@astrale-os/cli 1.0.0-beta.1 → 1.0.0-beta.11

package/src/__tests__/fixtures/publication.ts

@@ -0,0 +1,20 @@
+import type { schema } from '@astrale-os/sdk/schema'
+
+import { defineApplication } from '@astrale-os/sdk/application'
+import { compile } from '@astrale-os/sdk/deployment/build'
+import { addressing, assemble } from '@astrale-os/sdk/deployment/release'
+import { defineRuntime } from '@astrale-os/sdk/runtime'
+
+/** Build a canonical empty-runtime Release for cross-boundary CLI tests. */
+export function releaseFor<const Schema extends schema.DomainSchema>(
+  source: Schema,
+  issuer: string,
+) {
+  const runtime = defineRuntime<Schema>()({
+    integrations: {},
+    initialize: () => ({ providers: {} }),
+    actions: [],
+    workflows: [],
+  })
+  return assemble(compile(defineApplication({ schema: source, runtime })), addressing(issuer))
+}

package/src/admin/__tests__/binding.test.ts

@@ -0,0 +1,31 @@
+import type { ClientSession } from '@astrale-os/sdk/client/session'
+
+import { bundle, defineSchema, schema as schemaApi } from '@astrale-os/sdk/schema'
+import { expect, mock, test } from 'bun:test'
+
+import { releaseFor } from '../../__tests__/fixtures/publication'
+import { bindAdmin } from '../binding'
+
+const schema = defineSchema('admin.astrale.ai', {})
+const release = releaseFor(schema, 'https://admin.beta.astrale.ai')
+
+test('binds the installed Admin Domain instead of the source Kernel publication', async () => {
+  const installation = mock(async () => ({
+    state: 'ready' as const,
+    target: 'sha256:admin-target' as const,
+    source: { kind: 'remote' as const, publication: release.publication },
+    bundle: bundle.create(schema),
+    readiness: 'sha256:admin-readiness' as const,
+    capabilities: { requested: [], materialized: [] },
+  }))
+  const session = {
+    installation,
+    bind: (domain: unknown) => ({ domain, graph: {} }),
+  } as unknown as ClientSession
+
+  const binding = await bindAdmin(session)
+
+  expect(installation).toHaveBeenCalledWith('admin.astrale.ai')
+  expect(binding.domain.origin).toBe('admin.astrale.ai')
+  expect(binding.domain.revision).toBe(schemaApi.revision(schema))
+})

package/src/admin/__tests__/fixture.ts

@@ -0,0 +1,101 @@
+import type { ClientSession } from '@astrale-os/sdk/client/session'
+import type { CallableReference } from '@astrale-os/sdk/client/session'
+
+import {
+  callableAddress,
+  core,
+  defineSchema,
+  edgeClass,
+  method,
+  nodeClass,
+  property,
+  schema,
+} from '@astrale-os/sdk/schema'
+import { mock } from 'bun:test'
+
+import type { AdminBinding } from '../binding'
+
+const operation = () =>
+  method({
+    auth: 'authenticated',
+    input: { type: 'object', additionalProperties: true },
+    output: { type: 'object', additionalProperties: true },
+  })
+
+const Domain = nodeClass({
+  properties: {
+    origin: property({ type: 'string' }, { required: true }),
+    name: property({ type: 'string' }, { required: true }),
+    discoveryUrl: property({ type: 'string' }, { required: true }),
+    description: property({ type: 'string' }),
+    createdAt: property({ type: 'string' }, { required: true }),
+    updatedAt: property({ type: 'string' }, { required: true }),
+  },
+  methods: { configureDefault: operation() },
+})
+const Fleet = nodeClass({
+  methods: {
+    publishDomain: operation(),
+    listInstances: operation(),
+    createInstance: operation(),
+  },
+})
+const Host = nodeClass({
+  properties: {
+    id: property({ type: 'string' }, { required: true }),
+    state: property({ type: 'string' }, { required: true }),
+  },
+  methods: { createInstance: operation() },
+})
+const Instance = nodeClass({
+  methods: {
+    status: operation(),
+    delete: operation(),
+    installDomain: operation(),
+  },
+})
+const fleet_installs_domain_by_default = edgeClass.directed({
+  source: { as: 'fleet', accepts: [Fleet], outgoing: '0..*' },
+  target: { as: 'domain', accepts: [Domain], incoming: '0..*' },
+})
+const fleet_reserves_admin_host = edgeClass.directed({
+  source: { as: 'fleet', accepts: [Fleet], outgoing: '0..1' },
+  target: { as: 'host', accepts: [Host], incoming: '0..1' },
+})
+
+export const AdminTestSchema = defineSchema('admin.astrale.ai', {
+  classes: {
+    Domain,
+    Fleet,
+    Host,
+    Instance,
+    fleet_installs_domain_by_default,
+    fleet_reserves_admin_host,
+  },
+  core: { nodes: { fleet: core.node(() => Fleet, {}) }, edges: [] },
+})
+
+export const AdminTestDomain = schema.resolve(AdminTestSchema)
+
+export function adminBinding(): AdminBinding {
+  return { domain: AdminTestDomain, graph: {} } as unknown as AdminBinding
+}
+
+export function adminSession(
+  implementation?: (
+    method: { readonly owner: string; readonly name: string },
+    receiver: unknown,
+    input: unknown,
+  ) => unknown,
+) {
+  const invoke = mock(async (reference: CallableReference, input: unknown) => {
+    const address = callableAddress(reference.callable)
+    if (address.kind !== 'method') throw new Error('Expected an Admin Method.')
+    return implementation?.(
+      { owner: address.owner.name, name: address.name },
+      reference.target,
+      input,
+    )
+  })
+  return { invoke, session: { invoke } as unknown as ClientSession }
+}

package/src/admin/binding.ts

@@ -0,0 +1,98 @@
+import type { Input } from '@astrale-os/sdk/client'
+import type { ClientSession } from '@astrale-os/sdk/client/session'
+import type {
+  ResolvedClass,
+  ResolvedCoreDefinition,
+  ResolvedMethod,
+  ResolvedProperty,
+} from '@astrale-os/sdk/schema'
+import type { DomainBinding } from '@astrale-os/shell'
+
+import { reference } from '@astrale-os/sdk/client/session'
+import { Path } from '@astrale-os/sdk/graph/path'
+import { bindDomain } from '@astrale-os/shell'
+
+const ADMIN_ORIGIN = 'admin.astrale.ai'
+
+export type AdminBinding = DomainBinding
+
+/** Bind the exact Admin revision installed on this source Kernel. */
+export async function bindAdmin(session: ClientSession): Promise<AdminBinding> {
+  const installed = await session.installation(ADMIN_ORIGIN)
+  return requireAdminBinding(await bindDomain(session, installed.bundle.root))
+}
+
+/** Admit an injected dynamic binding as the Admin Domain. */
+export function requireAdminBinding(binding: AdminBinding): AdminBinding {
+  if (binding.domain.origin !== ADMIN_ORIGIN) {
+    throw new TypeError('Configured Admin target does not serve the Admin Domain.')
+  }
+  return binding
+}
+
+/** Resolve one required Admin Class without rebuilding its schema contract. */
+export function requireAdminClass(
+  binding: AdminBinding,
+  name: string,
+  kind: 'node',
+): ResolvedClass<'node'>
+export function requireAdminClass(
+  binding: AdminBinding,
+  name: string,
+  kind: 'edge',
+): ResolvedClass<'edge'>
+export function requireAdminClass(
+  binding: AdminBinding,
+  name: string,
+  kind: 'node' | 'edge',
+): ResolvedClass<'node'> | ResolvedClass<'edge'> {
+  const selected = binding.domain.classes[name]
+  if (selected?.kind !== kind) throw new TypeError(`Admin ${name} is not a ${kind} Class.`)
+  return selected
+}
+
+/** Resolve one required Admin Core Node as its canonical projection Path. */
+export function requireAdminCore(binding: AdminBinding, name: string): Path {
+  const selected = binding.domain.core.nodes[name] as ResolvedCoreDefinition | undefined
+  if (selected === undefined) throw new TypeError(`Admin has no Core Node ${name}.`)
+  return Path.project(selected.ref)
+}
+
+/** Resolve one effective Property by unambiguous member name. */
+export function requireAdminProperty(
+  owner: ResolvedClass,
+  name: string,
+): ResolvedProperty<unknown> {
+  const selected = [...owner.properties].find((property) => property.name === name)
+  if (selected === undefined) {
+    throw new TypeError(`Admin ${owner.ref.name}.${name} Property is absent.`)
+  }
+  return selected
+}
+
+/** Invoke one resolved executable instance Method through Kernel Client. */
+export async function invokeAdminMethod(
+  session: ClientSession,
+  binding: AdminBinding,
+  owner: ResolvedClass<'node'>,
+  name: string,
+  receiver: Path,
+  input: Input,
+): Promise<unknown> {
+  const method = [...owner.methods].find((candidate) => candidate.name === name)
+  if (method === undefined || !isExecutableInstanceMethod(method)) {
+    throw new TypeError(`Admin ${owner.ref.name}.${name} is not an executable instance Method.`)
+  }
+  return session.invoke(reference(binding.domain, method)(receiver), input)
+}
+
+type ExecutableInstanceMethod = ResolvedMethod<
+  unknown,
+  unknown,
+  false,
+  Exclude<ResolvedMethod['inheritance'], 'abstract'>
+>
+
+function isExecutableInstanceMethod(method: ResolvedMethod): method is ExecutableInstanceMethod {
+  return method.static === false && method.inheritance !== 'abstract'
+}

package/src/admin/catalog/.spec/api.d.ts

@@ -1,5 +1,5 @@
-import type { DomainBinding } from '@astrale-os/kernel-client/domain'
-import type { ClientSession } from '@astrale-os/kernel-client/session'
+import type { ClientSession } from '@astrale-os/sdk/client/session'
+import type { DomainBinding } from '@astrale-os/shell'
 
 import type { AdminGraphApi } from '../../graph/.spec/api.js'
 

package/src/admin/catalog/__tests__/client.test.ts

@@ -1,41 +1,25 @@
-import type { DomainBinding } from '@astrale-os/kernel-client/domain'
 import type { Node } from '@astrale-os/sdk/graph/node'
 import type { QueryAST } from '@astrale-os/sdk/query'
 
-import { ClassPath } from '@astrale-os/sdk/graph/class'
 import { NodeId } from '@astrale-os/sdk/graph/node'
-import { Path } from '@astrale-os/sdk/graph/path'
 import { describe, expect, mock, test } from 'bun:test'
 
 import type { AdminGraphApi } from '../../graph'
 
+import { AdminTestDomain, adminBinding, adminSession } from '../../__tests__/fixture'
 import { connectAdminCatalog } from '../client'
 
-function definition(name: string) {
-  return {
-    name,
-    $: {
-      method(method: string) {
-        return { owner: name, name: method }
-      },
-      property(property: string) {
-        return { key: property }
-      },
-    },
-  }
-}
-
 function domainNode(id: string, origin: string): Node {
   return {
     id: NodeId(id),
-    class: ClassPath.from('admin.astrale.ai', 'Domain'),
-    props: {
+    class: AdminTestDomain.classes.Domain.key,
+    props: AdminTestDomain.classes.Domain.properties.from({
       origin,
       name: origin.split('.')[0]!,
       discoveryUrl: `https://${origin}`,
       createdAt: '2026-08-12T00:00:00.000Z',
       updatedAt: '2026-08-12T00:00:00.000Z',
-    } as never,
+    }),
   }
 }
 
@@ -44,24 +28,16 @@ function fixture(input: {
   defaults?: readonly Node[]
   invoke?: (method: { owner: string; name: string }, receiver: unknown, value: unknown) => unknown
 }) {
-  const Domain = definition('Domain')
-  const Fleet = definition('Fleet')
-  const invoke = mock(async (method: unknown, receiver: unknown, value: unknown) =>
-    input.invoke?.(method as { owner: string; name: string }, receiver, value),
-  )
-  const binding = {
-    $: {
-      publication: { origin: 'admin.astrale.ai' },
-      origin: 'admin.astrale.ai',
-      class(name: string) {
-        if (name === 'Domain') return Domain
-        if (name === 'Fleet') return Fleet
-        throw new Error(`Unexpected class ${name}`)
-      },
-      core: { nodes: { fleet: { path: Path.id(NodeId('fleet')) } } },
-      invoke,
-    },
-  } as unknown as DomainBinding
+  const calls: Array<{
+    method: { owner: string; name: string }
+    receiver: string
+    value: unknown
+  }> = []
+  const remote = adminSession((method, receiver, value) => {
+    calls.push({ method, receiver: String(receiver), value })
+    return input.invoke?.(method, receiver, value)
+  })
+  const binding = adminBinding()
   const query = mock(async (_ast: QueryAST) => ({
     result: {
       kind: 'nodes' as const,
@@ -79,10 +55,11 @@ function fixture(input: {
   }))
   const graph = { query, neighbors } as unknown as AdminGraphApi
   return {
-    invoke,
+    invoke: remote.invoke,
+    calls,
     connect: () =>
       connectAdminCatalog(
-        { session: {} as never, graph },
+        { session: remote.session, graph },
         {
           bind: async () => binding,
           operationId: (kind) => `cli.domain.${kind}:test`,
@@ -130,16 +107,10 @@ describe('V2 Admin Domain catalog adapter', () => {
         installByDefault: true,
       }),
     ).resolves.toMatchObject({ changed: true, isNew: true, entry: { installByDefault: true } })
-    expect(
-      contract.invoke.mock.calls.map(([method, receiver, value]) => ({
-        method,
-        receiver: String(receiver),
-        value,
-      })),
-    ).toEqual([
+    expect(contract.calls).toEqual([
       {
         method: { owner: 'Fleet', name: 'publishDomain' },
-        receiver: '@fleet',
+        receiver: '/:admin.astrale.ai:core.fleet::publishDomain',
         value: {
           operationId: 'cli.domain.publish:test',
           origin: 'crm.acme.dev',
@@ -149,7 +120,7 @@ describe('V2 Admin Domain catalog adapter', () => {
       },
       {
         method: { owner: 'Domain', name: 'configureDefault' },
-        receiver: '@crm-domain',
+        receiver: '@crm-domain::configureDefault',
         value: {
           operationId: 'cli.domain.configure-default:test',
           enabled: true,

package/src/admin/catalog/client.ts

@@ -1,11 +1,19 @@
-import type { DomainBinding } from '@astrale-os/kernel-client/domain'
-import type { ClientSession } from '@astrale-os/kernel-client/session'
+import type { ClientSession } from '@astrale-os/sdk/client/session'
 import type { Node } from '@astrale-os/sdk/graph/node'
+import type { ResolvedClass } from '@astrale-os/sdk/schema'
 
-import { bind } from '@astrale-os/kernel-client/domain'
 import { Path } from '@astrale-os/sdk/graph/path'
 import { Query } from '@astrale-os/sdk/query'
 
+import {
+  bindAdmin,
+  invokeAdminMethod,
+  requireAdminBinding,
+  requireAdminClass,
+  requireAdminCore,
+  requireAdminProperty,
+  type AdminBinding,
+} from '../binding'
 import { readAllNodes, type AdminGraphApi } from '../graph'
 import {
   AdminDomainNotFoundError,
@@ -14,16 +22,9 @@ import {
   type PublishDomainResult,
 } from './model'
 
-const ADMIN_ORIGIN = 'admin.astrale.ai'
 const PAGE_SIZE = 256
 const MAXIMUM_DOMAINS = 10_000
 const MAXIMUM_PAGES = Math.ceil(MAXIMUM_DOMAINS / PAGE_SIZE) + 1
-const DomainRef = Object.freeze({ origin: ADMIN_ORIGIN, kind: 'class' as const, name: 'Domain' })
-const fleetInstallsByDefault = Object.freeze({
-  origin: ADMIN_ORIGIN,
-  kind: 'class' as const,
-  name: 'fleet_installs_domain_by_default',
-})
 
 export interface AdminCatalogContext {
   readonly session: ClientSession
@@ -37,7 +38,7 @@ export interface AdminCatalogApi {
 }
 
 export interface AdminCatalogDependencies {
-  readonly bind?: (session: ClientSession) => Promise<DomainBinding>
+  readonly bind?: (session: ClientSession) => Promise<AdminBinding>
   readonly operationId?: (kind: 'publish' | 'configure-default') => string
 }
 
@@ -46,21 +47,22 @@ export async function connectAdminCatalog(
   context: AdminCatalogContext,
   dependencies: AdminCatalogDependencies = {},
 ): Promise<AdminCatalogApi> {
-  const binding = await (dependencies.bind ?? bindInstalledAdmin)(context.session)
-  if (binding.$.publication?.origin !== ADMIN_ORIGIN || binding.$.origin !== ADMIN_ORIGIN) {
-    throw new TypeError('Configured Admin target does not serve the Admin Domain.')
-  }
-  const Domain = binding.$.class('Domain')
-  const Fleet = binding.$.class('Fleet')
-  const fleet = binding.$.core.nodes.fleet?.path
-  if (fleet === undefined) throw new TypeError('Admin Domain has no singleton Fleet receiver.')
+  const binding = requireAdminBinding(await (dependencies.bind ?? bindAdmin)(context.session))
+  const Domain = requireAdminClass(binding, 'Domain', 'node')
+  const Fleet = requireAdminClass(binding, 'Fleet', 'node')
+  const fleetInstallsByDefault = requireAdminClass(
+    binding,
+    'fleet_installs_domain_by_default',
+    'edge',
+  )
+  const fleet = requireAdminCore(binding, 'fleet')
   const operationId = dependencies.operationId ?? defaultOperationId
 
   const list = async (): Promise<DomainInfo[]> => {
     const [nodes, defaultsPage] = await Promise.all([
       readAllNodes(
         context.graph,
-        Query.from({ kind: 'node', definitions: [DomainRef] }).select({
+        Query.from({ nodes: [Domain] }).select({
           kind: 'nodes',
           projection: { kind: 'value' },
         }),
@@ -108,13 +110,13 @@ export async function connectAdminCatalog(
       let entry = existing
       if (registryChanged) {
         entry = domainFromSummary(
-          await binding.$.invoke(Fleet.$.method('publishDomain') as never, fleet, {
+          await invokeAdminMethod(context.session, binding, Fleet, 'publishDomain', fleet, {
             operationId: operationId('publish'),
             origin: input.origin,
             name: input.name,
             discoveryUrl: input.url,
             ...(description === undefined ? {} : { description }),
-          } as never),
+          }),
           existing?.installByDefault === true,
         )
       }
@@ -125,13 +127,16 @@ export async function connectAdminCatalog(
         (entry.installByDefault ?? false) !== input.installByDefault
       if (defaultChanged) {
         entry = domainFromSummary(
-          await binding.$.invoke(
-            Domain.$.method('configureDefault') as never,
+          await invokeAdminMethod(
+            context.session,
+            binding,
+            Domain,
+            'configureDefault',
             Path.parse(entry.id),
             {
               operationId: operationId('configure-default'),
               enabled: input.installByDefault,
-            } as never,
+            },
           ),
           input.installByDefault === true,
         )
@@ -145,11 +150,7 @@ export async function connectAdminCatalog(
   })
 }
 
-async function bindInstalledAdmin(session: ClientSession): Promise<DomainBinding> {
-  return bind(session, await session.installed(ADMIN_ORIGIN))
-}
-
-type DynamicDefinition = ReturnType<DomainBinding['$']['class']>
+type DynamicDefinition = ResolvedClass<'node'>
 
 function domainFromNode(
   definition: DynamicDefinition,
@@ -185,7 +186,10 @@ function domainFromSummary(input: unknown, installByDefault: boolean): DomainInf
 }
 
 function requiredProperty(definition: DynamicDefinition, node: Node, name: string): string {
-  return requiredString(node.props[definition.$.property(name).key], `Admin Domain.${name}`)
+  return requiredString(
+    node.props[requireAdminProperty(definition, name).key],
+    `Admin Domain.${name}`,
+  )
 }
 
 function optionalProperty(
@@ -193,7 +197,7 @@ function optionalProperty(
   node: Node,
   name: string,
 ): Readonly<Record<string, string>> {
-  const value = node.props[definition.$.property(name).key]
+  const value = node.props[requireAdminProperty(definition, name).key]
   return value === undefined ? {} : { [name]: requiredString(value, `Admin Domain.${name}`) }
 }
 

package/src/admin/catalog/model.ts

@@ -33,10 +33,9 @@ export interface InstallDomainResult {
   readonly error?: string | null
 }
 
-export class AdminDomainNotFoundError extends Error {
-  readonly name = 'NotFoundError'
-
+export class AdminDomainNotFoundError extends AstraleError {
   constructor(readonly identifier: string) {
-    super(`No visible Admin Domain matches ${JSON.stringify(identifier)}.`)
+    super('DOMAIN_NOT_FOUND', `No visible Admin Domain matches ${JSON.stringify(identifier)}.`)
   }
 }
+import { AstraleError } from '../../errors'

package/src/admin/graph/.spec/api.d.ts

@@ -1,18 +1,12 @@
-import type { GraphQueryOptions, NeighborsOptions, NodePage } from '@astrale-os/kernel-client/graph'
-import type { ClassPath } from '@astrale-os/sdk/graph/class'
+import type { GraphApi } from '@astrale-os/sdk/client'
 import type { Node } from '@astrale-os/sdk/graph/node'
-import type { PathLike } from '@astrale-os/sdk/graph/path'
-import type { QueryAST, QueryResult } from '@astrale-os/sdk/query'
+import type { QueryAST } from '@astrale-os/sdk/query'
 
 /** Smallest Kernel graph capability needed by bounded Admin graph reads. */
-export interface AdminGraphQueryApi {
-  query(ast: QueryAST, options?: GraphQueryOptions): Promise<QueryResult>
-}
+export type AdminGraphQueryApi = Pick<GraphApi, 'query'>
 
 /** Caller-scoped graph reads shared by the Admin catalog and Instance journeys. */
-export interface AdminGraphApi extends AdminGraphQueryApi {
-  neighbors(source: PathLike, edge: ClassPath, options: NeighborsOptions): Promise<NodePage>
-}
+export type AdminGraphApi = Pick<GraphApi, 'query' | 'neighbors'>
 
 export interface ReadAllNodesOptions {
   readonly label: string

package/src/admin/graph/nodes.ts

@@ -1,4 +1,4 @@
-import type { GraphApi } from '@astrale-os/kernel-client/graph'
+import type { GraphApi } from '@astrale-os/sdk/client'
 import type { Node } from '@astrale-os/sdk/graph/node'
 import type { QueryAST } from '@astrale-os/sdk/query'
 

package/src/admin/instance/.spec/api.d.ts

@@ -1,5 +1,5 @@
-import type { DomainBinding } from '@astrale-os/kernel-client/domain'
-import type { ClientSession } from '@astrale-os/kernel-client/session'
+import type { ClientSession } from '@astrale-os/sdk/client/session'
+import type { DomainBinding } from '@astrale-os/shell'
 
 import type { AdminGraphApi } from '../../graph/.spec/api.js'