@astrale-os/sdk 0.6.0-beta.23 → 0.6.0-beta.24

package/dist/deployment/address/summary.d.ts

@@ -18,16 +18,12 @@ export interface DeploymentSummaryV1 {
      * `published` on Admin's Services, which keeps every deployment until it is retired. Absent on a
      * dispatch namespace, which keeps no retention.
      */
-    readonly retention?: 'preview' | 'published';
+    readonly retention?: 'published';
     /** When the host created it; absent when the host no longer knows (its script is gone). */
     readonly createdAt?: string;
-    /** An older adapter's report of the last call; no first-party adapter reports it any more. */
-    readonly lastCallAt?: string;
-    /** An older adapter's preview expiry; no first-party adapter reports it any more. */
-    readonly expiresAt?: string;
     readonly retiredAt?: string;
-    /** `withdrawn` once its owner retired it (`expired` only from an older adapter). */
-    readonly retirement?: 'expired' | 'withdrawn';
+    /** `withdrawn` once its owner retired it. */
+    readonly retirement?: 'withdrawn';
     /** The RFC 7638 thumbprint of its key; absent when the host no longer knows (its script is gone). */
     readonly signingKeyId?: string;
     readonly record: DeploymentRecordV1;

package/dist/deployment/authoring.d.ts

@@ -1,5 +1,3 @@
-export { deploy } from './deploy.js';
-export type { DeploymentInput, LegacyDeployment } from './deploy.js';
 export type { Deployment } from './deployment.js';
 export { runtime } from './runtime/index.js';
 export type { RuntimeReference } from './runtime/index.js';

package/dist/deployment/authoring.js

@@ -1,2 +1 @@
-export { deploy } from './deploy.js';
 export { runtime } from './runtime/index.js';

package/dist/deployment/build/build.d.ts

@@ -10,4 +10,10 @@ export interface Build<Schema extends schema.DomainSchema = schema.DomainSchema,
     readonly requirements: release.Requirements;
     readonly routes: routes.Plan;
     readonly frontend?: FrontendCompilation;
+    /** What the release manifest shows of the application: its icon. */
+    readonly presentation?: BuildPresentation;
+}
+export interface BuildPresentation {
+    /** One self-contained inline SVG. */
+    readonly icon?: string;
 }

package/dist/deployment/build/compile.js

@@ -19,6 +19,7 @@ export function compile(definition) {
     const compiled = schemaApi.compile(definition.schema);
     const requirements = compileRequirements(domain, definition.requirements, sourceBundle);
     const frontend = compileFrontend(definition.frontend, domain);
+    const presentation = definition.icon === undefined ? undefined : Object.freeze({ icon: definition.icon });
     const plan = routes.compile({
         domain,
         routes: admitRoutes(definition.routes, registry),
@@ -37,6 +38,7 @@ export function compile(definition) {
         requirements,
         routes: plan,
         ...(frontend === undefined ? {} : { frontend }),
+        ...(presentation === undefined ? {} : { presentation }),
     });
     return admitBuild(build, { domain, registry });
 }

package/dist/deployment/build/frontend/compilation.d.ts

@@ -1,19 +1,17 @@
 import type { Frontend, FrontendSource } from '../../../application/view/index.js';
-import type { FrontendHandshake, IframeRequirements, ViewHostRequirements } from '../../../application/view/index.js';
-import type { Key, ViewRef } from '../../../platform/schema/index.js';
+import type { FrontendHandshake, ViewHostRequirements } from '../../../application/view/index.js';
+import type { Key } from '../../../platform/schema/index.js';
 import type { Domain } from '../../../platform/schema/index.js';
 export interface CompiledFrontendRoute {
     readonly view: Key.View;
     readonly path: string;
     readonly document: string;
     readonly handshake: FrontendHandshake;
-    readonly iframe?: IframeRequirements;
     readonly host?: ViewHostRequirements;
 }
 export interface FrontendCompilation {
     readonly source: FrontendSource;
     readonly routes: readonly CompiledFrontendRoute[];
-    readonly entrypoint: ViewRef;
 }
 /** Lower exact authored View names to canonical DSL references without placing URLs. */
 export declare function compileFrontend(frontend: Frontend | undefined, domain: Domain): FrontendCompilation | undefined;

package/dist/deployment/build/frontend/compilation.js

@@ -15,16 +15,11 @@ export function compileFrontend(frontend, domain) {
             path: route.path,
             document: route.document,
             handshake: route.handshake,
-            ...(route.iframe === undefined ? {} : { iframe: route.iframe }),
             ...(route.host === undefined ? {} : { host: route.host }),
         });
     });
-    const entrypoint = domain.views[frontend.entrypoint];
-    if (entrypoint === undefined)
-        throw new TypeError('Frontend entrypoint is absent from its Domain.');
     return Object.freeze({
         source: frontend.source,
         routes: Object.freeze(routes),
-        entrypoint: entrypoint.ref,
     });
 }

package/dist/deployment/build/frontend/digest.js

@@ -3,11 +3,7 @@ const MEDIA_TYPE = 'application/vnd.astrale.frontend-material+octet-stream;v=1';
 export function digest(frontend, files) {
     const encoder = new TextEncoder();
     const chunks = [
-        encoder.encode(JSON.stringify({
-            source: frontend.source,
-            routes: frontend.routes,
-            entrypoint: frontend.entrypoint,
-        })),
+        encoder.encode(JSON.stringify({ source: frontend.source, routes: frontend.routes })),
     ];
     for (const file of files) {
         const bytes = file.bytes();

package/dist/deployment/build/material.d.ts

@@ -1,6 +1,6 @@
 import type { DomainSchema } from '@astrale-os/kernel-dsl/v1/schema';
 import type { Runtime } from '../../application/runtime/index.js';
-import type { Build } from './build.js';
+import type { Build, BuildPresentation } from './build.js';
 import type { FrontendCompilation } from './frontend/index.js';
 export interface BuildMaterial {
     readonly format: 'astrale.sdk.build-material';
@@ -16,6 +16,7 @@ export interface BuildMaterial {
     readonly requirements: Build['requirements'];
     readonly routes: Build['routes'];
     readonly frontend?: FrontendCompilation;
+    readonly presentation?: BuildPresentation;
 }
 declare const GENERATED_BUILD_MATERIAL: unique symbol;
 /** Exact Build material embedded by an Astrale execution-code generator. */
@@ -23,7 +24,6 @@ export interface GeneratedBuildMaterial {
     readonly format: 'astrale.sdk.generated-build-material';
     readonly version: 1;
     readonly material: BuildMaterial;
-    readonly digest: Build['schema']['bundle']['ref']['digest'];
     readonly [GENERATED_BUILD_MATERIAL]: 'generated-build-material';
 }
 /** Detach the provider-neutral, runtime-free material embedded into generated execution code. */

package/dist/deployment/build/material.js

@@ -4,10 +4,11 @@ import { load as loadCompiledSchema } from '@astrale-os/kernel-dsl/v1/compiled/l
 import { revision } from '@astrale-os/kernel-dsl/v1/schema/revision';
 import { equal } from '@astrale-os/kernel-dsl/value';
 import * as artifact from '@astrale-os/kernel-protocol/artifact';
-import { BUNDLE_MEDIA_TYPE } from '@astrale-os/kernel-protocol/release/bundle';
-import { admitRequirements, validateRequirements, } from '@astrale-os/kernel-protocol/release/requirements';
+import { BUNDLE_MEDIA_TYPE } from '@astrale-os/kernel-protocol/release';
+import { admitRequirements, validateRequirements } from '@astrale-os/kernel-protocol/release';
 import * as routes from '@astrale-os/kernel-protocol/routes';
 import { admitRuntimeRegistry, isRuntime } from '../../application/runtime/index.js';
+import { admitClassIconSvg } from '../../platform/schema/class-icon-svg.js';
 import { admitBuild, isBuild } from './admission.js';
 /** Detach the provider-neutral, runtime-free material embedded into generated execution code. */
 export function material(build) {
@@ -29,6 +30,7 @@ export function material(build) {
         requirements: build.requirements,
         routes: build.routes,
         ...(build.frontend === undefined ? {} : { frontend: build.frontend }),
+        ...(build.presentation === undefined ? {} : { presentation: build.presentation }),
     });
 }
 /** Produce opaque material for execution code from one admitted Build. */
@@ -38,7 +40,6 @@ export function generatedMaterial(build) {
         format: 'astrale.sdk.generated-build-material',
         version: 1,
         material: value,
-        digest: digestOf(value),
     });
 }
 /** Re-admit detached provider-neutral Build material against the exact Runtime value. */
@@ -62,6 +63,7 @@ export function restoreBuild(input, runtime) {
     const compiled = deepFreeze(input.schema.compiled);
     const bundleRef = deepFreeze(input.schema.bundle.ref);
     const frontend = input.frontend === undefined ? undefined : deepFreeze(input.frontend);
+    const presentation = input.presentation === undefined ? undefined : admitPresentation(input.presentation);
     const detached = new Uint8Array(bytes);
     const build = Object.freeze({
         kind: 'build',
@@ -77,6 +79,7 @@ export function restoreBuild(input, runtime) {
         requirements,
         routes: plan,
         ...(frontend === undefined ? {} : { frontend }),
+        ...(presentation === undefined ? {} : { presentation }),
     });
     return admitBuild(build, { domain, registry });
 }
@@ -106,6 +109,7 @@ export function restoreGeneratedBuild(input, runtime) {
         requirements: material.requirements,
         routes: material.routes,
         ...(material.frontend === undefined ? {} : { frontend: material.frontend }),
+        ...(material.presentation === undefined ? {} : { presentation: material.presentation }),
     });
     return admitBuild(build, { domain, registry });
 }
@@ -118,7 +122,7 @@ function acceptGeneratedMaterial(input, runtime) {
         Array.isArray(input) ||
         format !== 'astrale.sdk.generated-build-material' ||
         version !== 1 ||
-        Reflect.ownKeys(input).some((key) => key !== 'format' && key !== 'version' && key !== 'material' && key !== 'digest')) {
+        Reflect.ownKeys(input).some((key) => key !== 'format' && key !== 'version' && key !== 'material')) {
         invalid();
     }
     assertMaterialEnvelope(material, runtime);
@@ -128,14 +132,6 @@ function acceptGeneratedMaterial(input, runtime) {
     deepFreeze(input);
     return Object.freeze({ material });
 }
-function digestOf(input) {
-    try {
-        return artifact.identify(new TextEncoder().encode(JSON.stringify(input)), 'application/vnd.astrale.sdk.build-material+json').digest;
-    }
-    catch {
-        invalid();
-    }
-}
 function assertMaterialEnvelope(input, runtime) {
     if (!isRuntime(runtime))
         throw new TypeError('Build Runtime is not admitted.');
@@ -150,7 +146,8 @@ function assertMaterialEnvelope(input, runtime) {
             key !== 'callables' &&
             key !== 'requirements' &&
             key !== 'routes' &&
-            key !== 'frontend')) {
+            key !== 'frontend' &&
+            key !== 'presentation')) {
         invalid();
     }
 }
@@ -186,6 +183,24 @@ function admitRoutePlan(input, domain) {
         invalid();
     return admitted;
 }
+/** External material must re-admit its icon using the same worker-safe SVG owner as authoring. */
+function admitPresentation(input) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input))
+        invalid();
+    const value = input;
+    if (Reflect.ownKeys(value).some((key) => key !== 'icon'))
+        invalid();
+    const { icon } = value;
+    if (icon === undefined)
+        return Object.freeze({});
+    if (typeof icon !== 'string')
+        invalid();
+    const admitted = admitClassIconSvg(icon);
+    // Material carries an exact admitted value, rather than authored text to normalize.
+    if (admitted !== icon)
+        invalid();
+    return Object.freeze({ icon: admitted });
+}
 function deepFreeze(input, seen = new WeakSet()) {
     if (input !== null && typeof input === 'object' && !seen.has(input)) {
         seen.add(input);

package/dist/deployment/deployment.d.ts

@@ -1,14 +1,10 @@
-import type { Adapter, LegacyAdapter } from './adapter/index.js';
-/**
- * One adapter bound to the parameters of one Project Environment. `AdapterValue` is an adapter
- * interface v2 `Adapter`, or a `@deprecated` `LegacyAdapter` whose Environments are all on the
- * legacy direct-mode path (CT33).
- */
-export interface Deployment<Parameters extends object = object, AdapterValue extends Adapter<Parameters> | LegacyAdapter<Parameters> = Adapter<Parameters> | LegacyAdapter<Parameters>> {
+import type { Adapter } from './adapter/index.js';
+/** One immutable-deployment adapter bound to one Project Environment. */
+export interface Deployment<Parameters extends object = object, AdapterValue extends Adapter<Parameters> = Adapter<Parameters>> {
     readonly kind: 'deployment';
     readonly adapter: AdapterValue;
     readonly parameters: Parameters;
 }
 /** Internal adapter binding boundary used by public provider packages. */
-export declare function captureDeployment<const Parameters extends object>(adapter: Adapter<Parameters> | LegacyAdapter<Parameters>, parameters: Parameters): Deployment<Parameters>;
+export declare function captureDeployment<const Parameters extends object>(adapter: Adapter<Parameters>, parameters: Parameters): Deployment<Parameters>;
 export declare function isDeployment(input: unknown): input is Deployment;

package/dist/deployment/index.d.ts

@@ -1,14 +1,12 @@
 export { defineAdapter, defineDeployment, isAdapter } from './adapter/index.js';
-export type { Adapter, AdapterCommand, AdapterCommandContext, AdapterCommandResult, AdapterEnvironmentContext, AdapterInput, AddressingPlan, ArtifactFile, ArtifactSource, Bundle, BundleContext, Bundler, BundleSource, ConfigureContext, DeployContext, DeploymentCallTarget, DeploymentPhase, DeploymentProgress, DeploymentSecretsState, DeployResult, FailedDeployResult, FailedReleaseDeployResult, LegacyAdapter, LegacyAdapterInput, ListContext, ListedDeployment, MutationKnowledge, Placement, PlacementContext, PreparedArtifact, PreparedArtifactFile, PrepareContext, ReadyDeployResult, ReadyReleaseDeployResult, ReleaseDeployContext, ReleaseDeploymentPhase, ReleaseDeployResult, RetainContext, } from './adapter/index.js';
+export type { Adapter, AdapterCommand, AdapterCommandContext, AdapterCommandResult, AdapterEnvironmentContext, AdapterInput, ArtifactFile, Bundle, BundleContext, Bundler, BundleSource, ConfigureContext, DeploymentCallTarget, DeploymentSecretsState, FailedReleaseDeployResult, ListContext, ListedDeployment, MutationKnowledge, Placement, PlacementContext, PreparedArtifactFile, ReadyReleaseDeployResult, ReleaseDeployContext, ReleaseDeploymentPhase, ReleaseDeployResult, RetainContext, } from './adapter/index.js';
 export { compile, isBuild } from './build/index.js';
 export type { Build, BuildBundle, BuildDigest, BuildManifestV1, BuildSchema, } from './build/index.js';
-export { deploy } from './deploy.js';
-export type { DeploymentInput, LegacyDeployment } from './deploy.js';
 export { isDeployment } from './deployment.js';
 export type { Deployment } from './deployment.js';
 export { addressing, assemble, isAddressing, isRelease } from './release/index.js';
 export type { Addressing, Release } from './release/index.js';
 export { admit as admitRuntime, resolve as resolveRuntime, runtime } from './runtime/index.js';
 export type { ResolvedRuntimeReference, RuntimeModuleLoader, RuntimeReference, } from './runtime/index.js';
-export { verifyBundle, verifyDeployment, verifyPreflight, verifyReadiness, verifyUploadedBuild, } from './verify/index.js';
-export type { BundleInput, PreflightInput } from './verify/index.js';
+export { verifyBundle, verifyReadiness, verifyUploadedBuild } from './verify/index.js';
+export type { BundleInput } from './verify/index.js';

package/dist/deployment/index.js

@@ -1,7 +1,6 @@
 export { defineAdapter, defineDeployment, isAdapter } from './adapter/index.js';
 export { compile, isBuild } from './build/index.js';
-export { deploy } from './deploy.js';
 export { isDeployment } from './deployment.js';
 export { addressing, assemble, isAddressing, isRelease } from './release/index.js';
 export { admit as admitRuntime, resolve as resolveRuntime, runtime } from './runtime/index.js';
-export { verifyBundle, verifyDeployment, verifyPreflight, verifyReadiness, verifyUploadedBuild, } from './verify/index.js';
+export { verifyBundle, verifyReadiness, verifyUploadedBuild } from './verify/index.js';

package/dist/deployment/release/addressing.d.ts

@@ -5,15 +5,8 @@ import type { IssuerId } from '../../platform/auth/index.js';
  */
 export interface Addressing {
     readonly issuer: IssuerId;
-    /** Public origin serving this Release; the issuer can remain on an older deployment. */
+    /** Public origin serving this Release, identical to its issuer. */
     readonly publicUrl: IssuerId;
 }
-export declare function addressing(input: string, options?: {
-    /**
-     * @deprecated Stable-target `legacy` path only: adapter-cloudflare direct mode serves under an
-     * issuer distinct from its route (`identityIssuer`). Removed with that mode at D10; a
-     * deployment's URL is its issuer.
-     */
-    readonly publicUrl?: string;
-}): Addressing;
+export declare function addressing(input: string): Addressing;
 export declare function isAddressing(input: unknown): input is Addressing;

package/dist/deployment/release/addressing.js

@@ -1,9 +1,8 @@
 import { issuer } from '../../platform/auth/index.js';
 const admittedAddressing = new WeakSet();
-export function addressing(input, options = {}) {
+export function addressing(input) {
     const admitted = origin(input);
-    const publicUrl = options.publicUrl === undefined ? admitted : origin(options.publicUrl);
-    const value = Object.freeze({ issuer: admitted, publicUrl });
+    const value = Object.freeze({ issuer: admitted, publicUrl: admitted });
     admittedAddressing.add(value);
     return value;
 }

package/dist/deployment/release/index.d.ts

@@ -3,5 +3,3 @@ export { capture, isRelease } from './admission.js';
 export { addressing, isAddressing, type Addressing } from './addressing.js';
 export { invocationPath } from './invocation.js';
 export type { Release } from './release.js';
-/** @deprecated Stable-target Publication v3; see `legacy/index.ts` for its consumers and removal. */
-export * as legacy from './legacy/index.js';

package/dist/deployment/release/index.js

@@ -2,5 +2,3 @@ export { assemble } from './assemble.js';
 export { capture, isRelease } from './admission.js';
 export { addressing, isAddressing } from './addressing.js';
 export { invocationPath } from './invocation.js';
-/** @deprecated Stable-target Publication v3; see `legacy/index.ts` for its consumers and removal. */
-export * as legacy from './legacy/index.js';

package/dist/deployment/release/release.d.ts

@@ -12,7 +12,7 @@ export interface Release<BuildValue extends Build = Build> {
     readonly build: BuildValue;
     /**
      * The deployment's URL: its origin, which is also its issuer (`document.identity.issuer`). A
-     * deployment never splits the two; only the stable-target `legacy` path does.
+     * deployment binds both to the same immutable URL.
      */
     readonly url: IssuerId;
     readonly document: release.DomainRelease;

package/dist/deployment/release/runtime.d.ts

@@ -1,4 +1,2 @@
 export { assemble } from './assemble.js';
 export { addressing } from './addressing.js';
-/** @deprecated Stable-target Publication v3; see `legacy/index.ts` for its consumers and removal. */
-export * as legacy from './legacy/index.js';

package/dist/deployment/release/runtime.js

@@ -1,4 +1,2 @@
 export { assemble } from './assemble.js';
 export { addressing } from './addressing.js';
-/** @deprecated Stable-target Publication v3; see `legacy/index.ts` for its consumers and removal. */
-export * as legacy from './legacy/index.js';

package/dist/deployment/release/served/index.d.ts

@@ -4,8 +4,7 @@ import type { Addressing } from '../addressing.js';
 export declare const DELIVERY_PATH: '/install';
 /**
  * What a deployment serves beneath its URL: identity, schema bundle, requirements, bindings, routes
- * and delivery. A `DomainRelease` v4 adds its build to it, and the v3 Publication of the legacy
- * path is exactly this content, so both documents of one build at one address agree.
+ * and delivery. A `DomainRelease` v4 adds the digest of its running build.
  */
 export type Served = Omit<release.Content, 'format' | 'version' | 'build'>;
 /** Derive the served content of one exact Build at one Addressing. */

package/dist/deployment/release/served/index.js

@@ -12,11 +12,15 @@ export function served(build, addressing) {
         identity: { issuer: addressing.issuer, subject: root.origin },
         schema: { revision: root.revision, bundle: { href: bundle, ref: build.schema.bundle.ref } },
         requirements: build.requirements,
-        ...(build.frontend === undefined
-            ? {}
-            : { manifest: Object.freeze({ entrypoint: build.frontend.entrypoint }) }),
+        // The root schema declares the Domain name and entrypoint; a release authors neither.
+        ...manifest(build),
         bindings: { callables: callables(build, addressing), views: views(build, addressing) },
         delivery: release.placeDelivery({ path: DELIVERY_PATH, authentication: { kind: 'public' } }, addressing.publicUrl, bundle),
         routes: routes(build, addressing),
     };
 }
+/** The release manifest carries the Domain icon as `logo`. Absent when the Build carries none. */
+function manifest(build) {
+    const { icon } = build.presentation ?? {};
+    return icon === undefined ? {} : { manifest: Object.freeze({ logo: icon }) };
+}

package/dist/deployment/release/served/views.js

@@ -8,7 +8,6 @@ export function views(build, addressing) {
         view: route.view,
         href: new URL(route.path.replace(/^\//u, ''), base).href,
         handshake: route.handshake,
-        ...(route.iframe === undefined ? {} : { iframe: route.iframe }),
         ...(route.host === undefined ? {} : { host: route.host }),
     })));
 }

package/dist/deployment/verify/index.d.ts

@@ -1,5 +1,3 @@
-export { preflight as verifyPreflight } from './preflight/index.js';
-export { isPreparedArtifact } from './preflight/index.js';
 export { bundle as verifyBundle, isBundle, uploadedBuild as verifyUploadedBuild, } from './preflight/index.js';
-export type { BundleInput, PreflightInput } from './preflight/index.js';
-export { readiness as verifyReadiness, readinessPaths, verifyDeployment, } from './readiness/index.js';
+export type { BundleInput } from './preflight/index.js';
+export { readiness as verifyReadiness, readinessPaths } from './readiness/index.js';

package/dist/deployment/verify/index.js

@@ -1,4 +1,2 @@
-export { preflight as verifyPreflight } from './preflight/index.js';
-export { isPreparedArtifact } from './preflight/index.js';
 export { bundle as verifyBundle, isBundle, uploadedBuild as verifyUploadedBuild, } from './preflight/index.js';
-export { readiness as verifyReadiness, readinessPaths, verifyDeployment, } from './readiness/index.js';
+export { readiness as verifyReadiness, readinessPaths } from './readiness/index.js';

package/dist/deployment/verify/preflight/index.d.ts

@@ -1,14 +1,2 @@
-import type { ArtifactSource, PreparedArtifact } from '../../adapter/legacy/index.js';
-import type { Build } from '../../build/index.js';
-import type { ResolvedRuntimeReference } from '../../runtime/index.js';
-export { artifact, isPreparedArtifact } from './artifact.js';
 export { bundle, isBundle, uploadedBuild, type BundleInput } from './bundle.js';
 export { build } from './build.js';
-export { publication } from './publication.js';
-export interface PreflightInput<BuildValue extends Build = Build> {
-    readonly build: BuildValue;
-    readonly runtime: ResolvedRuntimeReference;
-    readonly source: ArtifactSource;
-}
-/** Admit exact deployment material before any provider mutation. */
-export declare function preflight<const BuildValue extends Build>(input: PreflightInput<BuildValue>): PreparedArtifact<BuildValue>;

package/dist/deployment/verify/preflight/index.js

@@ -1,14 +1,2 @@
-import { artifact } from './artifact.js';
-import { build as verifyBuild } from './build.js';
-import { publication as verifyPublication } from './publication.js';
-export { artifact, isPreparedArtifact } from './artifact.js';
 export { bundle, isBundle, uploadedBuild } from './bundle.js';
 export { build } from './build.js';
-export { publication } from './publication.js';
-/** Admit exact deployment material before any provider mutation. */
-export function preflight(input) {
-    verifyBuild(input.build);
-    const prepared = artifact(input.build, input.runtime, input.source);
-    verifyPublication(prepared);
-    return prepared;
-}

package/dist/deployment/verify/readiness/index.d.ts

@@ -1,15 +1,11 @@
 import type { Release } from '../../release/index.js';
-import type * as legacy from '../../release/legacy/index.js';
 import type { ReadinessOptions } from './fetch.js';
-export { verifyDeployment } from './deployment.js';
 export { verifyIdentity } from './identity.js';
 export type { ReadinessFetch, ReadinessOptions } from './fetch.js';
-export { verifyPublication } from './legacy/index.js';
 export { verifyRelease } from './release.js';
 /**
  * Read-only verification of one exact live Release and its serving identity: an immutable
- * deployment's `release.json` (release digest and build digest), or a stable target's
- * `domain.json` (deprecated, `legacy/`).
+ * deployment's release.json (release digest and build digest).
  */
 /**
  * The local paths `readiness` reads of one immutable deployment, each answering 200 once the
@@ -18,4 +14,4 @@ export { verifyRelease } from './release.js';
  * deployment probes these.
  */
 export declare function readinessPaths(deployed: Release): readonly string[];
-export declare function readiness(release: Release | legacy.Release, options?: ReadinessOptions): Promise<void>;
+export declare function readiness(release: Release, options?: ReadinessOptions): Promise<void>;

package/dist/deployment/verify/readiness/index.js

@@ -1,16 +1,12 @@
 import { issuer } from '@astrale-os/kernel-protocol';
 import * as release from '@astrale-os/kernel-protocol/release';
 import { verifyIdentity } from './identity.js';
-import { verifyPublication } from './legacy/index.js';
 import { verifyRelease } from './release.js';
-export { verifyDeployment } from './deployment.js';
 export { verifyIdentity } from './identity.js';
-export { verifyPublication } from './legacy/index.js';
 export { verifyRelease } from './release.js';
 /**
  * Read-only verification of one exact live Release and its serving identity: an immutable
- * deployment's `release.json` (release digest and build digest), or a stable target's
- * `domain.json` (deprecated, `legacy/`).
+ * deployment's release.json (release digest and build digest).
  */
 /**
  * The local paths `readiness` reads of one immutable deployment, each answering 200 once the
@@ -28,11 +24,6 @@ export function readinessPaths(deployed) {
     ]);
 }
 export async function readiness(release, options = {}) {
-    if (release.kind === 'release') {
-        await verifyRelease(release, options);
-        await verifyIdentity(release.url, options);
-        return;
-    }
-    await verifyPublication(release, options);
-    await verifyIdentity(release.addressing.issuer, options);
+    await verifyRelease(release, options);
+    await verifyIdentity(release.url, options);
 }

package/dist/deployment/worker/response.d.ts

@@ -84,10 +84,7 @@ export type WorkerDeploymentResult = {
     };
     readonly deployment: WorkerDeploymentSummary;
 } | WorkerDeploymentRejection;
-/**
- * Admit the answer of a host's `hosting`: its routing domain. The `addressing: 'opaque'` an older
- * Services answers beside it is admitted and dropped: every Service name is opaque.
- */
+/** Admit the answer of a host's `hosting`: exactly its routing domain. */
 export declare function decodeWorkerHosting(input: unknown): WorkerHostingV1;
 /**
  * Admit the answer of a deploy exactly: a deployment whose state reports the secret state it

package/dist/deployment/worker/response.js

@@ -23,18 +23,12 @@ const SECRETS_BY_STATE = Object.freeze({
     created: Object.freeze(['bound']),
     reused: Object.freeze(['updated', 'unchanged']),
 });
-/**
- * Admit the answer of a host's `hosting`: its routing domain. The `addressing: 'opaque'` an older
- * Services answers beside it is admitted and dropped: every Service name is opaque.
- */
+/** Admit the answer of a host's `hosting`: exactly its routing domain. */
 export function decodeWorkerHosting(input) {
-    const value = exact(input, ['routingDomain'], ['addressing'], 'hosting');
+    const value = exact(input, ['routingDomain'], [], 'hosting');
     if (typeof value.routingDomain !== 'string' || !isDnsName(value.routingDomain)) {
         invalid('hosting', 'routingDomain');
     }
-    if (value.addressing !== undefined && value.addressing !== 'opaque') {
-        invalid('hosting', 'addressing');
-    }
     return Object.freeze({ routingDomain: value.routingDomain });
 }
 /**

package/dist/execution/identity/delivery.d.ts

@@ -2,12 +2,7 @@ import type { release as serverRelease } from '@astrale-os/kernel-server';
 import * as release from '@astrale-os/kernel-protocol/release';
 import type { IssuerId } from '../../platform/auth/index.js';
 import type { SigningMaterial } from './signing.js';
-type Served = release.DomainRelease | release.legacy.Publication;
 /**
- * Create one stateless, nonce-bound public Delivery provider for the exact document a deployment
- * serves. It answers in the request's version: a Delivery v2 carrying the release for a v2
- * request, and a Delivery v1 carrying the Publication (a release's frozen v3 projection) for the
- * deprecated v1 request. A stable target's Publication answers v1 only.
+ * Create one stateless, nonce-bound public Delivery v2 provider for the exact deployment release.
  */
-export declare function releaseDelivery(signing: SigningMaterial, issuer: IssuerId, subject: string, deployed: Served): serverRelease.delivery.Provider;
-export {};
+export declare function releaseDelivery(signing: SigningMaterial, issuer: IssuerId, subject: string, deployed: release.DomainRelease): serverRelease.delivery.Provider;

package/dist/execution/identity/delivery.js

@@ -2,34 +2,12 @@ import * as release from '@astrale-os/kernel-protocol/release';
 import { SignJWT } from 'jose';
 const ATTESTATION_TTL_SECONDS = 60;
 /**
- * Create one stateless, nonce-bound public Delivery provider for the exact document a deployment
- * serves. It answers in the request's version: a Delivery v2 carrying the release for a v2
- * request, and a Delivery v1 carrying the Publication (a release's frozen v3 projection) for the
- * deprecated v1 request. A stable target's Publication answers v1 only.
+ * Create one stateless, nonce-bound public Delivery v2 provider for the exact deployment release.
  */
 export function releaseDelivery(signing, issuer, subject, deployed) {
-    const projection = deployed.version === 4 ? release.legacy.publication(deployed) : deployed;
     return Object.freeze({
         async create(request, context) {
             context.signal.throwIfAborted();
-            if (request.version === 1) {
-                const attestation = await attest(signing, issuer, subject, request.kernel, {
-                    purpose: release.legacy.delivery.PURPOSE,
-                    nonce: request.nonce,
-                    etag: projection.etag,
-                    schemaRevision: projection.schema.revision,
-                });
-                context.signal.throwIfAborted();
-                return release.legacy.delivery.accept({
-                    format: 'astrale.domain.delivery',
-                    version: 1,
-                    publication: projection,
-                    attestation,
-                });
-            }
-            if (deployed.version !== 4) {
-                throw new TypeError('A Publication-backed deployment answers Delivery v1 only.');
-            }
             const attestation = await attest(signing, issuer, subject, request.kernel, {
                 purpose: release.delivery.PURPOSE,
                 nonce: request.nonce,

package/dist/execution/identity/identity.d.ts

@@ -12,10 +12,9 @@ export interface Identity extends Issuer, InvocationAuthority {
     readonly subject: string;
     readonly tokenExchange?: exchange.Provider;
     /**
-     * Delivery for the exact document this deployment serves: Delivery v2 over its release and v1
-     * over its frozen v3 projection, or v1 over a stable target's Publication.
+     * Delivery v2 for the exact release this deployment serves.
      */
-    delivery(served: releaseProtocol.DomainRelease | releaseProtocol.legacy.Publication): release.delivery.Provider;
+    delivery(served: releaseProtocol.DomainRelease): release.delivery.Provider;
     /**
      * The Domain's own authority toward one Kernel for a step of the durable Execution `executionId`
      * (`ctx.execution.id`), which no caller credential carries; its credentials name `executionId` in