@astrale-os/sdk 0.6.0-beta.23 → 0.6.0-beta.24

package/dist/deployment/verify/preflight/publication.js

@@ -1,15 +0,0 @@
-import * as protocolPublication from '@astrale-os/kernel-protocol/release/legacy';
-import * as routes from '@astrale-os/kernel-protocol/routes';
-import { evidenceOf } from '../../build/admission.js';
-import { assemble } from '../../release/legacy/index.js';
-/** Verify locally assemblable Publication evidence before any provider mutation. */
-export function publication(artifact) {
-    if (artifact.addressing.kind !== 'configured')
-        return undefined;
-    const release = assemble(artifact.build, artifact.addressing.addressing);
-    const admitted = protocolPublication.accept(release.publication);
-    protocolPublication.verifyBundleBytes(admitted, artifact.build.schema.bundle.bytes());
-    const { domain } = evidenceOf(artifact.build);
-    routes.legacy.verifyTable(release.routes, admitted, domain);
-    return release;
-}

package/dist/deployment/verify/readiness/deployment.d.ts

@@ -1,3 +0,0 @@
-import type { DeployResult, PreparedArtifact } from '../../adapter/index.js';
-/** Admit adapter-reported progress without changing its mutation knowledge. */
-export declare function verifyDeployment(artifact: PreparedArtifact, input: DeployResult): DeployResult;

package/dist/deployment/verify/readiness/deployment.js

@@ -1,143 +0,0 @@
-import { isRelease } from '../../release/legacy/index.js';
-import { isPreparedArtifact } from '../preflight/artifact.js';
-/** Admit adapter-reported progress without changing its mutation knowledge. */
-export function verifyDeployment(artifact, input) {
-    if (!isPreparedArtifact(artifact))
-        throw new TypeError('PreparedArtifact is not admitted.');
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    const release = input.release === undefined ? undefined : verifyRelease(artifact, input.release);
-    const progress = verifyProgress(artifact, input.progress, release);
-    if (input.status === 'ready') {
-        exact(input, ['status', 'phase', 'progress', 'release']);
-        if (input.phase !== 'complete' ||
-            release === undefined ||
-            progress.provider.kind !== 'applied' ||
-            progress.provider.evidence.issuer === undefined ||
-            !terminal(progress.prerequisite) ||
-            !terminal(progress.configuration)) {
-            invalid();
-        }
-        return Object.freeze({ status: 'ready', phase: 'complete', progress, release });
-    }
-    if (input.status === 'failed') {
-        exact(input, ['status', 'phase', 'progress', 'error'], ['release']);
-        if (!['prerequisite', 'provider', 'addressing', 'release', 'configuration', 'readiness'].includes(input.phase) ||
-            !(input.error instanceof Error)) {
-            invalid();
-        }
-        return Object.freeze({
-            status: 'failed',
-            phase: input.phase,
-            progress,
-            error: input.error,
-            ...(release === undefined ? {} : { release }),
-        });
-    }
-    return invalid();
-}
-function verifyRelease(artifact, release) {
-    if (!isRelease(release) || release.build !== artifact.build) {
-        throw new TypeError('DeployResult Release differs from the PreparedArtifact Build.');
-    }
-    if (artifact.addressing.kind === 'configured' &&
-        (release.addressing.issuer !== artifact.addressing.addressing.issuer ||
-            release.addressing.publicUrl !== artifact.addressing.addressing.publicUrl)) {
-        throw new TypeError('DeployResult Release differs from configured Addressing.');
-    }
-    return release;
-}
-function verifyProgress(artifact, input, release) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    exact(input, ['prerequisite', 'provider', 'configuration']);
-    return Object.freeze({
-        prerequisite: knowledge(input.prerequisite),
-        provider: providerKnowledge(artifact, input.provider, release),
-        configuration: knowledge(input.configuration),
-    });
-}
-function providerKnowledge(artifact, input, release) {
-    if (input?.kind === 'partial') {
-        exact(input, ['kind'], ['evidence']);
-        if (input.evidence === undefined)
-            return Object.freeze({ kind: 'partial' });
-        const evidence = providerEvidence(input.evidence);
-        if (evidence.artifact !== artifact.digest) {
-            throw new TypeError('Provider deployment evidence differs from the PreparedArtifact digest.');
-        }
-        if (release !== undefined &&
-            evidence.issuer !== undefined &&
-            evidence.issuer !== release.addressing.issuer) {
-            throw new TypeError('Provider deployment evidence differs from the Release issuer.');
-        }
-        return Object.freeze({ kind: 'partial', evidence });
-    }
-    if (input?.kind !== 'applied')
-        return knowledge(input);
-    exact(input, ['kind', 'evidence']);
-    const evidence = providerEvidence(input.evidence);
-    if (evidence.artifact !== artifact.digest) {
-        throw new TypeError('Provider deployment evidence differs from the PreparedArtifact digest.');
-    }
-    if (release !== undefined &&
-        evidence.issuer !== undefined &&
-        evidence.issuer !== release.addressing.issuer) {
-        throw new TypeError('Provider deployment evidence differs from the Release issuer.');
-    }
-    return Object.freeze({ kind: 'applied', evidence });
-}
-function terminal(input) {
-    return input.kind === 'none' || input.kind === 'applied';
-}
-function providerEvidence(input) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    exact(input, ['provider', 'deployment', 'artifact'], ['build', 'issuer', 'preflight']);
-    if (typeof input.provider !== 'string' ||
-        input.provider.length === 0 ||
-        input.provider.trim() !== input.provider ||
-        typeof input.deployment !== 'string' ||
-        input.deployment.length === 0 ||
-        input.deployment.trim() !== input.deployment ||
-        typeof input.artifact !== 'string' ||
-        (input.build !== undefined &&
-            (typeof input.build !== 'string' || !/^sha256:[0-9a-f]{64}$/u.test(input.build))) ||
-        (input.issuer !== undefined && typeof input.issuer !== 'string') ||
-        (input.preflight !== undefined &&
-            input.preflight !== 'passed' &&
-            input.preflight !== 'unavailable')) {
-        invalid();
-    }
-    return Object.freeze({ ...input });
-}
-function knowledge(input) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    if (input.kind === 'applied') {
-        exact(input, ['kind', 'evidence']);
-        return Object.freeze({ kind: 'applied', evidence: input.evidence });
-    }
-    if (input.kind === 'partial') {
-        exact(input, ['kind'], ['evidence']);
-        return Object.freeze({
-            kind: 'partial',
-            ...(input.evidence === undefined ? {} : { evidence: input.evidence }),
-        });
-    }
-    if (input.kind === 'none' || input.kind === 'unknown') {
-        exact(input, ['kind']);
-        return Object.freeze({ kind: input.kind });
-    }
-    return invalid();
-}
-function exact(input, required, optional = []) {
-    const allowed = new Set([...required, ...optional]);
-    if (required.some((key) => !Object.hasOwn(input, key)) ||
-        Reflect.ownKeys(input).some((key) => typeof key !== 'string' || !allowed.has(key))) {
-        invalid();
-    }
-}
-function invalid() {
-    throw new TypeError('DeployResult is invalid.');
-}

package/dist/deployment/verify/readiness/legacy/index.d.ts

@@ -1,2 +0,0 @@
-/** @deprecated Stable-target readiness at `domain.json`; see `publication.ts` (removal D10). */
-export { verifyPublication } from './publication.js';

package/dist/deployment/verify/readiness/legacy/index.js

@@ -1,2 +0,0 @@
-/** @deprecated Stable-target readiness at `domain.json`; see `publication.ts` (removal D10). */
-export { verifyPublication } from './publication.js';

package/dist/deployment/verify/readiness/legacy/publication.d.ts

@@ -1,12 +0,0 @@
-import * as publication from '@astrale-os/kernel-protocol/release/legacy';
-import type * as legacy from '../../../release/legacy/index.js';
-import type { ReadinessOptions } from '../fetch.js';
-/**
- * Fetch and verify the exact live Publication and Bundle a stable target serves at `domain.json`.
- *
- * @deprecated Replacement: `verifyRelease`, the readiness of an immutable deployment at
- * `release.json` (release digest and build digest). Consumer: the direct-mode deploy path of
- * adapter-cloudflare (the consumers of `deployment/release/legacy/index.ts`).
- * Removal: D10, with that path.
- */
-export declare function verifyPublication(release: legacy.Release, options?: ReadinessOptions): Promise<publication.Publication>;

package/dist/deployment/verify/readiness/legacy/publication.js

@@ -1,23 +0,0 @@
-import * as publication from '@astrale-os/kernel-protocol/release/legacy';
-import { bounded, fetchRequired, MAXIMUM_BUNDLE_BYTES, MAXIMUM_DOCUMENT_BYTES, text, } from '../fetch.js';
-/**
- * Fetch and verify the exact live Publication and Bundle a stable target serves at `domain.json`.
- *
- * @deprecated Replacement: `verifyRelease`, the readiness of an immutable deployment at
- * `release.json` (release digest and build digest). Consumer: the direct-mode deploy path of
- * adapter-cloudflare (the consumers of `deployment/release/legacy/index.ts`).
- * Removal: D10, with that path.
- */
-export async function verifyPublication(release, options = {}) {
-    const fetcher = options.fetch ?? globalThis.fetch;
-    const publicationUrl = publication.url(release.addressing.publicUrl);
-    const response = await fetchRequired(fetcher, publicationUrl, options.signal);
-    const deployed = publication.accept(JSON.parse(await text(response, publicationUrl, MAXIMUM_DOCUMENT_BYTES)));
-    if (!publication.matchesReference(deployed, publication.reference(release.publication))) {
-        throw new Error('Live Publication differs from the expected Release.');
-    }
-    const bundleResponse = await fetchRequired(fetcher, deployed.schema.bundle.href, options.signal);
-    const bytes = new Uint8Array(await bounded(bundleResponse, deployed.schema.bundle.href, MAXIMUM_BUNDLE_BYTES));
-    publication.decodeBundle(deployed, bytes);
-    return deployed;
-}

package/dist/execution/service/errors.d.ts

@@ -1,3 +0,0 @@
-export declare class ServiceUnavailableError extends Error {
-    readonly name = "ServiceUnavailableError";
-}

package/dist/execution/service/errors.js

@@ -1,3 +0,0 @@
-export class ServiceUnavailableError extends Error {
-    name = 'ServiceUnavailableError';
-}

package/dist/execution/service/serving/legacy/index.d.ts

@@ -1,15 +0,0 @@
-import type { PublicationSource } from '@astrale-os/kernel-server';
-import type * as legacy from '../../../../deployment/release/legacy/index.js';
-import type { LoadedRuntime } from '../../../runtime/index.js';
-/**
- * Serve a stable target's v3 Publication through the Kernel Server's v3-input source: `domain.json`
- * only (404 at `release.json`), with the same-schema continuity of a stable Worker.
- *
- * @deprecated Replacement: the release source of `../source.ts`, which serves an immutable
- * deployment's `DomainRelease` v4. Consumer: the stable Worker of the direct-mode path (the
- * consumers of `deployment/release/legacy/index.ts`), whose host binds no build digest. Removal:
- * D10, with `deployment/release/legacy/` and Kernel Server's `publication` source.
- */
-export declare function publicationSource(runtime: LoadedRuntime, served: legacy.Release): {
-    readonly publication: PublicationSource;
-};

package/dist/execution/service/serving/legacy/index.js

@@ -1,19 +0,0 @@
-import { preparePublicationSnapshot } from '@astrale-os/kernel-server';
-/**
- * Serve a stable target's v3 Publication through the Kernel Server's v3-input source: `domain.json`
- * only (404 at `release.json`), with the same-schema continuity of a stable Worker.
- *
- * @deprecated Replacement: the release source of `../source.ts`, which serves an immutable
- * deployment's `DomainRelease` v4. Consumer: the stable Worker of the direct-mode path (the
- * consumers of `deployment/release/legacy/index.ts`), whose host binds no build digest. Removal:
- * D10, with `deployment/release/legacy/` and Kernel Server's `publication` source.
- */
-export function publicationSource(runtime, served) {
-    const snapshot = preparePublicationSnapshot({
-        publication: served.publication,
-        bundle: served.build.schema.bundle.bytes(),
-        table: served.routes,
-        domain: runtime.domain,
-    });
-    return Object.freeze({ publication: Object.freeze({ current: () => snapshot }) });
-}

package/dist/tooling/cli/deprecations.d.ts

@@ -1,9 +0,0 @@
-import type { FrontendCompilation } from '../../deployment/build/frontend/index.js';
-/**
- * What a build still declares that the SDK has deprecated, one line each for its author. A View's
- * iframe requirements change nothing it receives: every trusted View gets the Shell's shared browser
- * profile, and Astrale hosts refuse requirements beyond it.
- */
-export declare function deprecationWarnings(build: {
-    readonly frontend?: FrontendCompilation;
-}): readonly string[];

package/dist/tooling/cli/deprecations.js

@@ -1,15 +0,0 @@
-/**
- * What a build still declares that the SDK has deprecated, one line each for its author. A View's
- * iframe requirements change nothing it receives: every trusted View gets the Shell's shared browser
- * profile, and Astrale hosts refuse requirements beyond it.
- */
-export function deprecationWarnings(build) {
-    return (build.frontend?.routes ?? []).flatMap(({ view, iframe }) => {
-        if (iframe === undefined)
-            return [];
-        const declared = [...(iframe.sandbox ?? []), ...(iframe.allow ?? [])].join(', ');
-        return [
-            `View ${view} declares iframe requirements (${declared}), which are deprecated: every trusted View receives the Shell's shared browser profile, and Astrale hosts refuse requirements beyond it. Remove its \`iframe\` field.`,
-        ];
-    });
-}

package/dist/tooling/cli/legacy/deploy-result.d.ts

@@ -1,28 +0,0 @@
-import type { ReadyDeployResult } from '../../../deployment/index.js';
-import type { DeployResultV1 } from '../deploy-result.js';
-/**
- * The deploy result of a stable target: the legacy direct-mode path (`prepare`/`deploy` adapter
- * operations) replaces the code its stable target runs in place and serves a v3 Publication, so
- * the result names no release, no build digest, no provider script, no secrets state and no commit.
- * Those operations report a provider deployment identifier (a Worker version id, a Services
- * deployment digest), never the script they replace; that identifier stays on the stderr
- * `Deployment:` progress line and never fills `deployment.script`. Its URL is the public URL
- * `astrale domain install` fetches, which differs from the issuer only under adapter-cloudflare
- * `identityIssuer`.
- *
- * @deprecated Stable-target deploy path only. Replacement: `deployResult`, the result of an
- * immutable deployment. Consumers: the direct-mode configurations of domains ai-gateway, closing,
- * grc, integrations and issues (until SV15), domains organization (until it leaves direct mode,
- * AM-147), the Services `beta` and `prod` (until SV12), `development` (until SV9) and frozen
- * `admin-beta` (until D19) environments, shell (until SH2) and its frozen `legacy-v3` (until D22),
- * and ui:domain (until UI1). Deleted with the legacy deploy path (D10), once no configuration on
- * any repository's main selects it (CT33, AM-147).
- */
-export declare function stableTargetDeployResult(input: {
-    readonly environment: string;
-    readonly adapter: {
-        readonly name: string;
-        readonly version: string;
-    };
-    readonly deployment: ReadyDeployResult;
-}): DeployResultV1;

package/dist/tooling/cli/legacy/deploy-result.js

@@ -1,37 +0,0 @@
-/**
- * The deploy result of a stable target: the legacy direct-mode path (`prepare`/`deploy` adapter
- * operations) replaces the code its stable target runs in place and serves a v3 Publication, so
- * the result names no release, no build digest, no provider script, no secrets state and no commit.
- * Those operations report a provider deployment identifier (a Worker version id, a Services
- * deployment digest), never the script they replace; that identifier stays on the stderr
- * `Deployment:` progress line and never fills `deployment.script`. Its URL is the public URL
- * `astrale domain install` fetches, which differs from the issuer only under adapter-cloudflare
- * `identityIssuer`.
- *
- * @deprecated Stable-target deploy path only. Replacement: `deployResult`, the result of an
- * immutable deployment. Consumers: the direct-mode configurations of domains ai-gateway, closing,
- * grc, integrations and issues (until SV15), domains organization (until it leaves direct mode,
- * AM-147), the Services `beta` and `prod` (until SV12), `development` (until SV9) and frozen
- * `admin-beta` (until D19) environments, shell (until SH2) and its frozen `legacy-v3` (until D22),
- * and ui:domain (until UI1). Deleted with the legacy deploy path (D10), once no configuration on
- * any repository's main selects it (CT33, AM-147).
- */
-export function stableTargetDeployResult(input) {
-    const { publication, addressing } = input.deployment.release;
-    return Object.freeze({
-        format: 'astrale.deploy-result',
-        version: 1,
-        origin: publication.origin,
-        environment: input.environment,
-        url: addressing.publicUrl,
-        release: null,
-        build: null,
-        schema: Object.freeze({ revision: publication.schema.revision }),
-        deployment: Object.freeze({
-            adapter: `${input.adapter.name}@${input.adapter.version}`,
-            script: null,
-            state: 'replaced',
-        }),
-        commit: null,
-    });
-}

package/dist/tooling/cli/legacy/stable-target-adapter.d.ts

@@ -1,21 +0,0 @@
-import type { Adapter, LegacyAdapter } from '../../../deployment/adapter/index.js';
-/**
- * An adapter that serves the legacy direct-mode path: a `LegacyAdapter`, or an adapter interface
- * v2 that keeps `prepare` and `deploy` for its direct-mode Environments.
- *
- * @deprecated Stable-target deploy path only. Replacement: `deployRelease` of adapter interface
- * v2. Consumers: `astrale-domain deploy` on the direct-mode
- * configurations of domains ai-gateway, closing, grc, integrations and issues (until SV15), domains
- * organization (until it leaves direct mode, AM-147), the Services `beta` and `prod` (until SV12),
- * `development` (until SV9) and frozen `admin-beta` (until D19) environments, shell (until SH2)
- * and its frozen `legacy-v3` (until D22), and ui:domain (until UI1). Deleted with the legacy
- * deploy path (D10), once no configuration on any repository's main selects it (CT33, AM-147).
- */
-export type StableTargetAdapter<Parameters extends object = object> = (Adapter<Parameters> | LegacyAdapter<Parameters>) & Pick<LegacyAdapter<Parameters>, 'prepare' | 'deploy'>;
-/**
- * The adapter of an Environment the stable-target path deploys, with its `prepare` and `deploy`.
- * An adapter that implements only adapter interface v2 has neither, and this path cannot deploy it.
- *
- * @deprecated Stable-target deploy path only; see `StableTargetAdapter`.
- */
-export declare function stableTargetAdapter<Parameters extends object>(adapter: Adapter<Parameters> | LegacyAdapter<Parameters>): StableTargetAdapter<Parameters>;

package/dist/tooling/cli/legacy/stable-target-adapter.js

@@ -1,14 +0,0 @@
-/**
- * The adapter of an Environment the stable-target path deploys, with its `prepare` and `deploy`.
- * An adapter that implements only adapter interface v2 has neither, and this path cannot deploy it.
- *
- * @deprecated Stable-target deploy path only; see `StableTargetAdapter`.
- */
-export function stableTargetAdapter(adapter) {
-    if (typeof adapter.prepare !== 'function' || typeof adapter.deploy !== 'function') {
-        throw new TypeError(`Adapter ${adapter.name}@${adapter.version} implements only adapter interface v2 ` +
-            '(deployRelease); this astrale-domain deploys through prepare and deploy, the legacy ' +
-            'direct-mode path, and never calls deployRelease.');
-    }
-    return adapter;
-}

package/dist/tooling/cli/legacy/stable-target-deploy.d.ts

@@ -1,40 +0,0 @@
-import type { Build, ResolvedRuntimeReference } from '../../../deployment/index.js';
-import type { LegacyDirectReason } from '../deploy-mode.js';
-import type { DeployResultV1 } from '../deploy-result.js';
-import type { LoadedEnvironment } from '../project.js';
-/**
- * What a direct-mode deploy prints on stderr before any effect (AM-59): its Environment replaces
- * one stable target in place and serves a v3 Publication only, which the deployment model
- * replaces with one immutable deployment per release.
- *
- * @deprecated Stable-target deploy path only; see `deployStableTarget`.
- */
-export declare function directModeDeprecation(environment: string, reasons: readonly LegacyDirectReason[]): string;
-/**
- * Deploy one Environment on the legacy direct-mode path (CT33): bundle exactly as
- * `astrale-domain build` does, let `prepare` place that Bundle at the Environment's stable target
- * and `deploy` replace the code it runs, then verify the v3 Publication it serves. It warns first,
- * then behaves exactly as before. The SDK never installs the deployed Domain here and makes no
- * Kernel call of its own.
- *
- * Returns the deploy result, or nothing once a failure is reported on stderr.
- *
- * @deprecated Stable-target deploy path only. Replacement: `deployImmutable`, the immutable
- * deployment of one sealed release through `deployRelease`. Consumers: the direct-mode
- * configurations of domains ai-gateway, closing, grc, integrations and issues (until SV15), domains
- * organization (until it leaves direct mode, AM-147), the Services `beta` and `prod` (until SV12),
- * `development` (until SV9) and frozen `admin-beta` (until D19) environments, shell (until SH2)
- * and its frozen `legacy-v3` (until D22), and ui:domain (until UI1). Deleted with the legacy deploy
- * path (D10), once no configuration on any repository's main selects it (CT33, AM-147).
- */
-export declare function deployStableTarget(input: {
-    readonly projectDir: string;
-    readonly environment: string;
-    readonly definition: LoadedEnvironment;
-    readonly reasons: readonly LegacyDirectReason[];
-    readonly build: Build;
-    readonly runtime: ResolvedRuntimeReference;
-    readonly identity?: string;
-    readonly signal: AbortSignal;
-    readonly report: (line: string) => void;
-}): Promise<DeployResultV1 | undefined>;

package/dist/tooling/cli/legacy/stable-target-deploy.js

@@ -1,102 +0,0 @@
-import { verifyDeployment, verifyPreflight } from '../../../deployment/index.js';
-import { bundleBuild } from '../build.js';
-import { error, warn } from '../log.js';
-import { environmentSecrets } from '../secrets.js';
-import { stableTargetDeployResult } from './deploy-result.js';
-import { stableTargetAdapter } from './stable-target-adapter.js';
-import { stableTargetBuildWarning } from './uploaded-build.js';
-/**
- * What a direct-mode deploy prints on stderr before any effect (AM-59): its Environment replaces
- * one stable target in place and serves a v3 Publication only, which the deployment model
- * replaces with one immutable deployment per release.
- *
- * @deprecated Stable-target deploy path only; see `deployStableTarget`.
- */
-export function directModeDeprecation(environment, reasons) {
-    const selected = reasons.map((reason) => {
-        if (reason.reason === 'direct-parameter')
-            return reason.parameter;
-        return reason.reason === 'no-namespace' ? 'no namespace' : 'no deployRelease';
-    });
-    return (`Environment ${environment} deploys in direct mode (${selected.join(', ')}), which is ` +
-        'deprecated and will be removed: it replaces one stable target in place and serves a v3 ' +
-        'Publication only. Its replacement deploys one immutable deployment per release, through an ' +
-        'adapter that implements deployRelease.');
-}
-/**
- * Deploy one Environment on the legacy direct-mode path (CT33): bundle exactly as
- * `astrale-domain build` does, let `prepare` place that Bundle at the Environment's stable target
- * and `deploy` replace the code it runs, then verify the v3 Publication it serves. It warns first,
- * then behaves exactly as before. The SDK never installs the deployed Domain here and makes no
- * Kernel call of its own.
- *
- * Returns the deploy result, or nothing once a failure is reported on stderr.
- *
- * @deprecated Stable-target deploy path only. Replacement: `deployImmutable`, the immutable
- * deployment of one sealed release through `deployRelease`. Consumers: the direct-mode
- * configurations of domains ai-gateway, closing, grc, integrations and issues (until SV15), domains
- * organization (until it leaves direct mode, AM-147), the Services `beta` and `prod` (until SV12),
- * `development` (until SV9) and frozen `admin-beta` (until D19) environments, shell (until SH2)
- * and its frozen `legacy-v3` (until D22), and ui:domain (until UI1). Deleted with the legacy deploy
- * path (D10), once no configuration on any repository's main selects it (CT33, AM-147).
- */
-export async function deployStableTarget(input) {
-    const { build, signal, report } = input;
-    warn(directModeDeprecation(input.environment, input.reasons));
-    const adapter = stableTargetAdapter(input.definition.deployment.adapter);
-    const parameters = input.definition.deployment.parameters;
-    // `deploy` rebuilds exactly as `build` does; preparation then only places that Bundle.
-    const bundle = await bundleBuild({
-        bundler: adapter.bundler,
-        projectDir: input.projectDir,
-        build,
-        runtime: input.runtime,
-        signal,
-    });
-    const source = await adapter.prepare(parameters, {
-        projectDir: input.projectDir,
-        environment: input.environment,
-        mode: 'release',
-        signal,
-        build,
-        runtime: input.runtime,
-        bundle,
-    });
-    const artifact = verifyPreflight({ build, runtime: input.runtime, source });
-    const secrets = environmentSecrets(adapter, parameters, input.projectDir, input.runtime.runtime);
-    const deployed = await adapter.deploy(parameters, {
-        projectDir: input.projectDir,
-        environment: input.environment,
-        ...(input.identity === undefined ? {} : { identity: input.identity }),
-        secrets,
-        artifact,
-        signal,
-    });
-    const result = verifyDeployment(artifact, deployed);
-    if (result.status === 'failed') {
-        error(`Deployment failed during ${result.phase}: ${result.error.message}`);
-        return undefined;
-    }
-    const uploaded = result.progress.provider.evidence.build;
-    if (uploaded !== undefined) {
-        // prepare/deploy places a stable target: a differing upload only warns.
-        const warning = stableTargetBuildWarning(bundle, uploaded);
-        if (warning !== undefined)
-            warn(warning);
-    }
-    report(`Domain: ${result.release.publication.origin}`);
-    report(`Environment: ${input.environment}`);
-    report(`Adapter: ${adapter.name}@${adapter.version}`);
-    report(`Deployment: ${result.progress.provider.evidence.deployment}`);
-    if (result.progress.provider.evidence.preflight !== undefined) {
-        report(`Preflight: ${result.progress.provider.evidence.preflight}; public readiness verified`);
-    }
-    report(`Public: ${result.release.addressing.publicUrl}`);
-    report(`Publication: ${result.release.publication.schema.revision} · ${result.release.publication.etag}`);
-    report('Ready: deployment verified');
-    return stableTargetDeployResult({
-        environment: input.environment,
-        adapter,
-        deployment: result,
-    });
-}

package/dist/tooling/cli/legacy/uploaded-build.d.ts

@@ -1,11 +0,0 @@
-import type { Bundle, BuildDigest } from '../../../deployment/index.js';
-/**
- * What a stable-target deploy prints when its upload does not carry the build digest
- * `astrale-domain build` gives for the same tree. A stable target never serves a build digest, so
- * the deployment proceeds with this warning where an immutable deployment refuses the upload.
- *
- * @deprecated Stable-target deploy path (`prepare`/`deploy` adapter operations) only. Replacement:
- * `verifyUploadedBuild`, which refuses the upload of an immutable deployment. Deleted with the
- * legacy deploy path, once no supported configuration selects it (CT33).
- */
-export declare function stableTargetBuildWarning(bundle: Bundle, uploaded: BuildDigest): string | undefined;

package/dist/tooling/cli/legacy/uploaded-build.js

@@ -1,22 +0,0 @@
-import { verifyUploadedBuild } from '../../../deployment/index.js';
-import { isBundle } from '../../../deployment/verify/index.js';
-/**
- * What a stable-target deploy prints when its upload does not carry the build digest
- * `astrale-domain build` gives for the same tree. A stable target never serves a build digest, so
- * the deployment proceeds with this warning where an immutable deployment refuses the upload.
- *
- * @deprecated Stable-target deploy path (`prepare`/`deploy` adapter operations) only. Replacement:
- * `verifyUploadedBuild`, which refuses the upload of an immutable deployment. Deleted with the
- * legacy deploy path, once no supported configuration selects it (CT33).
- */
-export function stableTargetBuildWarning(bundle, uploaded) {
-    if (!isBundle(bundle))
-        throw new TypeError('Uploaded build check requires an admitted Bundle.');
-    try {
-        verifyUploadedBuild(bundle, uploaded);
-        return undefined;
-    }
-    catch (refusal) {
-        return `${refusal.message} A stable target never serves a build digest, so this deployment proceeds; an immutable deployment refuses this upload.`;
-    }
-}

package/dist/tooling/linter/implementations/source/migrations.d.ts

@@ -1,2 +0,0 @@
-import type { SourceRuleVerifier } from './verifier.js';
-export declare const migrationRules: readonly SourceRuleVerifier[];