@astrale-os/sdk 0.6.0-beta.25 → 0.6.0-beta.27

package/dist/tooling/cli/publish/index.d.ts

@@ -16,13 +16,18 @@ export interface PublishCommandInput {
     readonly json: boolean;
     readonly signal: AbortSignal;
 }
-/** What `publish` uses of the Domain registry: the index, a baseline's bundle, the Publication. */
-type PublishRegistry = Pick<DomainRegistry, 'index' | 'bundle' | 'publish'>;
+/**
+ * What `publish` uses of the Domain registry: the index, the claim of an origin no one has, a
+ * baseline's bundle, the Publication.
+ */
+type PublishRegistry = Pick<DomainRegistry, 'index' | 'claim' | 'bundle' | 'publish'>;
 export interface PublishCommandDependencies {
     readonly open: (input: {
         readonly projectDir: string;
         readonly identity?: string;
         readonly signal: AbortSignal;
+        /** The first Astrale CLI release that serves every registry command publish may run. */
+        readonly minimum?: string;
     }) => Promise<PublishRegistry>;
     /** Step 5: the deployment serves exactly this sealed release at its URL. */
     readonly verify: (release: Release, signal: AbortSignal) => Promise<void>;
@@ -55,7 +60,9 @@ export declare const VERIFY_TIMEOUT_MS = 60000;
  *    configure, placement, label, URL and the sealed release digest.
  * 1. Read the version from `package.json`.
  * 2. Read the registry. The version exists: the same release succeeds without effect, another is
- *    refused. A Domain absent or unreadable, or a registry that does not answer, is refused.
+ *    refused. An origin the registry does not hold for this identity is claimed: Admin gives an
+ *    origin no one has to its first claimer, who administers its Domain, and refuses one another
+ *    account holds. A registry that does not answer is refused.
  * 3. Judge the version against the highest stable version below it (AM-23); refuse a version
  *    that is too low.
  * 4. Deploy the release, or reuse its deployment.
@@ -68,6 +75,7 @@ export declare const VERIFY_TIMEOUT_MS = 60000;
  *    keeps the published deployment. No first-party adapter declares it: Admin's Services and a
  *    Cloudflare dispatch namespace keep every deployment until its owner retires it.
  *
- * Steps 0 to 3 make no deploy call. Never installs.
+ * Steps 0 to 3 make no deploy call; step 2's claim is the only registry change before step 6.
+ * Never installs.
  */
 export declare function runPublish(input: PublishCommandInput, dependencies?: PublishCommandDependencies): Promise<number>;

package/dist/tooling/cli/publish/index.js

@@ -7,7 +7,7 @@ import { renderDiff } from '../diff/render.js';
 import { diffReport, publishedSchema } from '../diff/report.js';
 import { deployPlannedRelease, planImmutableDeployment, runtimeCommit, } from '../immutable-deployment.js';
 import { DIM, RED, RESET, YELLOW } from '../log.js';
-import { RegistryCliError, openDomainRegistry } from '../registry/index.js';
+import { MINIMUM_CLAIM_CLI_VERSION, RegistryCliError, openDomainRegistry, } from '../registry/index.js';
 import { publishReport } from './report.js';
 /**
  * Step 5 reads the deployment's `release.json` (at most 1 MiB) and its Bundle (at most 16 MiB)
@@ -36,7 +36,9 @@ const DEFAULT_DEPENDENCIES = Object.freeze({
  *    configure, placement, label, URL and the sealed release digest.
  * 1. Read the version from `package.json`.
  * 2. Read the registry. The version exists: the same release succeeds without effect, another is
- *    refused. A Domain absent or unreadable, or a registry that does not answer, is refused.
+ *    refused. An origin the registry does not hold for this identity is claimed: Admin gives an
+ *    origin no one has to its first claimer, who administers its Domain, and refuses one another
+ *    account holds. A registry that does not answer is refused.
  * 3. Judge the version against the highest stable version below it (AM-23); refuse a version
  *    that is too low.
  * 4. Deploy the release, or reuse its deployment.
@@ -49,7 +51,8 @@ const DEFAULT_DEPENDENCIES = Object.freeze({
  *    keeps the published deployment. No first-party adapter declares it: Admin's Services and a
  *    Cloudflare dispatch namespace keep every deployment until its owner retires it.
  *
- * Steps 0 to 3 make no deploy call. Never installs.
+ * Steps 0 to 3 make no deploy call; step 2's claim is the only registry change before step 6.
+ * Never installs.
  */
 export async function runPublish(input, dependencies = DEFAULT_DEPENDENCIES) {
     const { build, environment, signal } = input;
@@ -104,7 +107,12 @@ export async function runPublish(input, dependencies = DEFAULT_DEPENDENCIES) {
     let registry;
     let index;
     try {
-        registry = await dependencies.open({ projectDir: input.projectDir, ...identity, signal });
+        registry = await dependencies.open({
+            projectDir: input.projectDir,
+            ...identity,
+            signal,
+            minimum: MINIMUM_CLAIM_CLI_VERSION,
+        });
         index = await registry.index(origin);
     }
     catch (cause) {
@@ -113,7 +121,18 @@ export async function runPublish(input, dependencies = DEFAULT_DEPENDENCIES) {
         return refuse(`Domain registry: ${cause.code}: ${cause.message}`, 'Nothing was deployed or published.');
     }
     if (index === undefined) {
-        return refuse(`${origin} is not in the Domain registry, or you may not read it: nothing was deployed.`, 'An administrator of the Admin instance registers the Domain and names who may publish it.');
+        // First claim: the registry holds no Domain of this origin for this identity. Admin gives an
+        // origin no one has to its first claimer, before anything is deployed.
+        try {
+            await registry.claim(origin);
+        }
+        catch (cause) {
+            if (!(cause instanceof RegistryCliError))
+                throw cause;
+            return refuse(...notClaimed(origin, cause));
+        }
+        progress(`Claimed ${origin} in the Domain registry: this identity administers it.`);
+        index = { origin, publications: [] };
     }
     const existing = index.publications.find(({ version }) => version === declared);
     if (existing !== undefined) {
@@ -261,6 +280,25 @@ function notPublished(name, origin, url, cause) {
             `refusal until ${remedy(cause, origin)}.`,
     ];
 }
+/** Why the origin could not be claimed for this identity; nothing was deployed in any case. */
+function notClaimed(origin, cause) {
+    switch (cause.code) {
+        case 'REGISTRY_ORIGIN_CLAIMED':
+            return [
+                `${origin} is already claimed in the Domain registry, and you may not read it: nothing was deployed.`,
+                'An administrator of the Domain grants you domain_admin to publish it.',
+            ];
+        case 'REGISTRY_ORIGIN_RESERVED':
+            return [
+                `${origin} is under astrale.ai, which Astrale operators register: nothing was deployed.`,
+            ];
+        default:
+            return [
+                `${origin} is not in the Domain registry and could not be claimed: ${cause.code}: ${cause.message}`,
+                'Nothing was deployed or published. Rerun publish: a claim is safe to repeat.',
+            ];
+    }
+}
 /** CT29: a change may have applied, or the answer could not be read. */
 function unconfirmed(error) {
     const reason = error.details?.reason;

package/dist/tooling/cli/registry/client.d.ts

@@ -70,6 +70,13 @@ export interface RegistryYank {
 export interface DomainRegistry {
     /** The Domain's index, or `undefined` when it is absent or not readable by the caller. */
     index(origin: string): Promise<RegistryIndex | undefined>;
+    /**
+     * Claim one origin: Admin gives an origin no one has to its first claimer, who administers its
+     * Domain. Idempotent for a caller who administers the Domain, so a rerun is safe. An origin
+     * another account holds is refused (`REGISTRY_ORIGIN_CLAIMED`), as is one under `astrale.ai`
+     * for anyone but an Astrale operator (`REGISTRY_ORIGIN_RESERVED`).
+     */
+    claim(origin: string): Promise<void>;
     /** The bundle bytes of one Publication of the index, digest and Schema identity verified. */
     bundle(origin: string, publication: RegistryPublication): Promise<Uint8Array>;
     /**

package/dist/tooling/cli/registry/client.js

@@ -80,6 +80,14 @@ export async function openDomainRegistry(input, dependencies = {
                 throw cause;
             }
         },
+        async claim(origin) {
+            const document = await command({ executable, ...machine(['__domain-registry', 'claim', origin]) }, { stdout: DOCUMENT_LIMIT, timeoutMs: CHANGE_TIMEOUT_MS, change: true });
+            if (document.format !== 'astrale.registry-claim-result' ||
+                document.version !== 1 ||
+                document.origin !== origin) {
+                throw protocolError(`Astrale CLI answered no claim result of ${origin}.`);
+            }
+        },
         async bundle(origin, publication) {
             const directory = await mkdtemp(join(tmpdir(), 'astrale-registry-'));
             try {

package/dist/tooling/cli/registry/executable.d.ts

@@ -12,6 +12,12 @@ export declare const MINIMUM_REGISTRY_CLI_VERSION = "1.0.0-beta.128";
  * 1.0.0-beta.128 and older were released without it.
  */
 export declare const MINIMUM_INSTALLATIONS_CLI_VERSION = "1.0.0-beta.129";
+/**
+ * The first Astrale CLI release that claims an origin (`astrale __domain-registry claim`), which
+ * `astrale-domain publish` does before the first version of a Domain no one has registered.
+ * 1.0.0-beta.136 and older were released without it.
+ */
+export declare const MINIMUM_CLAIM_CLI_VERSION = "1.0.0-beta.137";
 export interface RegistryExecutableDependencies {
     readonly candidates: () => Promise<readonly string[]>;
     readonly run: (input: RegistryProcessInput) => Promise<RegistryProcessResult>;

package/dist/tooling/cli/registry/executable.js

@@ -17,6 +17,12 @@ export const MINIMUM_REGISTRY_CLI_VERSION = '1.0.0-beta.128';
  * 1.0.0-beta.128 and older were released without it.
  */
 export const MINIMUM_INSTALLATIONS_CLI_VERSION = '1.0.0-beta.129';
+/**
+ * The first Astrale CLI release that claims an origin (`astrale __domain-registry claim`), which
+ * `astrale-domain publish` does before the first version of a Domain no one has registered.
+ * 1.0.0-beta.136 and older were released without it.
+ */
+export const MINIMUM_CLAIM_CLI_VERSION = '1.0.0-beta.137';
 /**
  * Resolve one Astrale CLI for a whole command, the official installation before PATH, and admit
  * it only when it serves the registry plumbing, so an older CLI is refused by name instead of

package/dist/tooling/cli/registry/index.d.ts

@@ -3,7 +3,7 @@
  * registry plumbing (CT29), with the caller's own credential and the CLI's configured Admin target.
  */
 export { RegistryCliError, openDomainRegistry, type DomainRegistry, type DomainRegistryDependencies, type RegistryBundle, type RegistryDigest, type RegistryIndex, type RegistryPublication, type RegistryPublishRequest, type RegistryPublishResult, type RegistryYank, } from './client.js';
-export { MINIMUM_INSTALLATIONS_CLI_VERSION, MINIMUM_REGISTRY_CLI_VERSION, resolveRegistryExecutable, } from './executable.js';
+export { MINIMUM_CLAIM_CLI_VERSION, MINIMUM_INSTALLATIONS_CLI_VERSION, MINIMUM_REGISTRY_CLI_VERSION, resolveRegistryExecutable, } from './executable.js';
 export { isAdminFailure } from './installations.js';
 export type { InstallationUnknownReason, InstanceInstallation, InstanceListing, } from './installations.js';
 export { RegistryProcessTimeoutError } from './process.js';

package/dist/tooling/cli/registry/index.js

@@ -3,6 +3,6 @@
  * registry plumbing (CT29), with the caller's own credential and the CLI's configured Admin target.
  */
 export { RegistryCliError, openDomainRegistry, } from './client.js';
-export { MINIMUM_INSTALLATIONS_CLI_VERSION, MINIMUM_REGISTRY_CLI_VERSION, resolveRegistryExecutable, } from './executable.js';
+export { MINIMUM_CLAIM_CLI_VERSION, MINIMUM_INSTALLATIONS_CLI_VERSION, MINIMUM_REGISTRY_CLI_VERSION, resolveRegistryExecutable, } from './executable.js';
 export { isAdminFailure } from './installations.js';
 export { RegistryProcessTimeoutError } from './process.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/sdk",
-  "version": "0.6.0-beta.25",
+  "version": "0.6.0-beta.27",
   "description": "Schema-first SDK for defining, composing, and deploying Astrale domains",
   "keywords": [
     "astrale",