@astrale-os/sdk 0.6.0-beta.19 → 0.6.0-beta.20

package/dist/deployment/adapter/release/list.d.ts

@@ -1,18 +1,23 @@
 import type { DeploymentSummaryV1 } from '../../address/index.js';
 /**
- * Where one listed deployment is called on its host, so that an operator can act on that
- * deployment alone, such as rotating one of its secrets in place (AM-4'):
+ * Where one listed deployment is called on its host, so that an operator can act on it:
  *
  * - `services`: a deployment Admin's Services hosts, called on the Admin instance with
- *   `astrale call "<path>.method.setSecret" --admin` (`--admin=<admin>` when `admin` names the
- *   Admin bookmark). `path` is the deployment's node, `@<id>`, qualified by its class:
- *   `@<id>::services.astrale.ai:class.CloudflareDeployment`.
+ *   `astrale call "<node>.method.<method>" --admin` (`--admin=<admin>` when `admin` names the
+ *   Admin bookmark). `path` is the deployment's node, `@<id>`, qualified by its class,
+ *   `@<id>::services.astrale.ai:class.CloudflareDeployment`, whose only Method is `retire`.
+ *   `service` is the node of the Service it is a version of,
+ *   `@<serviceId>::services.astrale.ai:class.CloudflareService`, whose Methods act on the Service
+ *   and the deployment it currently serves: `promote` (this deployment's label rolls the Service
+ *   back or forward to it), `setSecret` and `secrets`, `setSchedule` and `schedules`, `logs`,
+ *   `transfer` and `delete`.
  * - `namespace`: a deployment of a platform dispatch namespace, which has no Services node: the
  *   namespace and the script the per-script tooling of that namespace takes.
  */
 export type DeploymentCallTarget = {
     readonly kind: 'services';
     readonly path: string;
+    readonly service: string;
     /** The Admin bookmark the deployment is reached through; the CLI's own Admin target when absent. */
     readonly admin?: string;
 } | {
@@ -25,6 +30,8 @@ export type DeploymentCallTarget = {
  * host stores it, and where it is called. `lastCallAt`, and a preview's `expiresAt`, are as of the
  * listing: an adapter whose host records calls only now and then reads the calls counted since, and
  * one that cannot read them for want of a permission omits both rather than print stale values.
+ * Admin's Services keeps every deployment until it is retired and counts no call: its deployments
+ * are `published`, `withdrawn` once retiring, and carry neither clock.
  *
  * The adapter does not admit the record. The listing admits it with `acceptDeploymentRecord`, and a
  * record it refuses (one a host on an older SDK still admits, say) never fails the listing: that
@@ -37,5 +44,10 @@ export interface ListedDeployment extends Omit<DeploymentSummaryV1, 'record'> {
      * it activates the deployment.
      */
     readonly record?: unknown;
+    /**
+     * Whether the stable URL of the deployment's Service serves it. Present only where the host has
+     * Services (Admin's Services); a platform namespace has none.
+     */
+    readonly current?: boolean;
     readonly callTarget: DeploymentCallTarget;
 }

package/dist/project/define.js

@@ -4,10 +4,6 @@ import { ENVIRONMENT_NAME } from '../deployment/environment.js';
 import { isTests } from '../testing/index.js';
 import { installCommand } from './install-command.js';
 const admittedProjects = new WeakSet();
-/** The adapter name of adapter-astrale, whose removed instance mode once read `installation`. */
-const ASTRALE_ADAPTER = 'astrale';
-/** The one Environment adapter-astrale deploys without an explicit organisation (AM-7). */
-const ASTRALE_DEFAULT_ORGANIZATION_ENVIRONMENT = 'development';
 /** Capture one inert Project definition without loading entrypoints or performing effects. */
 export function defineProject(input) {
     const value = record(input, 'Project definition');
@@ -82,10 +78,8 @@ function admitEntrypoints(input) {
  * `installation` is refused before any effect, with the commands that replace it. Its only
  * consumer pins an SDK older than this refusal.
  *
- * adapter-astrale deploys on Admin's Services, never through the installation's instance: outside
- * development its Environment also names the organisation that holds its deployment line (AM-7),
- * which the guidance adds when the adapter names none. The installation's instance and identity
- * move to the install command.
+ * adapter-astrale deploys on Admin's Services, never through the installation's instance. The
+ * installation's instance and identity move to the install command.
  */
 function installationRefusal(environment, name) {
     const declared = environment.installation;
@@ -98,15 +92,8 @@ function installationRefusal(environment, name) {
         : {};
     const instance = stable(installation.instance);
     const identity = stable(installation.identity);
-    const deployment = environment.deployment;
-    const organization = isDeployment(deployment) &&
-        deployment.adapter.name === ASTRALE_ADAPTER &&
-        name !== ASTRALE_DEFAULT_ORGANIZATION_ENVIRONMENT &&
-        deployment.parameters.organization === undefined
-        ? ", name the organisation that holds its deployment line in `astrale({ organization: '<Identity id>' })`"
-        : '';
     return (`Project Environment ${name} declares installation, and a deploy no longer installs. ` +
-        `Remove \`installation\`${organization}, run \`astrale-domain deploy ${name}\`, ` +
+        `Remove \`installation\`, run \`astrale-domain deploy ${name}\`, ` +
         `then install the URL it prints with \`${installCommand(instance, identity)}\`.`);
 }
 /** A declared coordinate worth repeating in guidance: a non-empty single-line trimmed string. */

package/dist/tooling/cli/deploy-mode.js

@@ -2,8 +2,6 @@ import { installCommand } from '../../project/install-command.js';
 /** The adapter names of the first-party adapters whose parameters CT33 classifies. */
 const CLOUDFLARE = 'cloudflare';
 const ASTRALE = 'astrale';
-/** The one Environment adapter-astrale deploys without an explicit organisation (AM-7). */
-const DEVELOPMENT = 'development';
 /** The parameters that named the stable Service of adapter-astrale's removed instance mode. */
 const ASTRALE_SERVICE_PARAMETERS = ['serviceKey', 'name'];
 const CLOUDFLARE_DIRECT_PARAMETERS = [
@@ -48,10 +46,7 @@ export function selectDeployMode(input) {
             refusals.push({
                 reason: 'astrale-signing-identity',
                 guidance: 'astrale({ signingIdentity }) is no longer accepted: each deployment gets a signing key ' +
-                    'generated when it is deployed. Remove `signingIdentity`' +
-                    // With `instance`, its own refusal already names the organisation.
-                    (declares(parameters, 'instance') ? '' : organizationGuidance(parameters, environment)) +
-                    '.',
+                    'generated when it is deployed. Remove `signingIdentity`.',
             });
         }
     }
@@ -98,8 +93,8 @@ export function selectDeployMode(input) {
 }
 /**
  * How an adapter-astrale Environment of the removed instance mode deploys now: without `instance`
- * (nor `serviceKey` and `name`, which named its stable Service), outside development on a line its
- * named organisation holds (AM-7), then installed by URL on the instance it used to deploy through.
+ * (nor `serviceKey` and `name`, which named its stable Service), then installed by URL on the
+ * instance it used to deploy through.
  */
 function astraleInstanceGuidance(parameters, environment) {
     const instance = String(parameters.instance);
@@ -108,18 +103,11 @@ function astraleInstanceGuidance(parameters, environment) {
         ? 'Remove `instance`'
         : `Remove \`instance\` with ${service.map((name) => `\`${name}\``).join(' and ')}, ` +
             `which named its stable Service`;
-    const organization = organizationGuidance(parameters, environment);
     return (`astrale({ instance: '${instance}' }) deployed through that instance's Services, which no ` +
-        `longer hosts deployments. ${removed}${organization}: \`astrale-domain deploy ${environment}\` ` +
+        `longer hosts deployments. ${removed}: \`astrale-domain deploy ${environment}\` ` +
         `makes an immutable deployment on Admin's Services, and \`${installCommand(instance)}\` ` +
         'installs it.');
 }
-/** Outside development, an adapter-astrale Environment names the organisation of its line (AM-7). */
-function organizationGuidance(parameters, environment) {
-    return environment === DEVELOPMENT || declares(parameters, 'organization')
-        ? ''
-        : ", and name the organisation that holds the deployment line in `astrale({ organization: '<Identity id>' })`";
-}
 /**
  * Why a legacy direct-mode Environment cannot be published, and the configuration that makes it
  * publishable: a version names an immutable deployment's release, which a stable target never

package/dist/tooling/cli/list.d.ts

@@ -27,9 +27,10 @@ export interface ListResultV1 {
 /**
  * One deployment: what its host knows (`DeploymentSummaryV1`), the Environment it was listed for
  * and its adapter, its computed name, and its call target. `lastCallAt` and a preview's `expiresAt`
- * are as of the listing: an adapter reads the calls its host counted since it last recorded them
- * (adapter-astrale: `CloudflareDeployment.lastCalls`), or every call from the calls dataset of a
- * platform namespace (adapter-cloudflare), which omits both without Account Analytics Read.
+ * are as of the listing: a platform namespace (adapter-cloudflare) reads every call from its calls
+ * dataset, and omits both without Account Analytics Read. Admin's Services (adapter-astrale) keeps
+ * every deployment until it is retired and counts no call: its rows are `published`, with neither
+ * clock, and say whether their Service serves them (`current`).
  */
 export type ListedDeploymentV1 = Omit<DeploymentSummaryV1, 'record'> & {
     /** The Project Environment whose line holds the deployment, as its host listed it. */
@@ -64,7 +65,12 @@ export type ListedDeploymentV1 = Omit<DeploymentSummaryV1, 'record'> & {
      * present exactly when `record` is `null`.
      */
     readonly recordRefusal?: string;
-    /** Where to call this deployment alone, such as to rotate one of its secrets in place. */
+    /**
+     * Whether the stable URL of the deployment's Service serves it; present only for a host with
+     * Services (Admin's Services).
+     */
+    readonly current?: boolean;
+    /** Where to call this deployment, and on Admin's Services its Service. */
     readonly callTarget: DeploymentCallTarget;
 };
 /**
@@ -111,8 +117,8 @@ export type DeploymentRegistry = Pick<DomainRegistry, 'index' | 'instance'>;
  * Only an Environment that deploys immutable deployments (CT33 canonical) is listed; the others are
  * `unlisted`, with the reason. A record the host returns but `acceptDeploymentRecord` refuses never
  * fails the listing: that deployment is listed from what its host knows, its record `null`. This
- * covers a host whose SDK still admits a record this SDK refuses; a host that refuses a stored
- * record itself may fail its own list (Admin's Services does, AM-152). An Environment whose host
+ * covers a host whose SDK still admits a record this SDK refuses, and a host that lists a record
+ * its own SDK no longer admits as it is stored (Admin's Services does). An Environment whose host
  * cannot be listed, or whose adapter answers anything but deployments, is a failure, and the others
  * are still listed.
  *
@@ -140,9 +146,9 @@ export declare function listDeployments(input: {
 }): Promise<DeploymentListing>;
 /**
  * The listing as a table for a person, at `now`: each deployment's release, its name as computed
- * (never shortened, AM-57), its Environment and state, the instances known to pin it (`?` when a
- * source could not tell, AM-198), its last call and its expiry, and the URL `astrale domain
- * install` takes. Without deployments, it says so only for what was listed: nothing when a host
+ * (never shortened, AM-57), its Environment and state (`active (current)` for the deployment its
+ * Service serves), the instances known to pin it (`?` when a source could not tell, AM-198), its
+ * last call and its expiry, and the URL `astrale domain install` takes. Without deployments, it says so only for what was listed: nothing when a host
  * `failed` (stderr says which), and that some Environments were not listed when any was not.
  */
 export declare function renderDeploymentList(result: ListResultV1, now: number, failed?: boolean): readonly string[];

package/dist/tooling/cli/list.js

@@ -10,8 +10,8 @@ import { installationNotices, installedOn, installedOnCell, readInstallations, s
  * Only an Environment that deploys immutable deployments (CT33 canonical) is listed; the others are
  * `unlisted`, with the reason. A record the host returns but `acceptDeploymentRecord` refuses never
  * fails the listing: that deployment is listed from what its host knows, its record `null`. This
- * covers a host whose SDK still admits a record this SDK refuses; a host that refuses a stored
- * record itself may fail its own list (Admin's Services does, AM-152). An Environment whose host
+ * covers a host whose SDK still admits a record this SDK refuses, and a host that lists a record
+ * its own SDK no longer admits as it is stored (Admin's Services does). An Environment whose host
  * cannot be listed, or whose adapter answers anything but deployments, is a failure, and the others
  * are still listed.
  *
@@ -198,6 +198,7 @@ function listedDeployment(hosted, publications, installations) {
         signingKeyId: deployment.signingKeyId,
         record,
         ...(recordRefusal === undefined ? {} : { recordRefusal }),
+        ...(deployment.current === undefined ? {} : { current: deployment.current }),
         callTarget: deployment.callTarget,
     });
 }
@@ -275,9 +276,13 @@ function admitListed(deployment, adapter) {
         value.retirement !== 'withdrawn') {
         invalid('retirement');
     }
+    if (value.current !== undefined && typeof value.current !== 'boolean')
+        invalid('current');
     const target = members(value.callTarget) ?? invalid('callTarget');
     if (target.kind === 'services') {
-        if (!text(target.path) || (target.admin !== undefined && !text(target.admin))) {
+        if (!text(target.path) ||
+            !text(target.service) ||
+            (target.admin !== undefined && !text(target.admin))) {
             invalid('callTarget');
         }
     }
@@ -308,9 +313,9 @@ const HOUR = 60 * MINUTE;
 const DAY = 24 * HOUR;
 /**
  * The listing as a table for a person, at `now`: each deployment's release, its name as computed
- * (never shortened, AM-57), its Environment and state, the instances known to pin it (`?` when a
- * source could not tell, AM-198), its last call and its expiry, and the URL `astrale domain
- * install` takes. Without deployments, it says so only for what was listed: nothing when a host
+ * (never shortened, AM-57), its Environment and state (`active (current)` for the deployment its
+ * Service serves), the instances known to pin it (`?` when a source could not tell, AM-198), its
+ * last call and its expiry, and the URL `astrale domain install` takes. Without deployments, it says so only for what was listed: nothing when a host
  * `failed` (stderr says which), and that some Environments were not listed when any was not.
  */
 export function renderDeploymentList(result, now, failed = false) {
@@ -328,7 +333,7 @@ export function renderDeploymentList(result, now, failed = false) {
         deployment.record === null ? '?' : shortDigest(deployment.record.releaseDigest),
         deployment.name,
         deployment.environment,
-        deployment.state,
+        deployment.current === true ? `${deployment.state} (current)` : deployment.state,
         installedOnCell(deployment.installedOn, result.installations),
         deployment.lastCallAt === undefined
             ? '—'

package/dist/tooling/cli/publish/index.js

@@ -299,8 +299,8 @@ function described(cause) {
 }
 /**
  * Keep the published deployment where its host has no registry principal to mark it: the adapter
- * declares `retain` for the platform namespace only (CT36). Admin marks the deployments of its
- * Services itself (A7), so `publish` never calls Services' `retain`. A `RetainRefusal` (absent or
+ * declares `retain` for the platform namespace only (CT36). Admin's Services keeps every
+ * deployment until it is retired, so adapter-astrale declares none. A `RetainRefusal` (absent or
  * retired) is `refused`, which no rerun changes; any other rejection `failed`, which a rerun
  * retries.
  */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/sdk",
-  "version": "0.6.0-beta.19",
+  "version": "0.6.0-beta.20",
   "description": "Schema-first SDK for defining, composing, and deploying Astrale domains",
   "keywords": [
     "astrale",