@astrale-os/sdk 0.6.0-beta.22 → 0.6.0-beta.24

package/dist/execution/workflows/options.js

@@ -1,14 +1,11 @@
-import { acceptWorkflowEngineIdentityKey } from '@astrale-os/kernel-protocol/issuer/workflow-engine';
 const HOUR_MS = 60 * 60_000;
 const DAY_MS = 24 * HOUR_MS;
-const MAXIMUM_IDENTITY_KEYS = 16;
 /** Capture one durable serving configuration, failing closed on any gap. */
 export function durableServing(input) {
     if (input === null ||
         typeof input !== 'object' ||
         Array.isArray(input) ||
         Reflect.ownKeys(input).some((key) => key !== 'engine' &&
-            key !== 'identityKeys' &&
             key !== 'fetch' &&
             key !== 'retentionMs' &&
             key !== 'retry' &&
@@ -24,20 +21,6 @@ export function durableServing(input) {
         typeof engine.CancelledError !== 'function') {
         invalid('Durable serving requires the Restate SDK Fetch entrypoint of this platform.');
     }
-    const keys = input.identityKeys;
-    let identityKeys = Object.freeze([]);
-    if (keys !== undefined) {
-        if (!Array.isArray(keys) || keys.length === 0 || keys.length > MAXIMUM_IDENTITY_KEYS) {
-            invalid('Durable serving requires engine request identity keys (publickeyv1_…).');
-        }
-        // Legacy callbacks retain their original sixteen-key input budget and duplicate policy.
-        try {
-            identityKeys = Object.freeze(Array.from(keys, acceptWorkflowEngineIdentityKey));
-        }
-        catch (cause) {
-            throw new TypeError('Durable serving requires engine request identity keys (publickeyv1_…).', { cause });
-        }
-    }
     const fetch = input.fetch ?? globalThis.fetch.bind(globalThis);
     if (typeof fetch !== 'function')
         invalid('Durable serving requires Fetch for engine discovery.');
@@ -57,7 +40,6 @@ export function durableServing(input) {
             TerminalError: engine.TerminalError,
             CancelledError: engine.CancelledError,
         }),
-        identityKeys,
         fetch,
         retentionMs: bounded(input.retentionMs, 7 * DAY_MS, HOUR_MS, 365 * DAY_MS, 'retentionMs'),
         retryPolicy: Object.freeze({

package/dist/execution/workflows/receiver.d.ts

@@ -8,8 +8,7 @@ export interface DurableReceiver {
 }
 /**
  * Route `…/invoke/restate/<Kernel issuer>/<declaration key>/<service>/{discover,invoke/…}` to one
- * engine endpoint. Retained services registered before issuer-prefixed paths keep their old
- * `<declaration key>/<service>` route with explicit legacy signing keys. Canonical routes discover
+ * engine endpoint. Routes discover
  * their signing authority at the named Kernel; that issuer also binds the run envelope. Each
  * endpoint serves exactly that service with the declared Workflow. A declaration this Release does not
  * serve durably is refused, so an endpoint never runs code it does not declare.

package/dist/execution/workflows/receiver.js

@@ -4,8 +4,7 @@ import { durableHandlers } from './run.js';
 const MAXIMUM_ENDPOINTS = 256;
 /**
  * Route `…/invoke/restate/<Kernel issuer>/<declaration key>/<service>/{discover,invoke/…}` to one
- * engine endpoint. Retained services registered before issuer-prefixed paths keep their old
- * `<declaration key>/<service>` route with explicit legacy signing keys. Canonical routes discover
+ * engine endpoint. Routes discover
  * their signing authority at the named Kernel; that issuer also binds the run envelope. Each
  * endpoint serves exactly that service with the declared Workflow. A declaration this Release does not
  * serve durably is refused, so an endpoint never runs code it does not declare.
@@ -31,21 +30,17 @@ export function createDurableReceiver(input) {
             const workflow = declared.get(declaration);
             if (workflow === undefined)
                 return refused();
-            let identityKeys = input.serving.identityKeys;
-            if (kernel !== undefined) {
-                try {
-                    identityKeys = (await discovery.resolve(kernel)).identity_keys;
-                }
-                catch (cause) {
-                    if (!(cause instanceof WorkflowEngineUnavailable))
-                        throw cause;
-                    return unavailable();
-                }
+            let identityKeys;
+            try {
+                identityKeys = (await discovery.resolve(kernel)).identity_keys;
+            }
+            catch (cause) {
+                if (!(cause instanceof WorkflowEngineUnavailable))
+                    throw cause;
+                return unavailable();
             }
-            else if (identityKeys.length === 0)
-                return refused();
             request.signal.throwIfAborted();
-            const cacheKey = JSON.stringify([kernel ?? null, declaration, service, identityKeys]);
+            const cacheKey = JSON.stringify([kernel, declaration, service, identityKeys]);
             let endpoint = endpoints.get(cacheKey);
             if (endpoint === undefined) {
                 const definition = engine.workflow({
@@ -55,7 +50,7 @@ export function createDurableReceiver(input) {
                         domain: input.domain,
                         executor: bound,
                         serving: input.serving,
-                        ...(kernel === undefined ? {} : { kernel }),
+                        kernel,
                     }),
                     options: {
                         workflowRetention: input.serving.retentionMs,
@@ -68,9 +63,7 @@ export function createDurableReceiver(input) {
                         services: [definition],
                     });
                 }
-                catch (cause) {
-                    if (kernel === undefined)
-                        throw cause;
+                catch {
                     discovery.forget(kernel, identityKeys);
                     return unavailable();
                 }
@@ -79,7 +72,7 @@ export function createDurableReceiver(input) {
                 endpoints.set(cacheKey, endpoint);
             }
             const response = await endpoint(request);
-            if (kernel !== undefined && response.status === 401)
+            if (response.status === 401)
                 discovery.invalidate(kernel, identityKeys);
             return response;
         },

package/dist/execution/workflows/route.d.ts

@@ -1,6 +1,6 @@
 import type { IssuerId } from '../../platform/auth/index.js';
 export interface DurableRoute {
-    readonly kernel?: IssuerId;
+    readonly kernel: IssuerId;
     readonly declaration: string;
     readonly service: string;
 }
@@ -8,7 +8,5 @@ export interface DurableRoute {
 export declare function isDurableRequest(request: Request): boolean;
 /** Canonical requests discover authority at the HTTPS Kernel named by this admitted route. */
 export declare function isCanonicalDurableRequest(request: Request): boolean;
-/** Retained callbacks need explicit legacy signing authority before an engine module is loaded. */
-export declare function isLegacyDurableRequest(request: Request): boolean;
 /** One wire decoder shared by the receiver and platform lazy-load eligibility. */
 export declare function durableRoute(request: Request): DurableRoute | undefined;

package/dist/execution/workflows/route.js

@@ -12,11 +12,6 @@ export function isDurableRequest(request) {
 export function isCanonicalDurableRequest(request) {
     return durableRoute(request)?.kernel !== undefined;
 }
-/** Retained callbacks need explicit legacy signing authority before an engine module is loaded. */
-export function isLegacyDurableRequest(request) {
-    const route = durableRoute(request);
-    return route !== undefined && route.kernel === undefined;
-}
 /** One wire decoder shared by the receiver and platform lazy-load eligibility. */
 export function durableRoute(request) {
     const pathname = new URL(request.url).pathname;
@@ -25,12 +20,12 @@ export function durableRoute(request) {
     const parts = pathname.slice(PREFIX.length).split('/');
     try {
         const first = decodeURIComponent(parts[0] ?? '');
-        const kernel = Key.is(first) ? undefined : httpIssuer(first, false);
-        const declaration = kernel === undefined ? first : decodeURIComponent(parts[1] ?? '');
-        const service = parts[kernel === undefined ? 1 : 2] ?? '';
+        const kernel = httpIssuer(first, false);
+        const declaration = decodeURIComponent(parts[1] ?? '');
+        const service = parts[2] ?? '';
         if (!Key.is(declaration) || !SERVICE.test(service))
             return undefined;
-        return Object.freeze({ ...(kernel === undefined ? {} : { kernel }), declaration, service });
+        return Object.freeze({ kernel, declaration, service });
     }
     catch (cause) {
         if (cause instanceof URIError || cause instanceof AuthValueError || cause instanceof TypeError)

package/dist/execution/workflows/run.d.ts

@@ -6,7 +6,7 @@ import type { EngineSharedContext, EngineWorkflowContext } from './engine.js';
 import type { AdmittedDurableServing } from './options.js';
 type Executor = NonNullable<Identity['executor']>;
 export interface DurableRun {
-    readonly kernel?: IssuerId;
+    readonly kernel: IssuerId;
     readonly workflow: RuntimeWorkflow;
     readonly domain: Domain;
     readonly executor: Executor;

package/dist/execution/workflows/run.js

@@ -61,7 +61,7 @@ async function run(input, context, raw) {
 }
 function admitted(workflow, raw, kernel) {
     const envelope = decodeEnvelope(raw);
-    if (kernel !== undefined && envelope.execution.kernel !== kernel) {
+    if (envelope.execution.kernel !== kernel) {
         throw new TypeError('Durable envelope Kernel differs from its authenticated endpoint.');
     }
     const diagnostics = workflow.callable.validateInput(envelope.input);

package/dist/index.d.ts

@@ -13,7 +13,7 @@ export { defineRuntime } from './application/runtime/index.js';
 export type { Runtime } from './application/runtime/index.js';
 export { defineWorkflow } from './application/workflow/index.js';
 export type { Workflow, WorkflowContext } from './application/workflow/index.js';
-export { compile, deploy, runtime } from './deployment/index.js';
+export { compile, runtime } from './deployment/index.js';
 export type { Build, Deployment, Release } from './deployment/index.js';
 export { defineProject } from './project/index.js';
 export type { Project } from './project/index.js';

package/dist/index.js

@@ -6,6 +6,6 @@ export { defineMutation, executeMutation } from './application/mutation/index.js
 export { defineCollectionQuery, defineCompositeQuery, defineQuery, executeQuery, } from './application/query/index.js';
 export { defineRuntime } from './application/runtime/index.js';
 export { defineWorkflow } from './application/workflow/index.js';
-export { compile, deploy, runtime } from './deployment/index.js';
+export { compile, runtime } from './deployment/index.js';
 export { defineProject } from './project/index.js';
 export { serve } from './execution/index.js';

package/dist/platform/graph/alias.d.ts

@@ -1,6 +1,2 @@
 /** Graph-local names retain the canonical Kernel type and constructor identity. */
-export { LocalBinding as LocalAlias, isLocalBinding as isLocalAlias, } from '@astrale-os/kernel-core/graph/graph';
-/** @deprecated Use LocalAlias. */
-export { LocalBinding } from '@astrale-os/kernel-core/graph/graph';
-/** @deprecated Use isLocalAlias. */
-export { isLocalBinding } from '@astrale-os/kernel-core/graph/graph';
+export { LocalAlias, isLocalAlias } from '@astrale-os/kernel-core/graph/graph';

package/dist/platform/graph/alias.js

@@ -1,6 +1,2 @@
 /** Graph-local names retain the canonical Kernel type and constructor identity. */
-export { LocalBinding as LocalAlias, isLocalBinding as isLocalAlias, } from '@astrale-os/kernel-core/graph/graph';
-/** @deprecated Use LocalAlias. */
-export { LocalBinding } from '@astrale-os/kernel-core/graph/graph';
-/** @deprecated Use isLocalAlias. */
-export { isLocalBinding } from '@astrale-os/kernel-core/graph/graph';
+export { LocalAlias, isLocalAlias } from '@astrale-os/kernel-core/graph/graph';

package/dist/platform/graph/document/index.d.ts

@@ -1,3 +1,3 @@
 /** Canonical graph documents and local aliases. */
 export * from '@astrale-os/kernel-core/graph/graph';
-export { LocalAlias, isLocalAlias, LocalBinding, isLocalBinding } from '../alias.js';
+export { LocalAlias, isLocalAlias } from '../alias.js';

package/dist/platform/graph/document/index.js

@@ -1,3 +1,3 @@
 /** Canonical graph documents and local aliases. */
 export * from '@astrale-os/kernel-core/graph/graph';
-export { LocalAlias, isLocalAlias, LocalBinding, isLocalBinding } from '../alias.js';
+export { LocalAlias, isLocalAlias } from '../alias.js';

package/dist/platform/graph/index.d.ts

@@ -1,6 +1,6 @@
 /** Curated aggregate over canonical graph values. */
 export { GraphData, GraphDataDecodeError, GraphSpec, GraphSpecDecodeError, } from '@astrale-os/kernel-core/graph/graph';
-export { LocalAlias, isLocalAlias, LocalBinding, isLocalBinding } from './alias.js';
+export { LocalAlias, isLocalAlias } from './alias.js';
 export type { AnonymousNodeSpec, GraphDataJson, GraphSpecEdge, GraphSpecEndpoint, GraphSpecJson, GraphSpecNode, } from '@astrale-os/kernel-core/graph/graph';
 export * from './edge/index.js';
 export * from './node/index.js';

package/dist/platform/graph/index.js

@@ -1,6 +1,6 @@
 /** Curated aggregate over canonical graph values. */
 export { GraphData, GraphDataDecodeError, GraphSpec, GraphSpecDecodeError, } from '@astrale-os/kernel-core/graph/graph';
-export { LocalAlias, isLocalAlias, LocalBinding, isLocalBinding } from './alias.js';
+export { LocalAlias, isLocalAlias } from './alias.js';
 export * from './edge/index.js';
 export * from './node/index.js';
 export * from './path/index.js';

package/dist/platform/release/index.d.ts

@@ -1,27 +1,2 @@
-/**
- * Canonical `DomainRelease` v4 wire contract and admission owned by the Astrale platform: the
- * document a deployment serves at `release.json`, its release digest and `ReleaseRef`.
- */
+/** Canonical DomainRelease v4 and Delivery v2 wire contracts. */
 export * from '@astrale-os/kernel-protocol/release';
-/**
- * The Kernel's Publication v2/v3 codec (`@astrale-os/kernel-protocol/release/legacy`): `accept`,
- * `seal`, `encode`, `url`/`PATH`, the bundle helpers, `PublicationError` and Delivery v1, which
- * stable targets and pre-v4 Kernels still serve and read.
- *
- * @deprecated Read and seal `DomainRelease` v4 with this module's root exports.
- *
- * Short-term consumers, which took it from the removed `@astrale-os/sdk/publication`:
- * - cli `src/lib/domain-publication.ts` and its test (C1a: `accept`, `PATH`, `PublicationError`);
- * - admin `domain/providers/http-publication/resolver.ts`,
- *   `domain/providers/remote-kernel/instance-gateway.ts`,
- *   `domain/providers/scaleway/machine-provider.ts`, `domain/scripts/admin-bootstrap/cli.ts`,
- *   `domain/scripts/e2e/install-domain-set.ts`, their tests and two `worker/src` tests, which also
- *   seal v2/v3 fixtures (A10a);
- * - domains issues `tests/deployment/archived-errors.test.ts` (SV16).
- *
- * Removal, in a breaking SDK release: once those consumers no longer import it (the CLI and Admin
- * read `release.json`), at the latest with the Kernel folder it re-exports, which the Kernel
- * removes once no supported Kernel predates v4, no installation pins a v2/v3 document and no
- * stable Worker serves one (D10).
- */
-export { legacy } from '@astrale-os/kernel-protocol/release';

package/dist/platform/release/index.js

@@ -1,27 +1,2 @@
-/**
- * Canonical `DomainRelease` v4 wire contract and admission owned by the Astrale platform: the
- * document a deployment serves at `release.json`, its release digest and `ReleaseRef`.
- */
+/** Canonical DomainRelease v4 and Delivery v2 wire contracts. */
 export * from '@astrale-os/kernel-protocol/release';
-/**
- * The Kernel's Publication v2/v3 codec (`@astrale-os/kernel-protocol/release/legacy`): `accept`,
- * `seal`, `encode`, `url`/`PATH`, the bundle helpers, `PublicationError` and Delivery v1, which
- * stable targets and pre-v4 Kernels still serve and read.
- *
- * @deprecated Read and seal `DomainRelease` v4 with this module's root exports.
- *
- * Short-term consumers, which took it from the removed `@astrale-os/sdk/publication`:
- * - cli `src/lib/domain-publication.ts` and its test (C1a: `accept`, `PATH`, `PublicationError`);
- * - admin `domain/providers/http-publication/resolver.ts`,
- *   `domain/providers/remote-kernel/instance-gateway.ts`,
- *   `domain/providers/scaleway/machine-provider.ts`, `domain/scripts/admin-bootstrap/cli.ts`,
- *   `domain/scripts/e2e/install-domain-set.ts`, their tests and two `worker/src` tests, which also
- *   seal v2/v3 fixtures (A10a);
- * - domains issues `tests/deployment/archived-errors.test.ts` (SV16).
- *
- * Removal, in a breaking SDK release: once those consumers no longer import it (the CLI and Admin
- * read `release.json`), at the latest with the Kernel folder it re-exports, which the Kernel
- * removes once no supported Kernel predates v4, no installation pins a v2/v3 document and no
- * stable Worker serves one (D10).
- */
-export { legacy } from '@astrale-os/kernel-protocol/release';

package/dist/platform/schema/class-icon-svg.d.ts

@@ -0,0 +1,9 @@
+declare const CLASS_ICON: unique symbol;
+/** An admitted, self-contained SVG suitable for a Node Class presentation icon. */
+export type ClassIcon = string & {
+    readonly [CLASS_ICON]: true;
+};
+/** Stable empty SVG used when an author explicitly chooses to render no icon glyph. */
+export declare const NEUTRAL_CLASS_ICON_SVG = "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\"></svg>";
+export declare function admitClassIconSvg(source: string): ClassIcon;
+export {};

package/dist/platform/schema/class-icon-svg.js

@@ -0,0 +1,29 @@
+const MAX_CLASS_ICON_LENGTH = 8_000;
+const SVG_ROOT = /^<svg(?:\s[^>]*)?>[\s\S]*<\/svg>$/u;
+const SVG_ROOT_OPEN = /<svg(?:\s|>)/gu;
+const SVG_ROOT_CLOSE = /<\/svg\s*>/gu;
+const SVG_GRAPHIC = /<(?:circle|ellipse|line|path|polygon|polyline|rect)\b/iu;
+const UNSAFE_SVG = /<\s*(?:animate|discard|embed|foreignObject|iframe|image|object|script|set|style|use)\b|<!DOCTYPE\b|<!ENTITY\b|\son[a-z][\w:.-]*\s*=|(?:href|xlink:href)\s*=|javascript\s*:|url\s*\(/iu;
+/** Stable empty SVG used when an author explicitly chooses to render no icon glyph. */
+export const NEUTRAL_CLASS_ICON_SVG = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"></svg>';
+export function admitClassIconSvg(source) {
+    if (typeof source !== 'string') {
+        throw new TypeError('Class icon must be an inline SVG string.');
+    }
+    const value = source.trim();
+    if (Array.from(value).length > MAX_CLASS_ICON_LENGTH) {
+        throw new TypeError(`Class icon must contain at most ${MAX_CLASS_ICON_LENGTH} characters.`);
+    }
+    if (!SVG_ROOT.test(value) ||
+        (value.match(SVG_ROOT_OPEN)?.length ?? 0) !== 1 ||
+        (value.match(SVG_ROOT_CLOSE)?.length ?? 0) !== 1) {
+        throw new TypeError('Class icon must be one complete inline <svg> element.');
+    }
+    if (UNSAFE_SVG.test(value)) {
+        throw new TypeError('Class icon SVG must be self-contained and contain no executable content.');
+    }
+    if (value !== NEUTRAL_CLASS_ICON_SVG && !SVG_GRAPHIC.test(value)) {
+        throw new TypeError('Class icon SVG must contain a visible vector element.');
+    }
+    return value;
+}

package/dist/platform/schema/class-icon.d.ts

@@ -1,15 +1,10 @@
 import type { LucideIconData } from '@lucide/icons';
-declare const CLASS_ICON: unique symbol;
-/** An admitted, self-contained SVG suitable for a Node Class presentation icon. */
-export type ClassIcon = string & {
-    readonly [CLASS_ICON]: true;
-};
-/** Stable empty SVG used when an author explicitly chooses to render no icon glyph. */
-export declare const NEUTRAL_CLASS_ICON_SVG = "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\"></svg>";
+import type { ClassIcon } from './class-icon-svg.js';
+export type { ClassIcon } from './class-icon-svg.js';
+export { NEUTRAL_CLASS_ICON_SVG } from './class-icon-svg.js';
 /** Framework-neutral constructors for canonical Node Class icons. */
 export declare const classIcon: Readonly<{
     readonly neutral: ClassIcon;
     svg(source: string): ClassIcon;
     lucide(icon: LucideIconData): ClassIcon;
 }>;
-export {};

package/dist/platform/schema/class-icon.js

@@ -1,33 +1,6 @@
 import { buildLucideSvg } from '@lucide/icons/build';
-const MAX_CLASS_ICON_LENGTH = 8_000;
-const SVG_ROOT = /^<svg(?:\s[^>]*)?>[\s\S]*<\/svg>$/u;
-const SVG_ROOT_OPEN = /<svg(?:\s|>)/gu;
-const SVG_ROOT_CLOSE = /<\/svg\s*>/gu;
-const SVG_GRAPHIC = /<(?:circle|ellipse|line|path|polygon|polyline|rect)\b/iu;
-const UNSAFE_SVG = /<\s*(?:animate|discard|embed|foreignObject|iframe|image|object|script|set|style|use)\b|<!DOCTYPE\b|<!ENTITY\b|\son[a-z][\w:.-]*\s*=|(?:href|xlink:href)\s*=|javascript\s*:|url\s*\(/iu;
-/** Stable empty SVG used when an author explicitly chooses to render no icon glyph. */
-export const NEUTRAL_CLASS_ICON_SVG = '<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"></svg>';
-function svg(source) {
-    if (typeof source !== 'string') {
-        throw new TypeError('Class icon must be an inline SVG string.');
-    }
-    const value = source.trim();
-    if (Array.from(value).length > MAX_CLASS_ICON_LENGTH) {
-        throw new TypeError(`Class icon must contain at most ${MAX_CLASS_ICON_LENGTH} characters.`);
-    }
-    if (!SVG_ROOT.test(value) ||
-        (value.match(SVG_ROOT_OPEN)?.length ?? 0) !== 1 ||
-        (value.match(SVG_ROOT_CLOSE)?.length ?? 0) !== 1) {
-        throw new TypeError('Class icon must be one complete inline <svg> element.');
-    }
-    if (UNSAFE_SVG.test(value)) {
-        throw new TypeError('Class icon SVG must be self-contained and contain no executable content.');
-    }
-    if (value !== NEUTRAL_CLASS_ICON_SVG && !SVG_GRAPHIC.test(value)) {
-        throw new TypeError('Class icon SVG must contain a visible vector element.');
-    }
-    return value;
-}
+import { admitClassIconSvg as svg, NEUTRAL_CLASS_ICON_SVG } from './class-icon-svg.js';
+export { NEUTRAL_CLASS_ICON_SVG } from './class-icon-svg.js';
 function lucide(icon) {
     let source;
     try {

package/dist/platform/schema/index.d.ts

@@ -16,7 +16,7 @@ export type { ClassIcon } from './class-icon.js';
 export type { StoredPropertyInputOf } from './property-input.js';
 export type { CallablePolicyBuilder, CallablePolicyContext, CallableProjection, AuthoredMethodProjection, AuthoredPropertyProjection, ClassIdentityProjection, ClassOwnerProjection, CoreEdge, CoreEndpoint, CoreNode, DefinedSchema, DirectedEdgeClass, ClassReferenceProjection, ClassProjection, FunctionProjection, EdgeClass, Function, Method, MethodProjection, Lazy, NodeClass, Policy, PolicyExistsContext, PolicyNodeBinder, PolicyPatternContext, Property, PropertyProjection, ResolvedDomainOfInput, View, } from '@astrale-os/kernel-dsl/v1/builder';
 export type { Array, Object, Value } from '@astrale-os/kernel-dsl/value';
-export type { CallableExecution, ClassKind, DirectedEdgeContract, EdgeClassPolicies, NodeClassDefinition, PolicyCheckObject, PolicyObjectRef, PropertyFacet, StateTopology, UndirectedEdgeContract, } from '@astrale-os/kernel-dsl/v1/language';
+export type { CallableExecution, ClassKind, DirectedEdgeContract, EdgeClassPolicies, NodeClassDefinition, PolicyCheckObject, PolicyObjectRef, PropertyFacet, PropertyImmutability, StateTopology, UndirectedEdgeContract, } from '@astrale-os/kernel-dsl/v1/language';
 export type { DomainSchema } from '@astrale-os/kernel-dsl/v1/schema';
 /** Kernel-owned Schema values used by authored product Schemas and graph operations. */
 export { AuthorityOperationOrder, AuthorityOperations, AuthorityRelations, KernelRootFunctions, OperationCore, operationOf, } from '@astrale-os/kernel-core/schema';

package/dist/platform/schema/schema-authoring.d.ts

@@ -1,9 +1,8 @@
-import type { DefinedSchema, ResolvedDomainOfInput } from '@astrale-os/kernel-dsl/v1/builder';
+import type { DefinedSchema, EntrypointOf, ResolvedDomainOfInput, SchemaInput } from '@astrale-os/kernel-dsl/v1/builder';
 import type { DomainSchema } from '@astrale-os/kernel-dsl/v1/schema';
-import { defineSchema as kernelDefineSchema } from '@astrale-os/kernel-dsl/v1';
-type DomainSchemaInput = Parameters<typeof kernelDefineSchema>[1];
+type DomainSchemaInput = SchemaInput;
 declare const authoredGraph: unique symbol;
-/** Opaque legacy Schemas retain their witness; SDK Schemas retain authored input and edges. */
+/** Resolved Schemas retain their witness; authored Schemas retain input and dependency edges. */
 type Entry = readonly [origin: string, schema: DomainSchema] | readonly [
     origin: string,
     input: DomainSchemaInput,
@@ -34,7 +33,7 @@ type InputOf<Origin extends string, Graph extends Entry> = Extract<Graph, readon
         readonly [Alias in keyof Dependencies]: SchemaOf<Dependencies[Alias], Graph>;
     };
 } : never;
-type SchemaOf<Origin extends string, Graph extends Entry> = Extract<Graph, readonly [Origin, DomainSchema]> extends infer Legacy ? [Legacy] extends [never] ? AuthoredSchema<Origin, Graph> : Legacy extends readonly [string, infer Schema extends DomainSchema] ? Schema : never : never;
+type SchemaOf<Origin extends string, Graph extends Entry> = Extract<Graph, readonly [Origin, DomainSchema]> extends infer Resolved ? [Resolved] extends [never] ? AuthoredSchema<Origin, Graph> : Resolved extends readonly [string, infer Schema extends DomainSchema] ? Schema : never : never;
 /** Resolve a dependency graph without expanding a shared Schema at each dependency edge. */
 export interface AuthoredDomain<Origin extends string, Graph extends Entry> extends ResolvedDomainOfInput<Origin, InputOf<Origin, Graph>> {
 }
@@ -42,7 +41,15 @@ export interface AuthoredDomain<Origin extends string, Graph extends Entry> exte
 export interface AuthoredSchema<Origin extends string, Graph extends Entry> extends DefinedSchema<Origin, AuthoredDomain<Origin, Graph>> {
     readonly [authoredGraph]?: Graph;
 }
-type DefineSchema = <const Origin extends string, const Input extends DomainSchemaInput>(origin: Origin, input: Input) => string extends Origin | Extract<Dependencies<Input>[keyof Dependencies<Input>], DomainSchema>['origin'] ? DefinedSchema<Origin, ResolvedDomainOfInput<Origin, Input>> : AuthoredSchema<Origin, Extract<UniqueEntries<GraphOfInput<Origin, Input>>, Entry>>;
-/** The canonical implementation with a portable, automatically inferred declaration. */
+type DefineSchema = <const Origin extends string, const Input extends DomainSchemaInput & {
+    readonly name: string;
+}>(origin: Origin, input: Input & {
+    readonly entrypoint?: EntrypointOf<Input>;
+}) => string extends Origin | Extract<Dependencies<Input>[keyof Dependencies<Input>], DomainSchema>['origin'] ? DefinedSchema<Origin, ResolvedDomainOfInput<Origin, Input>> : AuthoredSchema<Origin, Extract<UniqueEntries<GraphOfInput<Origin, Input>>, Entry>>;
+/**
+ * The canonical implementation with a portable, automatically inferred declaration. Its type
+ * requires the Domain `name`, which the Kernel requires to install a new revision; `defineDomain`
+ * refuses an unnamed root Schema at runtime. `entrypoint` names one of the declared Views.
+ */
 export declare const defineSchema: DefineSchema;
 export {};

package/dist/platform/schema/schema-authoring.js

@@ -1,3 +1,7 @@
 import { defineSchema as kernelDefineSchema } from '@astrale-os/kernel-dsl/v1';
-/** The canonical implementation with a portable, automatically inferred declaration. */
+/**
+ * The canonical implementation with a portable, automatically inferred declaration. Its type
+ * requires the Domain `name`, which the Kernel requires to install a new revision; `defineDomain`
+ * refuses an unnamed root Schema at runtime. `entrypoint` names one of the declared Views.
+ */
 export const defineSchema = kernelDefineSchema;

package/dist/project/admit.js

@@ -1,4 +1,3 @@
-import { isLegacyDeployment } from '../deployment/deploy.js';
 import { isProject } from './define.js';
 export const PROJECT_EXPORT_HINT = 'astrale.config.ts must export exactly one default Project:\n' +
     "  import { defineProject } from '@astrale-os/sdk/project'\n" +
@@ -15,8 +14,5 @@ export function admitProjectModule(loaded) {
     const value = Reflect.get(loaded, 'default');
     if (isProject(value))
         return value;
-    if (isLegacyDeployment(value)) {
-        throw new TypeError(`astrale.config.ts exports the legacy deploy() aggregate; migrate the Domain and Environments into defineProject().\n${PROJECT_EXPORT_HINT}`);
-    }
     throw new TypeError(`Default export must be created by defineProject().\n${PROJECT_EXPORT_HINT}`);
 }

package/dist/project/install-command.d.ts

@@ -2,9 +2,5 @@
  * The command that installs a deployed URL on an instance, as every SDK refusal and help text
  * names it. A deploy never installs (DX [.81399], AM-72): `astrale-domain deploy <environment>`
  * prints a URL, and this command installs it.
- *
- * `--direct` sends a URL install to the instance Kernel, which the astrale CLI requires today and
- * accepts until D13. When the CLI retires it, this is the one SDK text to change; the adapter and
- * scaffold READMEs and templates repeat it as prose.
  */
 export declare function installCommand(instance?: string, identity?: string): string;

package/dist/project/install-command.js

@@ -2,12 +2,8 @@
  * The command that installs a deployed URL on an instance, as every SDK refusal and help text
  * names it. A deploy never installs (DX [.81399], AM-72): `astrale-domain deploy <environment>`
  * prints a URL, and this command installs it.
- *
- * `--direct` sends a URL install to the instance Kernel, which the astrale CLI requires today and
- * accepts until D13. When the CLI retires it, this is the one SDK text to change; the adapter and
- * scaffold READMEs and templates repeat it as prose.
  */
 export function installCommand(instance = '<instance>', identity) {
-    return (`astrale domain install <url> --direct -i ${instance}` +
+    return (`astrale domain install <url> -i ${instance}` +
         (identity === undefined ? '' : ` --as ${identity}`));
 }

package/dist/tooling/cli/deploy-mode.d.ts

@@ -1,75 +1,19 @@
-/**
- * The deploy mode of one Environment for one command (CT33), chosen by the configuration itself:
- * an unchanged configuration keeps its mode, and so its behaviour, across an SDK upgrade, as long as
- * that mode still has a consumer (AM-16, AM-72).
- *
- * - `canonical`: an immutable deployment of one sealed release through the adapter's
- *   `deployRelease`, with a key generated for it, and no call to any instance.
- * - `legacy-direct`: today's stable target, replaced in place through `prepare` and `deploy`, which
- *   serves a v3 Publication only. Its `reasons` name what selected it.
- * - `refused`: a shape no deploy of this SDK serves, refused before any effect. Each refusal
- *   carries the configuration or command to write instead.
- *
- * A deploy never installs, so two shapes are refused before a mode is selected at all: an
- * Environment that declares `installation` by `defineProject`, and `--deploy-only` by the
- * command-line parser (AM-72).
- */
+/** A supported immutable deployment, or a configuration refused before provider effects. */
 export type DeployMode = {
     readonly kind: 'canonical';
-} | {
-    readonly kind: 'legacy-direct';
-    readonly reasons: readonly LegacyDirectReason[];
 } | {
     readonly kind: 'refused';
     readonly refusals: readonly DeployRefusal[];
 };
-/** What puts an Environment on the legacy direct-mode path. */
-export type LegacyDirectReason = 
-/** An adapter-cloudflare parameter of direct mode. */
-{
-    readonly reason: 'direct-parameter';
-    readonly parameter: CloudflareDirectParameter;
-}
-/** adapter-cloudflare without a dispatch `namespace`: direct mode is its default. */
- | {
-    readonly reason: 'no-namespace';
-}
-/** An adapter that declares no `deployRelease`: the contract before adapter interface v2. */
- | {
-    readonly reason: 'no-deploy-release';
-};
-export type CloudflareDirectParameter = 'route' | 'workerName' | 'identityIssuer' | 'addressing' | 'signingIdentity';
 export interface DeployRefusal {
-    readonly reason: 'astrale-instance' | 'astrale-signing-identity' | 'mixed-parameters' | 'scheduled-triggers' | 'publish-legacy-direct';
-    /** The configuration or command to write instead, for the author. */
+    readonly reason: 'invalid-parameters' | 'missing-namespace' | 'scheduled-triggers' | 'unsupported-adapter';
     readonly guidance: string;
 }
-/**
- * The commands that select a deploy mode. `publish` names only an immutable deployment, so it
- * refuses every Environment that is not canonical (CT33, R-G03).
- */
 export type DeployModeCommand = 'deploy' | 'publish';
-/**
- * Select the deploy mode of one Environment (CT33). It reads the configuration and the command
- * only, and has no effect.
- *
- * A refusal wins over every other reason. adapter-astrale deploys immutable deployments only
- * (`deployRelease`): its removed instance mode's `instance` and `signingIdentity` are refused
- * before any effect, since their one consumer pins an older SDK (AM-72). Otherwise the Environment
- * is on the legacy direct-mode path when adapter-cloudflare names a direct-mode parameter or no
- * `namespace`, or when its adapter declares no `deployRelease`. Everything else is canonical,
- * and `publish` refuses the legacy direct-mode path: a stable target serves no release, so no
- * version can name it.
- *
- * Within canonical adapter-cloudflare (with `namespace`), a direct-mode parameter is refused
- * rather than silently selecting either mode, and so is `wrangler.triggers`: an immutable
- * deployment runs no cron of its own (D13). The bundling-affecting `wrangler` keys are refused by
- * adapter-cloudflare itself for every Environment (AM-51).
- */
+/** Inspect one Environment's deployment contract without building or changing any provider. */
 export declare function selectDeployMode(input: {
     readonly command: DeployModeCommand;
     readonly environment: string;
-    /** The Environment's definition, of which selection reads only the adapter and its parameters. */
     readonly definition: {
         readonly deployment: {
             readonly adapter: {