — the core pattern
+
+Almost every real domain wraps an external API (payment, calendar, LLM
+gateway, cloud provider). The shape (see admin/domain for the full-scale
+example — Scaleway/WorkOS/KV):
+
+1. **Port** — a narrow interface declaring only what the logic needs
+   (`WeatherClient { forecast(city) }`). Logic depends on the port, never on
+   fetch/SDKs/env.
+2. **Factory** — `createXClient(env)` in `services/`: reads config + secrets
+   from `env`, validates LOUDLY (`if (!env.X_API_KEY) throw`), sets base URLs
+   (overridable so tests point at a stub), timeouts (`AbortSignal.timeout`),
+   and maps upstream failures to meaningful errors with the upstream detail in
+   `cause` (the kernel threads cause chains to callers).
+3. **Wiring** — the `execute` hook builds the client from `deps` per request
+   and passes it to the logic.
+
+Secrets & config:
+- Declare every var as a typed field on `Env` in `env.ts`. Secrets ship via
+  the adapter's `secrets: '.env.dev' / '.env.prod'` (cloudflare adapter) —
+  never committed, never defaulted. Fail fast for root-of-trust values; allow
+  multi-name fallbacks only for developer convenience, never silently in prod.
+- The astrale (managed) adapter does NOT ship runtime secrets yet — key'd
+  upstream integrations currently need the cloudflare adapter or baked config.
+
+Reliability rules (learned from the admin provisioning engine):
+- **Order effects**: external call FIRST, graph write AFTER when possible — a
+  failed upstream then leaves nothing to clean up. When you must write first
+  (reservations), write an INTENT record (state: 'provisioning'), make the
+  external call idempotent (tags/external ids so re-entry ADOPTS instead of
+  duplicating), and compensate on failure.
+- **Sagas for multi-step flows**: ordered phases; record state transitions on
+  nodes (`provisioning → ready | failed`); compensation runs best-effort in
+  reverse and NEVER throws (each step returns ok/skipped/error). Document
+  which phases are safe to re-enter.
+- **Idempotency before mutation**: check existing state before writing; design
+  re-runs of any handler to converge, not duplicate (postInstall seeds
+  especially — they re-run on every reinstall).
+
+Anti-patterns (all observed in production code — don't):
+- constructing clients at module load, or monkey-patching `globalThis.fetch`;
+- scattering kernel-error message matching — the kernel exposes no stable
+  error codes to handlers yet, so when you must match (the PATH_CONFLICT
+  upsert), isolate it in ONE helper (the scaffold's `isPathConflict`) and
+  treat it as tech debt;
+- god persistence files — split graph CRUD by entity;
+- leaving state fields mid-transition with no failure path (`'installing'`
+  forever after a crash);
+- stringly-typed prop keys or class paths (always compiled accessors).
+
+## 5 · Views & standalone functions (webhooks)
+
+- `defineView({ auth, mount: '/ui/contact', viewFor: selfOf(Contact) })` in
+  `views/` + register in `views/index.ts`. Installs a View node bound to your
+  worker URL; the GUI mounts it as an iframe for matching nodes. The client/
+  SPA serves the actual UI under `/ui/*` (cloudflare adapter ships it; the
+  managed adapter doesn't ship SPA assets yet).
+- `functions/` declares standalone callables (`defineRemoteFunction`) not
+  attached to a class — each serves at `POST <worker>/functions/<slug>` and
+  materializes a Function node under `/<origin>/core/functions/`. This is the
+  INBOUND integration surface (webhooks).
+
+**The webhook-that-writes pattern** (validated): keep `auth: 'required'` and
+configure the external system's auth header with a minted delegation token —
+`astrale token --audience <service url> --ttl <seconds> --raw` (use a
+dedicated, attenuated identity: grant it only what the webhook needs).
+For `auth: 'public'` upstreams that can't carry a header (HMAC-signature
+webhooks, Stripe-style): `kernel` is null, but `ctx.selfKernel()` gives a
+session authenticated as THE FUNCTION'S OWN identity (its grants only) —
+VERIFY THE UPSTREAM SIGNATURE FIRST, then act as yourself. Needs
+`deps.KERNEL_URL` (managed deploys set it) and the function identity granted
+whatever it writes.
+
+**Webhook idempotency** (senders retry — design for replays): derive a
+DETERMINISTIC node path from the sender's id (`/contacts/lead-<externalId>`),
+and make that key BOTH the existence check AND the write target. The classic
+bug is checking one key and writing another (random-suffixed) — the replay
+then duplicates. Custom `binding` supports REST-ish routes + header/body
+capture when the sender's shape is fixed (see distribution's proxy functions).
+
+## 6 · Identity, auth, permissions
+
+- Your worker IS an identity: at install, every callable gets `(iss = serving
+  URL, sub = function path)` stamped in the graph; the kernel verifies your
+  worker's signatures against your live JWKS. `astrale.config.ts` origin =
+  `schema.domain` (aliasing another origin triggers a DANGER prompt).
+- Inbound calls carry a delegation of the caller; your handler's `kernel` acts
+  with `union(caller's delegated authority, your function's own grants)` —
+  attenuation is automatic (you can't exceed what the caller + you hold).
+- `authorize` hook: return `undefined` to allow (relying on kernel-level
+  checks downstream), or assert claims/perms before `execute` runs.
+- Permissions are bitmasks (READ/EDIT/USE/SHARE) on `has_perm` edges; grants
+  on a node cascade down the tree. Function identities get USE on
+  `mintDelegationCredential` at install (enables cross-function calls).
+
+## 7 · Deploy & install
+
+Adapter choice in `astrale.config.ts`:
+- `cloudflare({...})` — your CF account; `dev` (wrangler dev), `prod` (route or
+  workers.dev); ships secrets + SPA assets; extra bindings via a deep-merged
+  `wrangler` block.
+- `astrale({ dev: {...}, prod: { instance: '<slug>' } })` — managed: publishes
+  the bundle THROUGH the platform and installs it as a host-local service next
+  to your instance (`https://<name>-<hash>.svc.<region>.astrale.ai`). No CF
+  account; auth = your `astrale auth login` session. v1 limits: no SPA assets,
+  no runtime secrets.
+
+The first deploy generates `.astrale/identity.ts` — the domain's SIGNING
+IDENTITY (its private key). Losing or regenerating it breaks reinstalls under
+the same origin; back it up (or commit it knowingly for throwaway domains).
+
+Dev-loop reality: `pnpm dev` serves on localhost — a REMOTE instance's kernel
+cannot fetch its install bundle. Local URL installs only work against a kernel
+that can reach you (local kernel, or a tunnel). Against a managed/remote
+instance, iterate with `pnpm prod` (the managed loop is ~25s and keeps the
+service URL stable).
+
+`postInstall` runs after every install — MUST be a colon MethodPath
+(`/:origin:class.X:seed`; tree paths are rejected) and MUST be idempotent
+(catch path-conflicts). Seed folders, defaults, and demo data here.
+
+Manual install of any served domain: `astrale instance install <url>`.
+
+## 8 · Testing
+
+- **Logic**: unit-test with fake ports (the DI in §4 exists for this) and a
+  fake kernel — an in-memory `{ call(path, params) }` that records calls /
+  returns canned nodes. Assert call ORDER and failure paths (best-effort
+  flows: one failing step must not block the rest).
+- **Wiring/contract**: typecheck is the contract test (`pnpm typecheck` /
+  `tsgo --noEmit`); the schema drives param validation at runtime.
+- **Live smoke** (always finish with this): deploy, then drive the REAL surface
+  with the CLI — create a node, call an instance method, walk an edge, call a
+  cross-domain function. Fixture-green alone proves nothing about dispatch,
+  identity, or bindings.
+
+## 9 · Debugging quick table
+
+| Symptom | Likely cause |
+|---|---|
+| `Permission denied: EDIT on /x (param-target)` | `/x` doesn't exist — seed the parent |
+| `method "x" not found … call it as "/:o:class.C/x"` | instance form used for a static method |
+| `Delegation mint failed for <url>` | check `--debug` cause chain; worker→worker call machinery |
+| postInstall `not within origin` | tree path used — switch to `/:origin:class.X:method` |
+| install: `missing remote binding` | a callable lacks `binding.remoteUrl` — build via the adapter, not hand-rolled specs |
+| managed `/ui` 404 | managed adapter ships no SPA assets yet |
+| `ERR_PNPM_IGNORED_BUILDS` / approve-builds on `pnpm run` | template's pnpm-workspace.yaml needs `ignoredBuiltDependencies` + `verifyDepsBeforeRun: false` (recent scaffolds have it) |
+| stale/broken package versions on scaffold | clear pnpm metadata cache; check template floors are current |
+| TS: "Types of property '__brand' are incompatible" in untouched files | TWO copies of kernel-core/dsl in the tree (mixed link:/registry/override resolution) — unify versions, then `pnpm dedupe` |
+| deploy: `Export named 'X' not found` from an @astrale-os module | a transitive dep resolved below its REAL floor — `pnpm add @astrale-os/<pkg>@<needed>` then `pnpm dedupe` |
+
+Use `astrale call <path> --describe` for any callable's schema, `--debug` for
+the full error chain, and `curl <worker>/meta` for what a worker serves
+(domainName, schemaHash).
+
+## Related skills
+- **astrale-cli** — every CLI command (auth, instances, calls, install).
+- **astrale-live-domain-edit** — graph-level schema surgery on a live kernel
+  (no worker changes): temp specs, reinstall semantics, minimum class/method
+  graph material.

package/template/README.md

@@ -1,7 +1,16 @@
 # astrale-domain
 
+
 A standalone [Astrale](https://astrale.ai) domain, deployed as a Cloudflare Worker.
 
+## For AI agents
+
+The complete domain-authoring guide ships with this project at
+`.agents/skills/astrale-domain/SKILL.md` — schema modeling, handlers, kernel
+calls, external-API patterns (DI, secrets, idempotency), views, webhooks,
+deploys. Load it before making changes. For CLI operations (auth, instances,
+calls), use the `astrale-cli` skill.
+
 > **Requires [Bun](https://bun.sh)** — the `astrale-domain` CLI behind `pnpm dev`
 > / `pnpm prod` imports `astrale.config.ts` and your ★ files directly, so it
 > needs a TypeScript-native runtime.

package/template/astrale.config.ts

@@ -11,6 +11,15 @@
  */
 import { cloudflare } from '@astrale-os/adapter-cloudflare'
 import { defineDomain } from '@astrale-os/devkit'
+// No Cloudflare account? Swap the adapter for the Astrale-managed one — it
+// publishes the same bundle THROUGH the platform and installs it on your
+// instance as a managed service (auth = your `astrale auth login` session):
+//
+//   import { astrale } from '@astrale-os/adapter-cloudflare'
+//   adapter: astrale({
+//     dev: { secrets: '.env.dev' },              // local wrangler dev, unchanged
+//     prod: { instance: '<your-instance-slug>' } // pnpm prod → managed deploy
+//   }),
 
 import { schema } from './schema'
 

package/template/package.json

@@ -2,6 +2,9 @@
   "name": "astrale-domain",
   "version": "0.1.0",
   "private": true,
+  "workspaces": [
+    "client"
+  ],
   "type": "module",
   "scripts": {
     "dev": "astrale-domain dev",
@@ -11,11 +14,12 @@
     "typecheck": "tsgo --noEmit"
   },
   "dependencies": {
-    "@astrale-os/adapter-cloudflare": ">=0.1.0 <1.0.0",
-    "@astrale-os/devkit": ">=0.1.0 <1.0.0",
-    "@astrale-os/kernel-core": ">=0.3.0 <1.0.0",
-    "@astrale-os/kernel-dsl": ">=0.1.0 <1.0.0",
-    "@astrale-os/sdk": ">=0.1.0 <1.0.0",
+    "@astrale-os/adapter-cloudflare": ">=0.1.4 <1.0.0",
+    "@astrale-os/devkit": ">=0.1.3 <1.0.0",
+    "@astrale-os/kernel-core": ">=0.4.3 <1.0.0",
+    "@astrale-os/kernel-dsl": ">=0.1.2 <1.0.0",
+    "@astrale-os/sdk": ">=0.1.3 <1.0.0",
+    "@hono/node-server": "^1.19.0",
     "zod": "^4.3.6"
   },
   "devDependencies": {
@@ -26,5 +30,10 @@
   },
   "engines": {
     "node": ">=22"
-  }
+  },
+  "trustedDependencies": [
+    "esbuild",
+    "sharp",
+    "workerd"
+  ]
 }

package/template/pnpm-workspace.yaml

@@ -15,3 +15,26 @@ allowBuilds:
   esbuild: true
   sharp: true
   workerd: true
+  # Explicit `false` for the @astrale-os no-op preinstalls — without these,
+  # `pnpm add` of a new version re-prompts and writes placeholder entries here.
+  '@astrale-os/kernel-api': false
+  '@astrale-os/kernel-client': false
+  '@astrale-os/kernel-core': false
+  '@astrale-os/kernel-dsl': false
+  '@astrale-os/kernel-server': false
+  '@astrale-os/sdk': false
+
+# @astrale-os packages ship a guarded no-op preinstall (a workspace-dev guard
+# that exits instantly outside the monorepo); declare them intentionally
+# ignored so pnpm's build gate stays quiet.
+ignoredBuiltDependencies:
+  - '@astrale-os/kernel-api'
+  - '@astrale-os/kernel-client'
+  - '@astrale-os/kernel-core'
+  - '@astrale-os/kernel-dsl'
+  - '@astrale-os/kernel-server'
+  - '@astrale-os/sdk'
+
+# pnpm v11 gates `pnpm run` on a deps-status check that misfires on the
+# ignored preinstalls above.
+verifyDepsBeforeRun: false