@astrale-os/sdk 0.6.0-beta.22 → 0.6.0-beta.24

package/dist/deployment/adapter/index.d.ts

@@ -3,5 +3,3 @@ export { defineAdapter, defineDeployment, isAdapter } from './define.js';
 export { RetainRefusal } from './release/refusal.js';
 export type * from './bundle/index.js';
 export type * from './release/index.js';
-/** @deprecated The contract before adapter interface v2; see `./legacy/index.ts`. */
-export type * from './legacy/index.js';

package/dist/deployment/adapter/release/context.d.ts

@@ -1,4 +1,4 @@
-import type { DeploymentCommitV1, FrozenConfigurationV1, LineAddressing } from '../../address/index.js';
+import type { DeploymentCommitV1, DeploymentConfiguration, LineAddressing } from '../../address/index.js';
 import type { Release } from '../../release/index.js';
 import type { Bundle } from '../bundle/index.js';
 /**
@@ -10,8 +10,7 @@ export interface ConfigureContext {
     readonly environment: string;
     /**
      * The names of the Environment's current secrets (the adapter's `secretsFile`), sorted and
-     * unique: exactly the secrets `deployRelease` receives, which the configuration declares in
-     * `bindings.secrets`.
+     * unique: exactly the secrets `deployRelease` receives, which the configuration declares.
      */
     readonly secrets: readonly string[];
 }
@@ -53,7 +52,7 @@ export interface ReleaseDeployContext {
     /** The environment-free bytes of the adapter's `bundler`, identified by `bundle.digest`. */
     readonly bundle: Bundle;
     /** What `configure` froze for this Environment. */
-    readonly configuration: FrozenConfigurationV1;
+    readonly configuration: DeploymentConfiguration;
     /** Where `placement` said the host places the deployment. */
     readonly placement: Placement;
     /**

package/dist/deployment/adapter/release/list.d.ts

@@ -31,8 +31,7 @@ export type DeploymentCallTarget = {
  * host stores it, and where it is called. Admin's Services keeps every deployment until it is
  * retired and counts no call: its deployments are `published` and `withdrawn` once retiring. A
  * Cloudflare dispatch namespace keeps no retention: its rows carry none, and carry their creation
- * instant and key only while their script exists. No first-party adapter reports a last call or an
- * expiry any more; the CLI still prints one an older adapter reports.
+ * instant and key only while their script exists. Deployments have no last-call or expiry clock.
  *
  * The adapter does not admit the record. The listing admits it with `acceptDeploymentRecord`, and a
  * record it refuses (one a host on an older SDK still admits, say) never fails the listing: that

package/dist/deployment/address/configuration.d.ts

@@ -1,4 +1,5 @@
 import type { Digest } from '@astrale-os/kernel-protocol/artifact';
+import type { WorkerConfigurationV1 } from '../worker/configuration.js';
 export declare const FROZEN_CONFIGURATION_FORMAT = "astrale.deployment.configuration";
 export declare const FROZEN_CONFIGURATION_VERSION = 1;
 /**
@@ -70,6 +71,17 @@ export interface FrozenDurableOptions {
     };
     readonly stepTimeoutMs?: number;
 }
+/**
+ * What one deployment freezes beside its build, as its adapter's `configure` returns it: a
+ * `FrozenConfigurationV1`, which a Cloudflare dispatch namespace binds (namespace mode), or a
+ * `WorkerConfigurationV1` (`@astrale-os/sdk/deployment/worker`), which a Worker host binds
+ * (Admin's Services). Its digest and the build digest make the deployment's label.
+ */
+export type DeploymentConfiguration = FrozenConfigurationV1 | WorkerConfigurationV1;
+/** The digest of one frozen configuration of either format, as the deployment's label keeps it. */
+export declare function deploymentConfigurationDigest(configuration: DeploymentConfiguration): Digest;
+/** Whether a configuration is a `FrozenConfigurationV1`, by its format alone (not admitted). */
+export declare function isFrozenConfiguration(configuration: DeploymentConfiguration): configuration is FrozenConfigurationV1;
 /** A configuration before its canonical order: lists in any order, no format header. */
 export type FrozenConfigurationInput = Omit<FrozenConfigurationV1, 'format' | 'version'>;
 /** Freeze one deployment configuration in the one canonical order its digest is taken in. */

package/dist/deployment/address/configuration.js

@@ -1,5 +1,6 @@
 import { json } from '@astrale-os/kernel-dsl/value';
 import { identify } from '@astrale-os/kernel-protocol/artifact';
+import { isWorkerConfiguration, workerConfigurationDigest } from '../worker/configuration.js';
 export const FROZEN_CONFIGURATION_FORMAT = 'astrale.deployment.configuration';
 export const FROZEN_CONFIGURATION_VERSION = 1;
 /** Service binding through which an immutable deployment reaches the instance router. */
@@ -10,6 +11,16 @@ const COMPATIBILITY_DATE = /^\d{4}-\d{2}-\d{2}$/u;
 const BINDING_NAME = /^[A-Za-z_][A-Za-z0-9_]{0,127}$/u;
 /** A Cloudflare dispatch namespace name. */
 const NAMESPACE_NAME = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u;
+/** The digest of one frozen configuration of either format, as the deployment's label keeps it. */
+export function deploymentConfigurationDigest(configuration) {
+    return isWorkerConfiguration(configuration)
+        ? workerConfigurationDigest(configuration)
+        : configurationDigest(configuration);
+}
+/** Whether a configuration is a `FrozenConfigurationV1`, by its format alone (not admitted). */
+export function isFrozenConfiguration(configuration) {
+    return configuration?.format === FROZEN_CONFIGURATION_FORMAT;
+}
 /** Freeze one deployment configuration in the one canonical order its digest is taken in. */
 export function frozenConfiguration(input) {
     if (input === null || typeof input !== 'object')

package/dist/deployment/address/index.d.ts

@@ -1,5 +1,5 @@
-export { configurationDigest, frozenConfiguration, FROZEN_CONFIGURATION_FORMAT, FROZEN_CONFIGURATION_VERSION, type FrozenConfigurationInput, type FrozenDurableOptions, type FrozenConfigurationV1, } from './configuration.js';
+export { configurationDigest, deploymentConfigurationDigest, frozenConfiguration, FROZEN_CONFIGURATION_FORMAT, FROZEN_CONFIGURATION_VERSION, isFrozenConfiguration, type DeploymentConfiguration, type FrozenConfigurationInput, type FrozenDurableOptions, type FrozenConfigurationV1, } from './configuration.js';
 export { DEPLOYMENT_LABEL, deploymentContent, deploymentLabel, deploymentUrl, parseDeploymentLabel, type DeploymentLabelParts, } from './label.js';
 export { deploymentLine, lineFingerprint, readablePart, type DeploymentLineInput, type LineAddressing, } from './line.js';
-export { acceptDeploymentRecord, DEPLOYMENT_RECORD_FORMAT, DEPLOYMENT_RECORD_VERSION, type DeploymentCommitV1, type DeploymentRecordV1, } from './record.js';
+export { acceptDeploymentRecord, decodeDeploymentRecord, DEPLOYMENT_RECORD_FORMAT, DEPLOYMENT_RECORD_MEDIA_TYPE, DEPLOYMENT_RECORD_VERSION, encodeDeploymentRecord, type DeploymentCommitV1, type DeploymentRecordDocument, type DeploymentRecordV1, } from './record.js';
 export type { DeploymentSummaryV1 } from './summary.js';

package/dist/deployment/address/index.js

@@ -1,4 +1,4 @@
-export { configurationDigest, frozenConfiguration, FROZEN_CONFIGURATION_FORMAT, FROZEN_CONFIGURATION_VERSION, } from './configuration.js';
+export { configurationDigest, deploymentConfigurationDigest, frozenConfiguration, FROZEN_CONFIGURATION_FORMAT, FROZEN_CONFIGURATION_VERSION, isFrozenConfiguration, } from './configuration.js';
 export { DEPLOYMENT_LABEL, deploymentContent, deploymentLabel, deploymentUrl, parseDeploymentLabel, } from './label.js';
 export { deploymentLine, lineFingerprint, readablePart, } from './line.js';
-export { acceptDeploymentRecord, DEPLOYMENT_RECORD_FORMAT, DEPLOYMENT_RECORD_VERSION, } from './record.js';
+export { acceptDeploymentRecord, decodeDeploymentRecord, DEPLOYMENT_RECORD_FORMAT, DEPLOYMENT_RECORD_MEDIA_TYPE, DEPLOYMENT_RECORD_VERSION, encodeDeploymentRecord, } from './record.js';

package/dist/deployment/address/label.d.ts

@@ -1,6 +1,6 @@
 import type { Digest } from '@astrale-os/kernel-protocol/artifact';
 import type { BuildDigest } from '../build/manifest.js';
-import type { FrozenConfigurationV1 } from './configuration.js';
+import type { DeploymentConfiguration } from './configuration.js';
 /**
  * Every deployment label: an optional readable part, the 16-character line fingerprint and the
  * 16-character content, both lower-case base32. A legacy provider name (a UUID, a stable Worker
@@ -16,11 +16,11 @@ export interface DeploymentLabelParts {
 }
 /**
  * The 16-character content of one deployment: the first 80 bits of
- * `sha256(utf8(buildDigest) ‖ 0x00 ‖ utf8(configurationDigest(configuration)))` in lower-case
- * base32. It covers the build and the frozen configuration, never a secret: one address serves
- * one release, and a changed variable gives another address.
+ * `sha256(utf8(buildDigest) ‖ 0x00 ‖ utf8(deploymentConfigurationDigest(configuration)))` in
+ * lower-case base32. It covers the build and the frozen configuration, never a secret: one address
+ * serves one release, and a changed variable gives another address.
  */
-export declare function deploymentContent(build: BuildDigest, configuration: FrozenConfigurationV1): string;
+export declare function deploymentContent(build: BuildDigest, configuration: DeploymentConfiguration): string;
 /** The content of a build and a full configuration digest, as a deployment record holds them. */
 export declare function contentOf(build: BuildDigest, configuration: Digest): string;
 /**

package/dist/deployment/address/label.js

@@ -1,4 +1,4 @@
-import { configurationDigest } from './configuration.js';
+import { deploymentConfigurationDigest } from './configuration.js';
 import { first80 } from './fingerprint.js';
 /**
  * Every deployment label: an optional readable part, the 16-character line fingerprint and the
@@ -18,12 +18,12 @@ const MAXIMUM_LABEL_LENGTH = MAXIMUM_LINE_LENGTH + 17;
 const MAXIMUM_HOST_LENGTH = 253;
 /**
  * The 16-character content of one deployment: the first 80 bits of
- * `sha256(utf8(buildDigest) ‖ 0x00 ‖ utf8(configurationDigest(configuration)))` in lower-case
- * base32. It covers the build and the frozen configuration, never a secret: one address serves
- * one release, and a changed variable gives another address.
+ * `sha256(utf8(buildDigest) ‖ 0x00 ‖ utf8(deploymentConfigurationDigest(configuration)))` in
+ * lower-case base32. It covers the build and the frozen configuration, never a secret: one address
+ * serves one release, and a changed variable gives another address.
  */
 export function deploymentContent(build, configuration) {
-    return contentOf(build, configurationDigest(configuration));
+    return contentOf(build, deploymentConfigurationDigest(configuration));
 }
 /** The content of a build and a full configuration digest, as a deployment record holds them. */
 export function contentOf(build, configuration) {

package/dist/deployment/address/record.d.ts

@@ -4,6 +4,11 @@ import type { ReleaseDigest } from '@astrale-os/kernel-protocol/release';
 import type { BuildDigest } from '../build/manifest.js';
 export declare const DEPLOYMENT_RECORD_FORMAT = "astrale.deployment-record";
 export declare const DEPLOYMENT_RECORD_VERSION = 1;
+/**
+ * The media type of a `DeploymentRecordV1` document: what a Domain deployer publishes it with, and
+ * what a host serves it with at `/.well-known/astrale/deployment.json`.
+ */
+export declare const DEPLOYMENT_RECORD_MEDIA_TYPE = "application/vnd.astrale.deployment-record+json;v=1";
 /** The commit a deployment was built from, as the deployer declared it. */
 export interface DeploymentCommitV1 {
     /** The full commit SHA, 40 hexadecimal digits in either case; git prints it in lower case. */
@@ -50,3 +55,19 @@ export interface DeploymentRecordV1 {
  * does, and never fails the whole listing over it.
  */
 export declare function acceptDeploymentRecord(input: unknown): DeploymentRecordV1;
+/** The document of one record: what a Domain deployer publishes and a host serves verbatim. */
+export interface DeploymentRecordDocument {
+    readonly contentType: string;
+    readonly bytes: Uint8Array;
+}
+/**
+ * The document of one record, as a Domain deployer publishes it: the record admitted, as the
+ * UTF-8 bytes of its RFC 8785 canonical JSON, with `DEPLOYMENT_RECORD_MEDIA_TYPE`. One record has
+ * one document, byte for byte, whoever writes it.
+ */
+export declare function encodeDeploymentRecord(record: DeploymentRecordV1): DeploymentRecordDocument;
+/**
+ * Admit the document of one record: `DEPLOYMENT_RECORD_MEDIA_TYPE`, and UTF-8 JSON whose value
+ * `acceptDeploymentRecord` admits. Anything else throws.
+ */
+export declare function decodeDeploymentRecord(document: DeploymentRecordDocument): DeploymentRecordV1;

package/dist/deployment/address/record.js

@@ -1,10 +1,16 @@
 import { patterns } from '@astrale-os/kernel-dsl/v1/addressing';
+import { json } from '@astrale-os/kernel-dsl/value';
 import { isVersion } from '../../platform/versioning/version.js';
 import { ENVIRONMENT_NAME } from '../environment.js';
 import { contentOf, parseDeploymentLabel } from './label.js';
 import { deploymentLine } from './line.js';
 export const DEPLOYMENT_RECORD_FORMAT = 'astrale.deployment-record';
 export const DEPLOYMENT_RECORD_VERSION = 1;
+/**
+ * The media type of a `DeploymentRecordV1` document: what a Domain deployer publishes it with, and
+ * what a host serves it with at `/.well-known/astrale/deployment.json`.
+ */
+export const DEPLOYMENT_RECORD_MEDIA_TYPE = 'application/vnd.astrale.deployment-record+json;v=1';
 const DIGEST = /^sha256:[0-9a-f]{64}$/u;
 /** The full hexadecimal SHA-1 of a commit, in either case, as a deployment name reads it. */
 const SHA = /^[0-9a-f]{40}$/iu;
@@ -64,6 +70,34 @@ export function acceptDeploymentRecord(input) {
         commit: record.commit === null ? null : commit(record.commit),
     });
 }
+/**
+ * The document of one record, as a Domain deployer publishes it: the record admitted, as the
+ * UTF-8 bytes of its RFC 8785 canonical JSON, with `DEPLOYMENT_RECORD_MEDIA_TYPE`. One record has
+ * one document, byte for byte, whoever writes it.
+ */
+export function encodeDeploymentRecord(record) {
+    return Object.freeze({
+        contentType: DEPLOYMENT_RECORD_MEDIA_TYPE,
+        bytes: new TextEncoder().encode(json.serialize(acceptDeploymentRecord(record))),
+    });
+}
+/**
+ * Admit the document of one record: `DEPLOYMENT_RECORD_MEDIA_TYPE`, and UTF-8 JSON whose value
+ * `acceptDeploymentRecord` admits. Anything else throws.
+ */
+export function decodeDeploymentRecord(document) {
+    if (document?.contentType !== DEPLOYMENT_RECORD_MEDIA_TYPE) {
+        throw new TypeError('Deployment record document has another media type.');
+    }
+    let value;
+    try {
+        value = JSON.parse(new TextDecoder('utf-8', { fatal: true, ignoreBOM: false }).decode(document.bytes));
+    }
+    catch (cause) {
+        throw new TypeError('Deployment record document is not UTF-8 JSON.', { cause });
+    }
+    return acceptDeploymentRecord(value);
+}
 function commit(input) {
     const based = input !== null && typeof input === 'object' && Object.hasOwn(input, 'base');
     const value = exact(input, based ? ['sha', 'dirty', 'base'] : ['sha', 'dirty'], 'commit');

package/dist/deployment/address/summary.d.ts

@@ -18,16 +18,12 @@ export interface DeploymentSummaryV1 {
      * `published` on Admin's Services, which keeps every deployment until it is retired. Absent on a
      * dispatch namespace, which keeps no retention.
      */
-    readonly retention?: 'preview' | 'published';
+    readonly retention?: 'published';
     /** When the host created it; absent when the host no longer knows (its script is gone). */
     readonly createdAt?: string;
-    /** An older adapter's report of the last call; no first-party adapter reports it any more. */
-    readonly lastCallAt?: string;
-    /** An older adapter's preview expiry; no first-party adapter reports it any more. */
-    readonly expiresAt?: string;
     readonly retiredAt?: string;
-    /** `withdrawn` once its owner retired it (`expired` only from an older adapter). */
-    readonly retirement?: 'expired' | 'withdrawn';
+    /** `withdrawn` once its owner retired it. */
+    readonly retirement?: 'withdrawn';
     /** The RFC 7638 thumbprint of its key; absent when the host no longer knows (its script is gone). */
     readonly signingKeyId?: string;
     readonly record: DeploymentRecordV1;

package/dist/deployment/authoring.d.ts

@@ -1,5 +1,3 @@
-export { deploy } from './deploy.js';
-export type { DeploymentInput, LegacyDeployment } from './deploy.js';
 export type { Deployment } from './deployment.js';
 export { runtime } from './runtime/index.js';
 export type { RuntimeReference } from './runtime/index.js';

package/dist/deployment/authoring.js

@@ -1,2 +1 @@
-export { deploy } from './deploy.js';
 export { runtime } from './runtime/index.js';

package/dist/deployment/build/build.d.ts

@@ -10,4 +10,10 @@ export interface Build<Schema extends schema.DomainSchema = schema.DomainSchema,
     readonly requirements: release.Requirements;
     readonly routes: routes.Plan;
     readonly frontend?: FrontendCompilation;
+    /** What the release manifest shows of the application: its icon. */
+    readonly presentation?: BuildPresentation;
+}
+export interface BuildPresentation {
+    /** One self-contained inline SVG. */
+    readonly icon?: string;
 }

package/dist/deployment/build/compile.js

@@ -19,6 +19,7 @@ export function compile(definition) {
     const compiled = schemaApi.compile(definition.schema);
     const requirements = compileRequirements(domain, definition.requirements, sourceBundle);
     const frontend = compileFrontend(definition.frontend, domain);
+    const presentation = definition.icon === undefined ? undefined : Object.freeze({ icon: definition.icon });
     const plan = routes.compile({
         domain,
         routes: admitRoutes(definition.routes, registry),
@@ -37,6 +38,7 @@ export function compile(definition) {
         requirements,
         routes: plan,
         ...(frontend === undefined ? {} : { frontend }),
+        ...(presentation === undefined ? {} : { presentation }),
     });
     return admitBuild(build, { domain, registry });
 }

package/dist/deployment/build/frontend/compilation.d.ts

@@ -1,19 +1,17 @@
 import type { Frontend, FrontendSource } from '../../../application/view/index.js';
-import type { FrontendHandshake, IframeRequirements, ViewHostRequirements } from '../../../application/view/index.js';
-import type { Key, ViewRef } from '../../../platform/schema/index.js';
+import type { FrontendHandshake, ViewHostRequirements } from '../../../application/view/index.js';
+import type { Key } from '../../../platform/schema/index.js';
 import type { Domain } from '../../../platform/schema/index.js';
 export interface CompiledFrontendRoute {
     readonly view: Key.View;
     readonly path: string;
     readonly document: string;
     readonly handshake: FrontendHandshake;
-    readonly iframe?: IframeRequirements;
     readonly host?: ViewHostRequirements;
 }
 export interface FrontendCompilation {
     readonly source: FrontendSource;
     readonly routes: readonly CompiledFrontendRoute[];
-    readonly entrypoint: ViewRef;
 }
 /** Lower exact authored View names to canonical DSL references without placing URLs. */
 export declare function compileFrontend(frontend: Frontend | undefined, domain: Domain): FrontendCompilation | undefined;

package/dist/deployment/build/frontend/compilation.js

@@ -15,16 +15,11 @@ export function compileFrontend(frontend, domain) {
             path: route.path,
             document: route.document,
             handshake: route.handshake,
-            ...(route.iframe === undefined ? {} : { iframe: route.iframe }),
             ...(route.host === undefined ? {} : { host: route.host }),
         });
     });
-    const entrypoint = domain.views[frontend.entrypoint];
-    if (entrypoint === undefined)
-        throw new TypeError('Frontend entrypoint is absent from its Domain.');
     return Object.freeze({
         source: frontend.source,
         routes: Object.freeze(routes),
-        entrypoint: entrypoint.ref,
     });
 }

package/dist/deployment/build/frontend/digest.js

@@ -3,11 +3,7 @@ const MEDIA_TYPE = 'application/vnd.astrale.frontend-material+octet-stream;v=1';
 export function digest(frontend, files) {
     const encoder = new TextEncoder();
     const chunks = [
-        encoder.encode(JSON.stringify({
-            source: frontend.source,
-            routes: frontend.routes,
-            entrypoint: frontend.entrypoint,
-        })),
+        encoder.encode(JSON.stringify({ source: frontend.source, routes: frontend.routes })),
     ];
     for (const file of files) {
         const bytes = file.bytes();

package/dist/deployment/build/material.d.ts

@@ -1,6 +1,6 @@
 import type { DomainSchema } from '@astrale-os/kernel-dsl/v1/schema';
 import type { Runtime } from '../../application/runtime/index.js';
-import type { Build } from './build.js';
+import type { Build, BuildPresentation } from './build.js';
 import type { FrontendCompilation } from './frontend/index.js';
 export interface BuildMaterial {
     readonly format: 'astrale.sdk.build-material';
@@ -16,6 +16,7 @@ export interface BuildMaterial {
     readonly requirements: Build['requirements'];
     readonly routes: Build['routes'];
     readonly frontend?: FrontendCompilation;
+    readonly presentation?: BuildPresentation;
 }
 declare const GENERATED_BUILD_MATERIAL: unique symbol;
 /** Exact Build material embedded by an Astrale execution-code generator. */
@@ -23,7 +24,6 @@ export interface GeneratedBuildMaterial {
     readonly format: 'astrale.sdk.generated-build-material';
     readonly version: 1;
     readonly material: BuildMaterial;
-    readonly digest: Build['schema']['bundle']['ref']['digest'];
     readonly [GENERATED_BUILD_MATERIAL]: 'generated-build-material';
 }
 /** Detach the provider-neutral, runtime-free material embedded into generated execution code. */

package/dist/deployment/build/material.js

@@ -4,10 +4,11 @@ import { load as loadCompiledSchema } from '@astrale-os/kernel-dsl/v1/compiled/l
 import { revision } from '@astrale-os/kernel-dsl/v1/schema/revision';
 import { equal } from '@astrale-os/kernel-dsl/value';
 import * as artifact from '@astrale-os/kernel-protocol/artifact';
-import { BUNDLE_MEDIA_TYPE } from '@astrale-os/kernel-protocol/release/bundle';
-import { admitRequirements, validateRequirements, } from '@astrale-os/kernel-protocol/release/requirements';
+import { BUNDLE_MEDIA_TYPE } from '@astrale-os/kernel-protocol/release';
+import { admitRequirements, validateRequirements } from '@astrale-os/kernel-protocol/release';
 import * as routes from '@astrale-os/kernel-protocol/routes';
 import { admitRuntimeRegistry, isRuntime } from '../../application/runtime/index.js';
+import { admitClassIconSvg } from '../../platform/schema/class-icon-svg.js';
 import { admitBuild, isBuild } from './admission.js';
 /** Detach the provider-neutral, runtime-free material embedded into generated execution code. */
 export function material(build) {
@@ -29,6 +30,7 @@ export function material(build) {
         requirements: build.requirements,
         routes: build.routes,
         ...(build.frontend === undefined ? {} : { frontend: build.frontend }),
+        ...(build.presentation === undefined ? {} : { presentation: build.presentation }),
     });
 }
 /** Produce opaque material for execution code from one admitted Build. */
@@ -38,7 +40,6 @@ export function generatedMaterial(build) {
         format: 'astrale.sdk.generated-build-material',
         version: 1,
         material: value,
-        digest: digestOf(value),
     });
 }
 /** Re-admit detached provider-neutral Build material against the exact Runtime value. */
@@ -62,6 +63,7 @@ export function restoreBuild(input, runtime) {
     const compiled = deepFreeze(input.schema.compiled);
     const bundleRef = deepFreeze(input.schema.bundle.ref);
     const frontend = input.frontend === undefined ? undefined : deepFreeze(input.frontend);
+    const presentation = input.presentation === undefined ? undefined : admitPresentation(input.presentation);
     const detached = new Uint8Array(bytes);
     const build = Object.freeze({
         kind: 'build',
@@ -77,6 +79,7 @@ export function restoreBuild(input, runtime) {
         requirements,
         routes: plan,
         ...(frontend === undefined ? {} : { frontend }),
+        ...(presentation === undefined ? {} : { presentation }),
     });
     return admitBuild(build, { domain, registry });
 }
@@ -106,6 +109,7 @@ export function restoreGeneratedBuild(input, runtime) {
         requirements: material.requirements,
         routes: material.routes,
         ...(material.frontend === undefined ? {} : { frontend: material.frontend }),
+        ...(material.presentation === undefined ? {} : { presentation: material.presentation }),
     });
     return admitBuild(build, { domain, registry });
 }
@@ -118,7 +122,7 @@ function acceptGeneratedMaterial(input, runtime) {
         Array.isArray(input) ||
         format !== 'astrale.sdk.generated-build-material' ||
         version !== 1 ||
-        Reflect.ownKeys(input).some((key) => key !== 'format' && key !== 'version' && key !== 'material' && key !== 'digest')) {
+        Reflect.ownKeys(input).some((key) => key !== 'format' && key !== 'version' && key !== 'material')) {
         invalid();
     }
     assertMaterialEnvelope(material, runtime);
@@ -128,14 +132,6 @@ function acceptGeneratedMaterial(input, runtime) {
     deepFreeze(input);
     return Object.freeze({ material });
 }
-function digestOf(input) {
-    try {
-        return artifact.identify(new TextEncoder().encode(JSON.stringify(input)), 'application/vnd.astrale.sdk.build-material+json').digest;
-    }
-    catch {
-        invalid();
-    }
-}
 function assertMaterialEnvelope(input, runtime) {
     if (!isRuntime(runtime))
         throw new TypeError('Build Runtime is not admitted.');
@@ -150,7 +146,8 @@ function assertMaterialEnvelope(input, runtime) {
             key !== 'callables' &&
             key !== 'requirements' &&
             key !== 'routes' &&
-            key !== 'frontend')) {
+            key !== 'frontend' &&
+            key !== 'presentation')) {
         invalid();
     }
 }
@@ -186,6 +183,24 @@ function admitRoutePlan(input, domain) {
         invalid();
     return admitted;
 }
+/** External material must re-admit its icon using the same worker-safe SVG owner as authoring. */
+function admitPresentation(input) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input))
+        invalid();
+    const value = input;
+    if (Reflect.ownKeys(value).some((key) => key !== 'icon'))
+        invalid();
+    const { icon } = value;
+    if (icon === undefined)
+        return Object.freeze({});
+    if (typeof icon !== 'string')
+        invalid();
+    const admitted = admitClassIconSvg(icon);
+    // Material carries an exact admitted value, rather than authored text to normalize.
+    if (admitted !== icon)
+        invalid();
+    return Object.freeze({ icon: admitted });
+}
 function deepFreeze(input, seen = new WeakSet()) {
     if (input !== null && typeof input === 'object' && !seen.has(input)) {
         seen.add(input);

package/dist/deployment/deployment.d.ts

@@ -1,14 +1,10 @@
-import type { Adapter, LegacyAdapter } from './adapter/index.js';
-/**
- * One adapter bound to the parameters of one Project Environment. `AdapterValue` is an adapter
- * interface v2 `Adapter`, or a `@deprecated` `LegacyAdapter` whose Environments are all on the
- * legacy direct-mode path (CT33).
- */
-export interface Deployment<Parameters extends object = object, AdapterValue extends Adapter<Parameters> | LegacyAdapter<Parameters> = Adapter<Parameters> | LegacyAdapter<Parameters>> {
+import type { Adapter } from './adapter/index.js';
+/** One immutable-deployment adapter bound to one Project Environment. */
+export interface Deployment<Parameters extends object = object, AdapterValue extends Adapter<Parameters> = Adapter<Parameters>> {
     readonly kind: 'deployment';
     readonly adapter: AdapterValue;
     readonly parameters: Parameters;
 }
 /** Internal adapter binding boundary used by public provider packages. */
-export declare function captureDeployment<const Parameters extends object>(adapter: Adapter<Parameters> | LegacyAdapter<Parameters>, parameters: Parameters): Deployment<Parameters>;
+export declare function captureDeployment<const Parameters extends object>(adapter: Adapter<Parameters>, parameters: Parameters): Deployment<Parameters>;
 export declare function isDeployment(input: unknown): input is Deployment;

package/dist/deployment/index.d.ts

@@ -1,14 +1,12 @@
 export { defineAdapter, defineDeployment, isAdapter } from './adapter/index.js';
-export type { Adapter, AdapterCommand, AdapterCommandContext, AdapterCommandResult, AdapterEnvironmentContext, AdapterInput, AddressingPlan, ArtifactFile, ArtifactSource, Bundle, BundleContext, Bundler, BundleSource, ConfigureContext, DeployContext, DeploymentCallTarget, DeploymentPhase, DeploymentProgress, DeploymentSecretsState, DeployResult, FailedDeployResult, FailedReleaseDeployResult, LegacyAdapter, LegacyAdapterInput, ListContext, ListedDeployment, MutationKnowledge, Placement, PlacementContext, PreparedArtifact, PreparedArtifactFile, PrepareContext, ReadyDeployResult, ReadyReleaseDeployResult, ReleaseDeployContext, ReleaseDeploymentPhase, ReleaseDeployResult, RetainContext, } from './adapter/index.js';
+export type { Adapter, AdapterCommand, AdapterCommandContext, AdapterCommandResult, AdapterEnvironmentContext, AdapterInput, ArtifactFile, Bundle, BundleContext, Bundler, BundleSource, ConfigureContext, DeploymentCallTarget, DeploymentSecretsState, FailedReleaseDeployResult, ListContext, ListedDeployment, MutationKnowledge, Placement, PlacementContext, PreparedArtifactFile, ReadyReleaseDeployResult, ReleaseDeployContext, ReleaseDeploymentPhase, ReleaseDeployResult, RetainContext, } from './adapter/index.js';
 export { compile, isBuild } from './build/index.js';
 export type { Build, BuildBundle, BuildDigest, BuildManifestV1, BuildSchema, } from './build/index.js';
-export { deploy } from './deploy.js';
-export type { DeploymentInput, LegacyDeployment } from './deploy.js';
 export { isDeployment } from './deployment.js';
 export type { Deployment } from './deployment.js';
 export { addressing, assemble, isAddressing, isRelease } from './release/index.js';
 export type { Addressing, Release } from './release/index.js';
 export { admit as admitRuntime, resolve as resolveRuntime, runtime } from './runtime/index.js';
 export type { ResolvedRuntimeReference, RuntimeModuleLoader, RuntimeReference, } from './runtime/index.js';
-export { verifyBundle, verifyDeployment, verifyPreflight, verifyReadiness, verifyUploadedBuild, } from './verify/index.js';
-export type { BundleInput, PreflightInput } from './verify/index.js';
+export { verifyBundle, verifyReadiness, verifyUploadedBuild } from './verify/index.js';
+export type { BundleInput } from './verify/index.js';

package/dist/deployment/index.js

@@ -1,7 +1,6 @@
 export { defineAdapter, defineDeployment, isAdapter } from './adapter/index.js';
 export { compile, isBuild } from './build/index.js';
-export { deploy } from './deploy.js';
 export { isDeployment } from './deployment.js';
 export { addressing, assemble, isAddressing, isRelease } from './release/index.js';
 export { admit as admitRuntime, resolve as resolveRuntime, runtime } from './runtime/index.js';
-export { verifyBundle, verifyDeployment, verifyPreflight, verifyReadiness, verifyUploadedBuild, } from './verify/index.js';
+export { verifyBundle, verifyReadiness, verifyUploadedBuild } from './verify/index.js';

package/dist/deployment/release/addressing.d.ts

@@ -5,15 +5,8 @@ import type { IssuerId } from '../../platform/auth/index.js';
  */
 export interface Addressing {
     readonly issuer: IssuerId;
-    /** Public origin serving this Release; the issuer can remain on an older deployment. */
+    /** Public origin serving this Release, identical to its issuer. */
     readonly publicUrl: IssuerId;
 }
-export declare function addressing(input: string, options?: {
-    /**
-     * @deprecated Stable-target `legacy` path only: adapter-cloudflare direct mode serves under an
-     * issuer distinct from its route (`identityIssuer`). Removed with that mode at D10; a
-     * deployment's URL is its issuer.
-     */
-    readonly publicUrl?: string;
-}): Addressing;
+export declare function addressing(input: string): Addressing;
 export declare function isAddressing(input: unknown): input is Addressing;

package/dist/deployment/release/addressing.js

@@ -1,9 +1,8 @@
 import { issuer } from '../../platform/auth/index.js';
 const admittedAddressing = new WeakSet();
-export function addressing(input, options = {}) {
+export function addressing(input) {
     const admitted = origin(input);
-    const publicUrl = options.publicUrl === undefined ? admitted : origin(options.publicUrl);
-    const value = Object.freeze({ issuer: admitted, publicUrl });
+    const value = Object.freeze({ issuer: admitted, publicUrl: admitted });
     admittedAddressing.add(value);
     return value;
 }

package/dist/deployment/release/index.d.ts

@@ -3,5 +3,3 @@ export { capture, isRelease } from './admission.js';
 export { addressing, isAddressing, type Addressing } from './addressing.js';
 export { invocationPath } from './invocation.js';
 export type { Release } from './release.js';
-/** @deprecated Stable-target Publication v3; see `legacy/index.ts` for its consumers and removal. */
-export * as legacy from './legacy/index.js';

package/dist/deployment/release/index.js

@@ -2,5 +2,3 @@ export { assemble } from './assemble.js';
 export { capture, isRelease } from './admission.js';
 export { addressing, isAddressing } from './addressing.js';
 export { invocationPath } from './invocation.js';
-/** @deprecated Stable-target Publication v3; see `legacy/index.ts` for its consumers and removal. */
-export * as legacy from './legacy/index.js';

package/dist/deployment/release/release.d.ts

@@ -12,7 +12,7 @@ export interface Release<BuildValue extends Build = Build> {
     readonly build: BuildValue;
     /**
      * The deployment's URL: its origin, which is also its issuer (`document.identity.issuer`). A
-     * deployment never splits the two; only the stable-target `legacy` path does.
+     * deployment binds both to the same immutable URL.
      */
     readonly url: IssuerId;
     readonly document: release.DomainRelease;

package/dist/deployment/release/runtime.d.ts

@@ -1,4 +1,2 @@
 export { assemble } from './assemble.js';
 export { addressing } from './addressing.js';
-/** @deprecated Stable-target Publication v3; see `legacy/index.ts` for its consumers and removal. */
-export * as legacy from './legacy/index.js';

package/dist/deployment/release/runtime.js

@@ -1,4 +1,2 @@
 export { assemble } from './assemble.js';
 export { addressing } from './addressing.js';
-/** @deprecated Stable-target Publication v3; see `legacy/index.ts` for its consumers and removal. */
-export * as legacy from './legacy/index.js';

package/dist/deployment/release/served/index.d.ts

@@ -4,8 +4,7 @@ import type { Addressing } from '../addressing.js';
 export declare const DELIVERY_PATH: '/install';
 /**
  * What a deployment serves beneath its URL: identity, schema bundle, requirements, bindings, routes
- * and delivery. A `DomainRelease` v4 adds its build to it, and the v3 Publication of the legacy
- * path is exactly this content, so both documents of one build at one address agree.
+ * and delivery. A `DomainRelease` v4 adds the digest of its running build.
  */
 export type Served = Omit<release.Content, 'format' | 'version' | 'build'>;
 /** Derive the served content of one exact Build at one Addressing. */