@astrale-os/cli 1.0.0-beta.9 → 1.0.0-npm-deprecated.0

package/dist/types/lib/instance.d.ts

@@ -1,202 +0,0 @@
-import { z } from 'zod';
-import type { AstraleConfig } from './config';
-import { type RegistryMode } from './validation';
-export declare const InstanceKindSchema: z.ZodEnum<["bookmark"]>;
-export type InstanceKind = z.infer<typeof InstanceKindSchema>;
-export declare const InstanceEntrySchema: z.ZodObject<{
-    url: z.ZodOptional<z.ZodString>;
-    issuer: z.ZodOptional<z.ZodString>;
-    domainIssuer: z.ZodOptional<z.ZodString>;
-    createdAt: z.ZodOptional<z.ZodString>;
-    slug: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    kind: z.ZodOptional<z.ZodEnum<["bookmark"]>>;
-    mode: z.ZodOptional<z.ZodEnum<["local", "remote"]>>;
-    defaultIdentity: z.ZodOptional<z.ZodString>;
-    caFile: z.ZodOptional<z.ZodString>;
-    organizationId: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    url?: string | undefined;
-    issuer?: string | undefined;
-    domainIssuer?: string | undefined;
-    createdAt?: string | undefined;
-    slug?: string | undefined;
-    name?: string | undefined;
-    kind?: "bookmark" | undefined;
-    mode?: "local" | "remote" | undefined;
-    defaultIdentity?: string | undefined;
-    caFile?: string | undefined;
-    organizationId?: string | undefined;
-}, {
-    url?: string | undefined;
-    issuer?: string | undefined;
-    domainIssuer?: string | undefined;
-    createdAt?: string | undefined;
-    slug?: string | undefined;
-    name?: string | undefined;
-    kind?: "bookmark" | undefined;
-    mode?: "local" | "remote" | undefined;
-    defaultIdentity?: string | undefined;
-    caFile?: string | undefined;
-    organizationId?: string | undefined;
-}>;
-export declare const InstanceStoreSchema: z.ZodObject<{
-    active: z.ZodString;
-    instances: z.ZodRecord<z.ZodString, z.ZodObject<{
-        url: z.ZodOptional<z.ZodString>;
-        issuer: z.ZodOptional<z.ZodString>;
-        domainIssuer: z.ZodOptional<z.ZodString>;
-        createdAt: z.ZodOptional<z.ZodString>;
-        slug: z.ZodOptional<z.ZodString>;
-        name: z.ZodOptional<z.ZodString>;
-        kind: z.ZodOptional<z.ZodEnum<["bookmark"]>>;
-        mode: z.ZodOptional<z.ZodEnum<["local", "remote"]>>;
-        defaultIdentity: z.ZodOptional<z.ZodString>;
-        caFile: z.ZodOptional<z.ZodString>;
-        organizationId: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        url?: string | undefined;
-        issuer?: string | undefined;
-        domainIssuer?: string | undefined;
-        createdAt?: string | undefined;
-        slug?: string | undefined;
-        name?: string | undefined;
-        kind?: "bookmark" | undefined;
-        mode?: "local" | "remote" | undefined;
-        defaultIdentity?: string | undefined;
-        caFile?: string | undefined;
-        organizationId?: string | undefined;
-    }, {
-        url?: string | undefined;
-        issuer?: string | undefined;
-        domainIssuer?: string | undefined;
-        createdAt?: string | undefined;
-        slug?: string | undefined;
-        name?: string | undefined;
-        kind?: "bookmark" | undefined;
-        mode?: "local" | "remote" | undefined;
-        defaultIdentity?: string | undefined;
-        caFile?: string | undefined;
-        organizationId?: string | undefined;
-    }>>;
-}, "strip", z.ZodTypeAny, {
-    active: string;
-    instances: Record<string, {
-        url?: string | undefined;
-        issuer?: string | undefined;
-        domainIssuer?: string | undefined;
-        createdAt?: string | undefined;
-        slug?: string | undefined;
-        name?: string | undefined;
-        kind?: "bookmark" | undefined;
-        mode?: "local" | "remote" | undefined;
-        defaultIdentity?: string | undefined;
-        caFile?: string | undefined;
-        organizationId?: string | undefined;
-    }>;
-}, {
-    active: string;
-    instances: Record<string, {
-        url?: string | undefined;
-        issuer?: string | undefined;
-        domainIssuer?: string | undefined;
-        createdAt?: string | undefined;
-        slug?: string | undefined;
-        name?: string | undefined;
-        kind?: "bookmark" | undefined;
-        mode?: "local" | "remote" | undefined;
-        defaultIdentity?: string | undefined;
-        caFile?: string | undefined;
-        organizationId?: string | undefined;
-    }>;
-}>;
-export type InstanceEntry = z.infer<typeof InstanceEntrySchema>;
-export type InstanceStore = z.infer<typeof InstanceStoreSchema>;
-export type AddInstanceOpts = {
-    url?: string;
-    slug?: string;
-    name?: string;
-    kind?: InstanceKind;
-    mode?: RegistryMode;
-    issuer?: string;
-    domainIssuer?: string;
-    defaultIdentity?: string;
-    caFile?: string;
-    organizationId?: string;
-};
-export type ResolvedInstance = {
-    name: string;
-    kind: InstanceKind | 'managed';
-    url: string;
-    issuer?: string;
-    domainIssuer?: string;
-    createdAt?: string;
-    defaultIdentity?: string;
-    caFile?: string;
-    mode?: RegistryMode;
-    status?: string;
-};
-export type BookmarkTrustConflict = {
-    readonly name: string;
-    readonly caFile: string | null;
-};
-export declare function sanitizeStore(store: InstanceStore): {
-    store: InstanceStore;
-    changed: boolean;
-};
-/**
- * Invalidate the one-process bookmark snapshot. Long-lived compatibility
- * consumers call this before a read so CLI writes made by another process are
- * observable; one-shot commands normally never need it.
- */
-export declare function resetInstancesMemo(): void;
-export declare function readInstances(_config?: AstraleConfig, opts?: {
-    persist?: boolean;
-}): Promise<InstanceStore>;
-export declare function writeInstances(store: InstanceStore): Promise<void>;
-export declare function assertNoCollision(store: InstanceStore, identifiers: string[], ignoreKey?: string): void;
-export declare function resolveInstanceKey(store: InstanceStore, identifier: string): string | null;
-/**
- * Find other bookmarks for the same normalized Kernel URL whose TLS trust
- * configuration differs. System trust (`undefined`) is a configuration too:
- * mixing it with a custom CA is exactly as significant as mixing two CA files.
- */
-export declare function findBookmarkTrustConflicts(store: InstanceStore, name: string, url: string, caFile?: string): BookmarkTrustConflict[];
-export declare function addInstance(key: string, opts?: AddInstanceOpts): Promise<InstanceEntry>;
-export declare function upsertInstance(key: string, opts?: AddInstanceOpts): Promise<{
-    entry: InstanceEntry;
-    created: boolean;
-}>;
-/**
- * Bookmark an admin-managed instance under `key` (url = issuer = the
- * normalized kernel URL). Reports the previous URL when an existing
- * bookmark was repointed to a different kernel so callers can warn.
- */
-export declare function upsertManagedBookmark(input: Readonly<{
-    key: string;
-    slug: string;
-    url: string;
-    organizationId?: string;
-    defaultIdentity?: string;
-}>): Promise<{
-    entry: InstanceEntry;
-    repointedFrom?: string;
-}>;
-export declare function removeInstance(key: string): Promise<void>;
-export declare function setActive(identifier: string): Promise<string>;
-export declare function clearActive(identifier: string): Promise<void>;
-export declare function getActive(config?: AstraleConfig): Promise<InstanceEntry & {
-    name: string;
-}>;
-export declare function resolveInstance(identifier: string, config?: AstraleConfig): Promise<ResolvedInstance>;
-export declare function resolveKernelUrl(opts: {
-    url?: string;
-    instance?: string;
-}, config: AstraleConfig): Promise<string>;
-/**
- * The bookmarked org id for the instance matching `audience`'s origin —
- * consulted before the router's eventually-consistent `/auth/org`.
- */
-export declare function orgIdForAudience(audience: string): Promise<string | undefined>;
-export declare function normalizeInstanceKernelUrl(url: string): string;
-export declare function normalizeIssuerUrl(url: string): string;

package/dist/types/lib/invocation.d.ts

@@ -1,3 +0,0 @@
-/** Process-wide machine mode from argv (`--json` / `--raw` / `--ci`). */
-export declare function configureInvocation(argv: readonly string[]): void;
-export declare function invocationWantsMachine(): boolean;

package/dist/types/lib/log.d.ts

@@ -1,33 +0,0 @@
-import { type Ora } from 'ora';
-import { type MachineOpts } from './output';
-export declare const log: {
-    info: (msg: string) => void;
-    success: (msg: string) => void;
-    warn: (msg: string) => void;
-    error: (msg: string) => void;
-    step: (msg: string) => void;
-    dim: (msg: string) => void;
-};
-/** Report an error with hint (when present) and exit. `--json` / `--ci` / a
- *  non-TTY stdout always get one structured JSON line on stderr. */
-export declare function fatal(e: unknown, opts?: MachineOpts & {
-    readonly debug?: boolean;
-}): never;
-/** Project only a caller-authored admission failure into the CLI input family. */
-export declare function failInput(error: unknown, opts?: MachineOpts): never;
-/** Shortcut for stub commands that aren't wired in v1 (§15). */
-export declare function fatalNotImplemented(feature: string, hint?: string): never;
-/**
- * Run an async operation behind a spinner. Pass `enabled: false` for
- * machine-readable output modes. Errors are rethrown after the spinner is
- * stopped (✖ label failed).
- *
- * On success the spinner line is cleared — commands print their own result.
- * Pass `opts.success` to instead persist a single final line
- * (✔ <success text> <elapsed>) so a command ends on one line, not a
- * spinner line + result line pair.
- */
-export declare function withSpinner<T>(label: string, enabled: boolean, fn: () => Promise<T>, opts?: {
-    success?: (result: T) => string;
-}): Promise<T>;
-export declare function spinner(text: string): Ora;

package/dist/types/lib/login-flow.d.ts

@@ -1,49 +0,0 @@
-import { type IdpSession } from './idp';
-/**
- * The IdP login flow, lifted out of the `auth login` command so it can be
- * driven from anywhere (the command renders the result; `astrale setup` runs it
- * as one hand-held step). The side effects — saving the session cache and
- * upserting the IdP-backed identity — live here so every caller gets identical
- * behavior; presentation (the device URL is logged here; success lines are the
- * caller's) does not.
- */
-export type LoginFlowOpts = {
-    idp?: string;
-    name?: string;
-    scope?: string;
-    audience?: string;
-    clientId?: string;
-    clientSecretEnv?: string;
-    clientCredentials?: boolean;
-    code?: string;
-    redirectUri?: string;
-    codeVerifier?: string;
-    /** Switch the default identity to the one we just logged in (default true). */
-    use?: boolean;
-    /**
-     * Optional device-flow presentation boundary. When supplied, the caller
-     * receives the verification coordinates instead of terminal log output.
-     */
-    onVerification?: (event: DeviceVerification) => void;
-};
-export type DeviceVerification = {
-    verificationUri: string;
-    verificationUriComplete?: string;
-    userCode?: string;
-    expiresIn?: number;
-    message?: string;
-};
-export type LoginResult = {
-    session: IdpSession;
-    identityName: string;
-    idpName: string;
-};
-/**
- * Authenticate against an IdP and persist the result. Throws on any failure
- * (no session is written) — notably BEFORE saving when an explicit `--audience`
- * does not match the minted access token, so a wrong-audience login never
- * leaves a half-written cache.
- */
-export declare function loginViaIdp(opts: LoginFlowOpts): Promise<LoginResult>;
-/** Resolve which IdP to use: explicit name, the sole configured one, or WorkOS. */
-export declare function resolveIdpName(name: string | undefined): Promise<string>;

package/dist/types/lib/meta.d.ts

@@ -1,36 +0,0 @@
-/**
- * Issuer reachability helpers — OIDC discovery + JWKS.
- *
- * Kernels don't expose `/meta`. They expose OIDC discovery at
- * `/.well-known/openid-configuration` (standard, returns `issuer` and
- * `jwks_uri`) and JWKS at `/.well-known/jwks.json`. These helpers probe
- * both to verify the issuer is alive and publishes at least one key.
- *
- * Domain deployment readiness uses the canonical Domain Publication; that is
- * outside this issuer-connectivity helper.
- */
-type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-export type DiscoveryDocument = {
-    /** OIDC issuer URL. */
-    issuer: string;
-    /** JWKS URI (defaults to `<issuer>/.well-known/jwks.json`). */
-    jwksUri: string;
-};
-export declare function fetchDiscovery(url: string, timeoutMs?: number, fetchImpl?: FetchLike): Promise<DiscoveryDocument>;
-export declare function fetchJwks(jwksUri: string, timeoutMs?: number, fetchImpl?: FetchLike): Promise<{
-    keys: Array<{
-        kid?: string;
-    }>;
-}>;
-/**
- * Discover the WorkOS organization an instance host pins
- */
-export declare function fetchOrgHint(url: string, timeoutMs?: number): Promise<string | undefined>;
-/** Verify the pinned issuer publishes self-consistent OIDC discovery and a non-empty JWKS. */
-export declare function checkIssuerReachability(url: string, issuerOverride?: string, fetchImpl?: FetchLike): Promise<{
-    issuer: string;
-    keys: Array<{
-        kid?: string;
-    }>;
-}>;
-export {};

package/dist/types/lib/output.d.ts

@@ -1,87 +0,0 @@
-import { type Column } from './table';
-export type { Column } from './table';
-export type OutputOpts = {
-    raw?: boolean;
-    json?: boolean;
-    format?: 'yaml' | 'json';
-};
-export type RawOutputOpts = Pick<OutputOpts, 'raw' | 'json'>;
-export type MachineOpts = RawOutputOpts & {
-    readonly ci?: boolean;
-};
-export declare const RAW_OUTPUT_OPTIONS: readonly [{
-    readonly flags: '--json';
-    readonly description: 'Always-valid JSON (for jq)';
-}, {
-    readonly flags: '--raw';
-    readonly description: 'Unwrapped: bare scalar / raw bytes / JSON for objects';
-}];
-/**
- * Is the consumer a machine (emit structured data, not a pretty view)?
- * True for `--json`, `--raw`, `--ci`, a process-wide `--ci/--json/--raw` on argv,
- * or any non-TTY stdout (pipe, redirect, agent).
- */
-export declare function isMachine(opts?: MachineOpts): boolean;
-/**
- * `--raw` = the *unwrapped* value (bare scalar, raw bytes). The raw-vs-json
- * distinction only manifests for scalars and binary; objects/arrays fall back
- * to JSON under either flag.
- */
-export declare function isUnwrapped(opts?: RawOutputOpts): boolean;
-/**
- * Write structured data to stdout in the appropriate format.
- *
- * Precedence:
- * - `--raw` / `--json` → plain JSON, no colors (machine-readable)
- * - explicit `--format yaml|json` → honor regardless of TTY, colors only on TTY
- * - default on TTY → highlighted YAML
- * - default on non-TTY → plain JSON
- *
- * Void-returning syscalls surface as `undefined` here; `JSON.stringify(undefined)`
- * itself returns `undefined`, which would print the bare string `undefined` and
- * break any caller doing `JSON.parse(stdout)`. Normalize to `null` (parseable
- * JSON, valid YAML) at the entry so every formatter branch is consistent.
- */
-export declare function output(data: unknown, opts: OutputOpts): void;
-export type PresentOpts = OutputOpts & {
-    denoise?: boolean;
-};
-/** One display row per item plus the columns and (optional) `-q` paths. */
-export type ListProjection = {
-    columns: Column[];
-    rows: Array<Record<string, string>>;
-    paths?: string[];
-};
-export type ListOpts = OutputOpts & {
-    quiet?: boolean;
-    count?: boolean;
-    long?: boolean;
-};
-/**
- * Strip heavy, low-signal keys (serialized schema blobs, SVG icons, code) at any
- * depth — so machine output is the kernel's data minus the noise, never a wall.
- */
-export declare function denoise(value: unknown): unknown;
-/**
- * Present a single kernel value, shape- and audience-aware.
- *
- * - scalar → `--raw` bare (no quotes, for `X=$(…)`) · `--json`/pipe JSON · TTY bare
- * - object → YAML on a TTY, JSON for machines (delegates to {@link output})
- * - array  → YAML/JSON fallback (use {@link presentList} for a table)
- *
- * `null`/`undefined` normalize to `null` (via `output`) so `JSON.parse(stdout)`
- * never breaks.
- */
-export declare function present(value: unknown, opts?: PresentOpts): void;
-/**
- * Present an array of objects.
- *
- * - `--count`     → just the number
- * - `-q/--quiet`  → one path per line (unix-pipeable)
- * - machine       → denoised JSON of the raw items (`-l` keeps full items)
- * - TTY           → an aligned table + a dim count footer
- *
- * Projection (columns/rows/paths) is for the human table and `-q` only; the
- * machine surface stays the kernel's own item fields.
- */
-export declare function presentList<T>(items: T[], opts: ListOpts, project: (items: T[]) => ListProjection): void;

package/dist/types/lib/proc.d.ts

@@ -1,43 +0,0 @@
-import { type ChildProcess, type StdioOptions } from 'node:child_process';
-export type RunResult = {
-    /** Exit code, or -1 when the process was killed by a signal. */
-    code: number;
-    stdout: string;
-    stderr: string;
-};
-/**
- * Spawn a child process and capture stdout/stderr as UTF-8 text.
- *
- * Uses `node:child_process` rather than `Bun.spawn` so the exact same code runs
- * under both the Bun-compiled standalone binary (Linux/macOS) and the Node/npm
- * build (Windows and any Node user). The promise rejects only when the process
- * fails to spawn (e.g. ENOENT); a non-zero exit resolves with that `code` so
- * callers can branch on it.
- */
-export declare function run(file: string, args?: string[], opts?: {
-    cwd?: string;
-}): Promise<RunResult>;
-/**
- * Spawn a child process with inherited stdio so its output streams live to the
- * user's terminal. Used for hand-held installs (npm / npx) where progress
- * matters and the output is for the human, not for parsing. Resolves with the
- * exit code; rejects only when the process fails to spawn (e.g. ENOENT).
- */
-export declare function runInherit(file: string, args?: string[], opts?: {
-    cwd?: string;
-}): Promise<number>;
-/**
- * Spawn a LONG-LIVED child and return the handle immediately so the caller can
- * supervise it (wait for exit, forward signals, tear down siblings). Unlike
- * run()/runInherit() — which resolve only once the child closes — this is for
- * servers the command keeps attached to (e.g. `astrale studio`'s Bun server and
- * Vite dev process). Same node:child_process basis (cross-runtime) and bare
- * PATH-name lookup convention. Default stdio streams stdout/stderr live but
- * ignores stdin, so two supervised children never contend for the TTY.
- */
-export declare function spawnHandle(file: string, args?: string[], opts?: {
-    cwd?: string;
-    env?: NodeJS.ProcessEnv;
-    stdio?: StdioOptions;
-    detached?: boolean;
-}): ChildProcess;

package/dist/types/lib/self.d.ts

@@ -1,9 +0,0 @@
-/**
- * Lexical `@self` helpers. Effective-principal resolution is deliberately not
- * local: connection/self.ts asks the authenticated target Kernel through
- * Identity.whoami before replacing any reference.
- */
-/** Cheap pre-check before invoking authenticated principal resolution. */
-export declare function containsSelfRef(input: string): boolean;
-/** Replace every admitted `@self` token with one authenticated NodeId. */
-export declare function expandSelfReferences(input: string, selfId: string): string;

package/dist/types/lib/table.d.ts

@@ -1,18 +0,0 @@
-/** A display column: which row key to read, its header, and an optional cell color. */
-export type Column = {
-    key: string;
-    header: string;
-    color?: (s: string) => string;
-};
-/**
- * Render an aligned, optionally-colored table.
- *
- * Cells may carry ANSI (e.g. a per-row status color) — widths are computed on
- * visible length so alignment stays correct. `Column.color` colors a whole
- * column of otherwise-plain cells. Columns empty across every row are dropped;
- * the last column is left unpadded so there's no trailing whitespace.
- */
-export declare function renderTable(rows: Array<Record<string, string>>, opts: {
-    columns: Column[];
-    showHeader?: boolean;
-}): string;

package/dist/types/lib/update.d.ts

@@ -1,131 +0,0 @@
-import { z } from 'zod';
-import { AstraleError } from '../errors';
-export declare const DEFAULT_UPDATE_CHANNEL = "beta";
-export declare const InstallMetadataSchema: z.ZodObject<{
-    method: z.ZodLiteral<"script">;
-    channel: z.ZodDefault<z.ZodString>;
-    version: z.ZodOptional<z.ZodString>;
-    repo: z.ZodDefault<z.ZodString>;
-    bin: z.ZodString;
-    installedAt: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-    method: "script";
-    channel: string;
-    version?: string | undefined;
-    repo: string;
-    bin: string;
-    installedAt?: string | undefined;
-}, {
-    method: "script";
-    channel?: string | undefined;
-    version?: string | undefined;
-    repo?: string | undefined;
-    bin: string;
-    installedAt?: string | undefined;
-}>;
-export type InstallMetadata = z.infer<typeof InstallMetadataSchema>;
-export declare const UpdateManifestSchema: z.ZodObject<{
-    version: z.ZodString;
-    binaryVersion: z.ZodOptional<z.ZodString>;
-    channel: z.ZodString;
-    repo: z.ZodOptional<z.ZodString>;
-    assets: z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodObject<{
-        name: z.ZodString;
-        sha256: z.ZodOptional<z.ZodString>;
-    }, "strip", z.ZodTypeAny, {
-        name: string;
-        sha256?: string | undefined;
-    }, {
-        name: string;
-        sha256?: string | undefined;
-    }>, z.ZodEffects<z.ZodString, {
-        name: string;
-    }, string>]>>;
-}, "strip", z.ZodTypeAny, {
-    version: string;
-    binaryVersion?: string | undefined;
-    channel: string;
-    repo?: string | undefined;
-    assets: Record<string, {
-        name: string;
-        sha256?: string | undefined;
-    } | {
-        name: string;
-    }>;
-}, {
-    version: string;
-    binaryVersion?: string | undefined;
-    channel: string;
-    repo?: string | undefined;
-    assets: Record<string, string | {
-        name: string;
-        sha256?: string | undefined;
-    }>;
-}>;
-export type UpdateManifest = z.infer<typeof UpdateManifestSchema>;
-export type Platform = {
-    os: 'darwin' | 'linux';
-    arch: 'arm64' | 'x64';
-};
-export type UpdateRequest = {
-    check?: boolean;
-    channel?: string;
-    version?: string;
-    currentVersion: string;
-    platform?: Platform;
-    installPath?: string;
-    execution?: UpdateExecution;
-};
-export type UpdateExecution = {
-    kind: 'standalone';
-    executable: string;
-} | {
-    kind: 'package-managed';
-    executable: string;
-};
-declare const admittedScriptInstall: unique symbol;
-export type AdmittedScriptInstall = Readonly<{
-    metadata: InstallMetadata;
-    executable: string;
-    [admittedScriptInstall]: true;
-}>;
-export type UpdateResult = {
-    status: 'managed';
-    currentVersion: string;
-    executable: string;
-} | {
-    status: 'up-to-date';
-    currentVersion: string;
-    latestVersion: string;
-    channel: string;
-} | {
-    status: 'available';
-    currentVersion: string;
-    latestVersion: string;
-    channel: string;
-} | {
-    status: 'updated';
-    previousVersion: string;
-    currentVersion: string;
-    channel: string;
-    bin: string;
-};
-export declare function detectPlatform(): Platform;
-export declare function platformKey(platform: Platform): string;
-export declare function classifyUpdateExecution(input: {
-    bunVersion?: string;
-    executable: string;
-    entry?: string;
-}): UpdateExecution;
-export declare function detectUpdateExecution(): UpdateExecution;
-export declare function packageManagedUpdateError(executable: string): AstraleError;
-export declare function readInstallMetadata(path?: string): Promise<InstallMetadata>;
-export declare function admitScriptInstall(meta: InstallMetadata, execution: Extract<UpdateExecution, {
-    kind: 'standalone';
-}>): Promise<AdmittedScriptInstall>;
-export declare function writeInstallMetadata(meta: InstallMetadata, path?: string): Promise<void>;
-export declare function releaseBase(meta: InstallMetadata, req: Pick<UpdateRequest, 'channel' | 'version'>): string;
-export declare function fetchManifest(base: string): Promise<UpdateManifest>;
-export declare function shouldUpdate(currentVersion: string, manifestVersion: string): boolean;
-export declare function updateAstrale(req: UpdateRequest): Promise<UpdateResult>;
-export {};

package/dist/types/lib/validation.d.ts

@@ -1,11 +0,0 @@
-import { z } from 'zod';
-declare const RESERVED_SLUGS: Set<string>;
-export { RESERVED_SLUGS };
-export declare function validateName(name: string, entity: string): void;
-export declare function validateSlug(slug: string): void;
-export declare function validateUrl(url: string): void;
-/** Non-throwing predicate form of `validateUrl`. */
-export declare function isHttpUrl(url: string): boolean;
-/** `local` = only this machine. `remote` = mirrored via astrale cloud (§2.7). */
-export declare const RegistryModeSchema: z.ZodEnum<["local", "remote"]>;
-export type RegistryMode = z.infer<typeof RegistryModeSchema>;

package/dist/types/paths/index.d.ts

@@ -1,2 +0,0 @@
-export { ASTRALE_HOME, CONFIG_PATH, DATA_DIR, IDENTITIES_PATH, IDPS_PATH, IDP_SESSIONS_DIR, INSTALL_PATH, INSTANCES_PATH, KEYS_DIR, createPaths, } from '../state/index';
-export type { PathEnvironment, Paths } from '../state/index';

package/dist/types/state/exchange-credentials.d.ts

@@ -1,25 +0,0 @@
-export declare namespace exchange {
-    interface Artifact {
-        readonly version: 1;
-        readonly entries: Record<string, Entry>;
-    }
-    interface Key {
-        readonly kernelIssuer: string;
-        readonly domainIssuer: string;
-        readonly user: string;
-    }
-    interface Entry {
-        readonly credential: string;
-        readonly expiresAt: number;
-    }
-}
-export declare class ExchangeCredentialCache {
-    private readonly path;
-    private readonly refreshing;
-    constructor(path?: string);
-    getOrRefresh(key: exchange.Key, refresh: () => Promise<exchange.Entry>, now?: () => number): Promise<string>;
-    deleteKernel(kernelIssuer: string): Promise<void>;
-    clear(): Promise<void>;
-    private getOrRefreshOnce;
-    private transition;
-}

package/dist/types/state/files.d.ts

@@ -1,9 +0,0 @@
-/** Atomically publish one complete private state file through a same-directory temporary file. */
-export declare function atomicWrite(path: string, data: string): Promise<void>;
-export interface FileLockOptions {
-    readonly pollIntervalMs?: number;
-    readonly staleAfterMs?: number;
-    readonly timeoutMs?: number;
-}
-/** Run one transition under a bounded cross-process create-exclusive lock. */
-export declare function withFileLock<Value>(lockPath: string, transition: () => Promise<Value>, options?: FileLockOptions): Promise<Value>;