@astrale-os/sdk 0.6.0-beta.4 → 0.6.0-beta.40

package/docs/release.md

@@ -0,0 +1,155 @@
+# SDK release lifecycle
+
+Release Please owns the versions and GitHub releases for the SDK package set:
+
+- `@astrale-os/sdk`
+- `@astrale-os/adapter-cloudflare`
+- `@astrale-os/adapter-astrale`
+- `create-astrale-domain`
+
+The Node workspace plugin follows local dependency edges. Every internal release edge uses
+`workspace:*`, so a changed SDK refreshes the dependent adapter and scaffolder packages in the same
+Release Please pull request and publication rewrites each edge to that dependency's exact version.
+Never use a caret or tilde for an internal release edge: an immutable adapter must not resolve a
+newer SDK or adapter after publication. The shared publisher consumes those versions; it never
+invents a release version.
+
+Dependency installation, authoritative publication, and public qualification are npmjs-only. npm
+publication uses OIDC Trusted Publishing. After that proof completes, the workflow mirrors the exact
+SDK and adapter tarballs to private GitHub Packages copies. GitHub Packages is never a consumer,
+build, installation, or qualification source. Never add a PAT, an npm token, an auth file, or a
+repository package token; no credential may enter a tracked file, lockfile, package archive, or build
+log.
+
+## Normal beta release
+
+Prerequisite: every exact Kernel dependency in the SDK manifest is already published on npm and the
+SDK passes typecheck, test, build, pack, and fresh-consumer gates against those artifacts. Never use
+a local checkout, tarball, or override to make the release build pass.
+
+1. Merge conventional feature and fix pull requests into `main`.
+   The squash-merge title is Release Please input: use `feat` for a public capability or API change
+   and `fix` for a behavioral defect. Never classify a publication-bearing change as `refactor`,
+   `docs`, `chore`, or `test`; those types do not advance the beta
+   package cohort.
+2. The `Release` workflow creates or refreshes the single Release Please pull request.
+3. Select **Approve workflows to run** for that bot-authored pull request and wait for every required
+   check. GitHub can mark these workflows `action_required`; this is an approval gate, not a passed
+   run.
+4. Review every changed package version, exact internal dependency, changelog, and
+   `.release-please-manifest.json` entry.
+5. Merge the Release Please pull request.
+6. Release Please creates an immutable GitHub prerelease for every released component. Only then does
+   `Release` dispatch the standalone `Publish` workflow with the exact released commit SHA, preserving
+   its npm Trusted Publishing identity. Publish rejects a non-SHA or a checkout mismatch before npm I/O.
+7. The shared package publisher builds the workspace and publishes every public package to npm. A
+   `-beta.N` version advances npm `beta`; npm `latest` remains on the last stable version.
+8. The same workflow then runs `pnpm run qualify:publications` without a token. This creates isolated
+   temporary stores, installs the four exact manifest versions from npmjs, generates a Domain with
+   `linkWorkspacePackages: false`, pins that generated project to the exact SDK and adapter versions,
+   and runs its typecheck, tests, build, and package command. Any missing publication, transitive
+   dependency, wrong version, non-exact internal cohort edge, local source, override, or GitHub
+   registry reference fails the workflow.
+9. A separate least-privilege job downloads the exact SDK and adapter tarballs from npm, verifies
+   their npm SHA-512 integrity, mirrors them with `GITHUB_TOKEN`, and then requires byte-identical
+   GitHub downloads, matching release-channel tags, private visibility, and an exact link to
+   `astrale-os/sdk`. The scaffolder remains npm-only.
+
+The publisher receives package directories in strict producer order: SDK, Cloudflare adapter,
+Astrale adapter, then scaffolder. The shared action validates this dependency order and completes npm
+plus the exact release-channel dist-tag for one package before it starts the next. A linked workspace
+build is therefore never treated as publication proof.
+
+npm publication has no token fallback. All four npm packages must configure GitHub Actions Trusted
+Publishing for this repository and the `publish.yml` workflow. A missing Trusted Publisher or a wrong
+dist-tag is an explicit, fail-closed publication error; do not work around it with a PAT or npm token.
+
+The mirror job starts only after the anonymous npm qualification succeeds. It has `packages: write`
+but no npm OIDC permission, performs no build or workspace install, and cannot publish to npm. A
+mirror failure makes `Publish` red without undoing the already-complete npm release. Rerunning the
+failed job is safe: existing versions must be byte-identical, no version is overwritten or deleted,
+and tags are reconciled only when npm still points them at that exact version. Do not backfill older
+version gaps during initial rollout; the next ordinary beta release is the admission proof.
+
+Ordinary source pushes do not publish. Do not manually edit package versions, manually dispatch
+`Publish`, or push release tags during the normal flow.
+
+## Start the new Auth beta series
+
+The session-owned Auth API starts a new SDK beta series at `0.6.0-beta.0`. Its feature PR sets
+only the SDK's package-local `release-as` to that version. Release Please owns the actual manifest
+and cohort bumps. Remove that one-shot override from the generated release PR before merging it.
+This keeps the release on npm `beta`, while existing SDK `0.5.0` prerelease ranges retain the old API.
+
+## Promote the package set to stable
+
+Create one promotion pull request that removes only these beta settings from
+`.release-please-config.json`:
+
+```json
+"versioning": "prerelease",
+"prerelease": true,
+"prerelease-type": "beta"
+```
+
+Keep the Node workspace plugin, `always-update`, package map, and workflows unchanged. In the same
+promotion pull request, temporarily add these package-local overrides:
+
+```json
+"packages": {
+  ".": { "component": "sdk", "release-as": "0.6.0" },
+  "adapter-cloudflare": { "component": "adapter-cloudflare", "release-as": "0.5.0" },
+  "adapter-astrale": { "component": "adapter-astrale", "release-as": "0.5.0" },
+  "create-astrale-domain": {
+    "component": "create-astrale-domain",
+    "release-as": "0.3.0"
+  }
+}
+```
+
+After that promotion pull request lands, Release Please proposes those stable versions. Remove all
+four `release-as` properties from the generated stable release pull request, rerun its checks, and
+merge it. This publishes npm `latest` and ordinary GitHub releases. The npm `beta` tags intentionally
+remain on the last beta and do not affect bare installs.
+
+## Verification
+
+Always name npmjs explicitly when inspecting releases so the verification also proves the public
+registry boundary.
+
+```bash
+gh run list --repo astrale-os/sdk --workflow Release --limit 5
+gh run list --repo astrale-os/sdk --workflow Publish --limit 5
+npm view @astrale-os/sdk dist-tags --json --registry=https://registry.npmjs.org
+npm view @astrale-os/adapter-cloudflare dist-tags --json --registry=https://registry.npmjs.org
+npm view @astrale-os/adapter-astrale dist-tags --json --registry=https://registry.npmjs.org
+npm view create-astrale-domain dist-tags --json --registry=https://registry.npmjs.org
+gh api orgs/astrale-os/packages/npm/sdk --jq '{visibility,repository:.repository.full_name}'
+gh api orgs/astrale-os/packages/npm/adapter-cloudflare --jq '{visibility,repository:.repository.full_name}'
+gh api orgs/astrale-os/packages/npm/adapter-astrale --jq '{visibility,repository:.repository.full_name}'
+```
+
+The SDK, adapters, scaffolder, generated manifest, and every transitive runtime dependency must be
+installable from npmjs without authentication. Prove that boundary from a clean temporary directory:
+
+```ini
+# ./npmrc (in the smoke-test parent directory)
+registry=https://registry.npmjs.org/
+always-auth=false
+```
+
+Then run the complete smoke test:
+
+```bash
+NPM_CONFIG_USERCONFIG="$PWD/npmrc" npm install @astrale-os/sdk@beta
+NPM_CONFIG_USERCONFIG="$PWD/npmrc" npx -y create-astrale-domain@beta beta-smoke --yes
+cd beta-smoke
+NPM_CONFIG_USERCONFIG="../npmrc" pnpm install --no-frozen-lockfile
+pnpm typecheck
+pnpm test
+pnpm build
+```
+
+Inspect the generated lockfile and installed package manifests. They must resolve the released SDK and
+adapter package set and the SDK-owned public Kernel dependencies from npmjs, not `latest`, GitHub
+Packages, workspace links, Git URLs, or an older manually published beta.

package/docs/schema-cost.md

@@ -0,0 +1,124 @@
+# What a compiled Schema costs
+
+A compiled Domain is large, and its size is not driven by how much the Domain declares. This
+records what the weight is made of, where it is paid, and which levers belong to this repository.
+
+Every figure comes from `scripts/bench/`, on synthetic Domains built around `KernelSchema`. Node
+counts and byte weights follow from the compiled format and hold anywhere. **Timings do not.** The
+benches run under Bun, which is JavaScriptCore, and workerd is V8. On the same graph and the same
+walk:
+
+| walk | V8 (Node 26) | JavaScriptCore (Bun) |
+| --- | --- | --- |
+| seal, as shipped | 10.4 ms | 73.7 ms |
+| seal, arrays indexed and primitives skipped | 5.9 ms | 48.2 ms |
+
+Close to an order of magnitude apart. Read every millisecond below as a JavaScriptCore
+millisecond: useful for ranking two strategies against each other, worthless as a production
+figure. Any claim about cold start has to be re-measured on the real bundle in workerd.
+
+## The cost law
+
+Growing a Domain two ways, plain classes against classes carrying one format-constrained
+property (`bun scripts/bench/schema-cost.ts`):
+
+| classes | plain | one constrained property each |
+| --- | --- | --- |
+| 0 | 19 522 | 19 522 |
+| 5 | 19 587 | 22 157 |
+| 20 | 19 782 | 30 062 |
+| 50 | 20 172 | 45 872 |
+
+Three readings, each counter-intuitive.
+
+**An empty Domain is not empty.** 19 522 nodes and 554 KiB before anything is declared. That is
+the floor the `KernelSchema` dependency sets, and every Astrale Domain pays it.
+
+**Classes and properties are nearly free.** Fifty classes and a hundred plain properties add a
+thousand nodes, about twenty per class. The size of the model is not the problem.
+
+**One thing is expensive: a string carrying a format.** The same constraint on fifty classes adds
+26 350 nodes, about **527 nodes per property**, and fifty separate automata for one expression.
+`resolve` and `compile` both roughly double over the same range.
+
+## Where the weight is
+
+On the Kernel floor, by region (`bun scripts/bench/compiled-graph.ts`):
+
+| region | nodes | share |
+| --- | --- | --- |
+| `values[].patterns` | 15 856 | 81.2 % |
+| `values[].nodes` | 3 031 | 15.5 % |
+| `definitions.*` | 563 | 2.9 % |
+| everything else | 6 | 0.0 % |
+
+The weight is compiled regular-expression automata. A bounded quantifier is unrolled into one
+state per repetition, so `{64}` becomes 162 states and `{0,253}` becomes 528. Each state carries
+two arrays, each transition an array of ranges, and each range is itself a two-element array.
+That is also why a compiled graph holds more arrays than objects.
+
+Nothing is shared between copies. Sixteen automata stand for seven distinct expressions:
+`sha256:[0-9a-f]{64}`, nineteen characters, weighs 576 nodes and exists five times over. Interning
+by source would remove 7 973 of the 15 794 pattern nodes at identical semantics, since two
+automata for one expression are structurally identical and immutable.
+
+## Where it is paid
+
+1. **At build time**, in `compile`. Once, on a contributor's machine.
+2. **In the Worker bundle.** The material is emitted as an inline literal, so the automata ship as
+   bytes: 44 % of a bare compiled Schema, 65 % once a Domain constrains its strings.
+3. **At cold start, the material path.** The emitted literal is allocated, sealed, and realized on
+   the first request of every isolate.
+4. **At cold start, the authoring path**, when application code builds the Schema from source at
+   runtime. `resolve` is memoised per Schema value, so it is a once-per-isolate cost like the
+   material path, not a per-request one.
+5. **In any client** that builds the Schema, a browser included.
+
+## Sealing the material
+
+`schema.compiled` is almost the whole material graph, so sealing cost is a question of how many
+times that graph is walked (`bun scripts/bench/freeze-strategies.ts`):
+
+| strategy | cost |
+| --- | --- |
+| before: two SDK passes and one DSL pass | 131.6 ms |
+| current: one SDK pass and one DSL pass | 74.7 ms |
+| candidate: the DSL owns `schema.compiled` | 62.0 ms |
+
+Two results matter more than the ranking.
+
+**Most of the remaining cost is not the Schema.** Sealing `schema.compiled` alone is 17.2 ms.
+Sealing `schema.bundle.bytes` alone is 43.9 ms, because it is one array of tens of thousands of
+numbers and the walker calls `Object.values` on it. A walker that indexes arrays in place and
+never recurses into a primitive takes one pass from 61.2 ms to 43.5 ms. `Object.freeze` on an
+array of numbers already seals its elements, so that recursion changes nothing: it is cost
+without a guarantee behind it.
+
+**The emitter throws away sharing the compiler produced.** The compiled graph holds 19 522 nodes
+as built and 32 882 after a JSON round trip, because JSON has no references. 13 360 nodes, two
+thirds again, exist only because the material is emitted as a flat literal. Hoisting identical
+subtrees into shared bindings at emission would restore sharing rather than invent it, and would
+cut bundle bytes at the same time.
+
+Sealing is a guarantee, not decoration: `realize()` retains live references into the graph, and
+the material is one singleton shared by every concurrent request in the isolate. None of the
+changes above give that up. They stop walking what is already sealed, or what sealing a container
+already covers.
+
+## Which levers are here
+
+Owned by this repository: how many times the material is walked, how the walker treats a flat
+array, whether the emitter shares identical subtrees, and whether the SDK hands out the Domain
+that a restored Build already carries instead of leaving an application to rebuild it.
+
+Owned by `kernel-dsl`: the cost of `resolve`, the pattern table in the compiled format, and the
+unrolling of bounded quantifiers. The last of these pays at all five sites at once and is where
+most of the weight is. None of it can be reached from here.
+
+## Verifying a change
+
+`scripts/bench/freeze-equivalence.ts` compares the frozen state of every reachable node between
+two sealing implementations and exits non-zero on a divergence or a vacuous walk. Spine assertions
+cannot tell a deep seal from a shallow one: `material()` returns a shallow-frozen envelope, so a
+walker treating a frozen container as proof of a sealed interior would seal nothing and still
+satisfy them. `src/deployment/build/__tests__/realization.test.ts` carries the standing audit.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@astrale-os/sdk",
-  "version": "0.6.0-beta.4",
+  "version": "0.6.0-beta.40",
   "description": "Schema-first SDK for defining, composing, and deploying Astrale domains",
   "keywords": [
     "astrale",
@@ -20,7 +20,8 @@
   },
   "files": [
     "dist",
-    "!dist/**/*.map"
+    "!dist/**/*.map",
+    "docs"
   ],
   "type": "module",
   "sideEffects": false,
@@ -63,9 +64,13 @@
       "types": "./dist/platform/result/index.d.ts",
       "import": "./dist/platform/result/index.js"
     },
-    "./publication": {
-      "types": "./dist/platform/publication/index.d.ts",
-      "import": "./dist/platform/publication/index.js"
+    "./release": {
+      "types": "./dist/platform/release/index.d.ts",
+      "import": "./dist/platform/release/index.js"
+    },
+    "./versioning": {
+      "types": "./dist/platform/versioning/index.d.ts",
+      "import": "./dist/platform/versioning/index.js"
     },
     "./invocation": {
       "types": "./dist/platform/invocation/index.d.ts",
@@ -127,7 +132,7 @@
       "types": "./dist/application/runtime/authoring.d.ts",
       "import": "./dist/application/runtime/authoring.js"
     },
-    "./application": {
+    "./domain": {
       "types": "./dist/application/index.d.ts",
       "import": "./dist/application/index.js"
     },
@@ -151,6 +156,22 @@
       "types": "./dist/deployment/build/material.d.ts",
       "import": "./dist/deployment/build/material.js"
     },
+    "./deployment/build/manifest": {
+      "types": "./dist/deployment/build/manifest.d.ts",
+      "import": "./dist/deployment/build/manifest.js"
+    },
+    "./deployment/address": {
+      "types": "./dist/deployment/address/index.d.ts",
+      "import": "./dist/deployment/address/index.js"
+    },
+    "./deployment/address/vectors": {
+      "types": "./dist/deployment/address/vectors.d.ts",
+      "import": "./dist/deployment/address/vectors.js"
+    },
+    "./deployment/worker": {
+      "types": "./dist/deployment/worker/index.d.ts",
+      "import": "./dist/deployment/worker/index.js"
+    },
     "./deployment/release": {
       "types": "./dist/deployment/release/index.d.ts",
       "import": "./dist/deployment/release/index.js"
@@ -237,16 +258,17 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
-    "@astrale-os/kernel-client": "0.6.0-beta.78",
-    "@astrale-os/kernel-core": "0.9.0-beta.58",
-    "@astrale-os/kernel-dsl": "0.2.0-beta.42",
-    "@astrale-os/kernel-protocol": "0.5.0-beta.64",
-    "@astrale-os/kernel-server": "0.5.0-beta.66",
+    "@astrale-os/kernel-client": "1.0.0-beta.19",
+    "@astrale-os/kernel-core": "1.0.0-beta.16",
+    "@astrale-os/kernel-dsl": "1.0.0-beta.9",
+    "@astrale-os/kernel-protocol": "1.0.0-beta.16",
+    "@astrale-os/kernel-server": "1.0.0-beta.16",
     "@lucide/icons": "1.34.0",
     "@typescript/native-preview": "7.0.0-dev.20260707.2",
     "cross-spawn": "7.0.6",
     "hono": "^4.13.2",
     "jose": "^6.2.9",
+    "semver": "7.8.5",
     "typescript": "~6.0.3"
   },
   "devDependencies": {
@@ -258,11 +280,15 @@
     "@commitlint/config-conventional": "~21.2.2",
     "@hono/node-server": "^2.1.1",
     "@hono/node-server-v1": "npm:@hono/node-server@1.19.0",
+    "@restatedev/restate-sdk": "1.17.0",
+    "@restatedev/restate-sdk-cloudflare-workers": "1.17.0",
     "@types/cross-spawn": "6.0.6",
-    "@types/node": "^22.20.1",
+    "@types/node": "^24.19.1",
+    "@types/semver": "7.8.0",
     "husky": "~9.1.7",
     "lint-staged": "~17.3.0",
     "mermaid": "^11.16.1",
+    "miniflare": "5.20260811.1-alpha",
     "oxfmt": "0.63.0",
     "oxlint": "1.78.0",
     "preact": "^10.29.8",
@@ -292,10 +318,10 @@
   "lint-staged": {
     "*.{js,cjs,mjs,ts,tsx}": [
       "oxlint --disable-nested-config --fix",
-      "oxfmt --write"
+      "oxfmt --no-error-on-unmatched-pattern --write"
     ],
     "*.{json,yml,yaml}": [
-      "oxfmt --write"
+      "oxfmt --no-error-on-unmatched-pattern --write"
     ]
   },
   "devEngines": {
@@ -306,7 +332,7 @@
     }
   },
   "engines": {
-    "node": ">=22"
+    "node": ">=24"
   },
   "scripts": {
     "build": "node scripts/clean-dist.mjs && tsgo && node scripts/verify-no-source-maps.mjs dist && pnpm run verify:package",
@@ -318,9 +344,12 @@
     "typecheck:tests": "tsgo --noEmit -p tsconfig.test.json",
     "typecheck:e2e": "tsgo --noEmit -p __e2e__/flagship/fixtures/tsconfig.v1.json && tsgo --noEmit -p __e2e__/flagship/fixtures/tsconfig.json",
     "typecheck:knowledge": "tsgo --noEmit -p knowledge/cli/tsconfig.json",
-    "test": "pnpm run check:knowledge && pnpm run check:linter-policy && pnpm run check:issues && vitest run --config __tests__/vitest.config.ts && pnpm run test:node-server-v1 && node --test scripts/*.test.mjs",
+    "test": "pnpm run test:checks && pnpm run test:file && pnpm run test:scripts",
+    "test:checks": "pnpm run check:knowledge && pnpm run check:linter-policy && pnpm run check:issues && pnpm run test:node-server-v1",
     "test:file": "vitest run --config __tests__/vitest.config.ts",
+    "test:scripts": "node --test scripts/*.test.mjs actions/domain/*.test.mjs",
     "test:node-server-v1": "vitest run --config __tests__/vitest.node-server-v1.config.ts",
+    "test:durable": "vitest run --config __tests__/durable/vitest.config.ts",
     "verify:package": "node ./verify-package.mjs",
     "test:watch": "vitest --config __tests__/vitest.config.ts",
     "lint": "oxlint --disable-nested-config .",

package/dist/application/application.d.ts

@@ -1,28 +0,0 @@
-import type { schema } from '../platform/schema/index.js';
-import type { Requirements } from './requirements/index.js';
-import type { Routes } from './routes/index.js';
-import type { Runtime, SchemaOfRuntime as RuntimeSchemaOf } from './runtime/index.js';
-import type { Frontend } from './view/index.js';
-declare const APPLICATION_IDENTITY: unique symbol;
-declare const APPLICATION_SCHEMA: unique symbol;
-/** Schema-independent type witness shared by every admitted Application declaration. */
-export interface ApplicationIdentity {
-    readonly [APPLICATION_IDENTITY]: true;
-}
-/** Inert source/build composition for one exact Schema and authored Runtime. */
-export interface Application<Schema extends schema.DomainSchema = schema.DomainSchema, RuntimeValue extends Runtime<Schema> = Runtime<Schema>, FrontendValue extends Frontend<Schema> | undefined = undefined, RoutesValue extends Routes | undefined = undefined, RequirementsValue extends Requirements | undefined = undefined> extends ApplicationIdentity {
-    readonly schema: Schema;
-    readonly runtime: RuntimeValue;
-    readonly frontend?: FrontendValue;
-    readonly routes?: RoutesValue;
-    readonly requirements?: RequirementsValue;
-    readonly [APPLICATION_SCHEMA]: (schema: Schema) => Schema;
-}
-export type SchemaOfApplication<Value> = Value extends {
-    readonly schema: infer Schema;
-} ? Extract<Schema, schema.DomainSchema> : never;
-export type RuntimeOfApplication<Value> = Value extends {
-    readonly runtime: infer RuntimeValue;
-} ? Extract<RuntimeValue, Runtime> : never;
-export type SchemaOfRuntime<Value> = RuntimeSchemaOf<Value>;
-export {};

package/dist/application/query/execution/projection.d.ts

@@ -1,3 +0,0 @@
-import type { QueryAST, QueryResultFor } from '@astrale-os/kernel-core/graph/query';
-import type { ProjectedQuery, QueryProjectionContext } from '../single/index.js';
-export declare function projectQuery<Input, Output, Ast extends QueryAST>(definition: ProjectedQuery<Input, Output, Ast>, result: QueryResultFor<Ast>, input: Input, context: QueryProjectionContext<Ast>): Output;

package/dist/application/query/execution/projection.js

@@ -1,3 +0,0 @@
-export function projectQuery(definition, result, input, context) {
-    return definition.project(result, input, context);
-}

package/dist/deployment/adapter/deploy/context.d.ts

@@ -1,15 +0,0 @@
-import type { InstallationTarget } from '../adapter.js';
-import type { PreparedArtifact } from '../prepare/index.js';
-export interface DeployContext {
-    readonly projectDir: string;
-    readonly environment: string;
-    readonly installation?: InstallationTarget;
-    /** Optional command-scoped identity override (`--as`). */
-    readonly identity?: string;
-    /** Optional command-scoped credential; trusted adapters must neither retain nor disclose it. */
-    readonly credential?: string;
-    readonly secrets: Readonly<Record<string, string>>;
-    readonly artifact: PreparedArtifact;
-    /** Parent-owned lifecycle cancellation shared by every provider process/effect. */
-    readonly signal: AbortSignal;
-}

package/dist/deployment/adapter/deploy/index.d.ts

@@ -1,2 +0,0 @@
-export type { DeployContext } from './context.js';
-export type { AppliedProviderDeployment, DeploymentPhase, DeploymentProgress, DeployResult, FailedDeployResult, MutationKnowledge, ProviderDeploymentEvidence, ReadyDeployResult, } from './result.js';

package/dist/deployment/adapter/deploy/result.d.ts

@@ -1,50 +0,0 @@
-import type { Digest } from '@astrale-os/kernel-protocol/artifact';
-import type { Addressing, Release } from '../../release/index.js';
-export type DeploymentPhase = 'prerequisite' | 'provider' | 'addressing' | 'release' | 'configuration' | 'installation' | 'readiness';
-export type MutationKnowledge<Evidence = unknown> = {
-    readonly kind: 'none';
-} | {
-    readonly kind: 'partial';
-    readonly evidence?: Evidence;
-} | {
-    readonly kind: 'applied';
-    readonly evidence: Evidence;
-} | {
-    readonly kind: 'unknown';
-};
-export interface ProviderDeploymentEvidence {
-    readonly provider: string;
-    readonly deployment: string;
-    readonly artifact: Digest;
-    readonly issuer?: Addressing['issuer'];
-    /** Optional provider-side check before promotion; distinct from public readiness. */
-    readonly preflight?: 'passed' | 'unavailable';
-}
-export type AppliedProviderDeployment = {
-    readonly kind: 'applied';
-    readonly evidence: ProviderDeploymentEvidence & {
-        readonly issuer: Addressing['issuer'];
-    };
-};
-export interface DeploymentProgress {
-    readonly prerequisite: MutationKnowledge;
-    readonly provider: MutationKnowledge<ProviderDeploymentEvidence>;
-    readonly configuration: MutationKnowledge;
-    readonly installation: MutationKnowledge;
-}
-export interface ReadyDeployResult {
-    readonly status: 'ready';
-    readonly phase: 'complete';
-    readonly progress: DeploymentProgress & {
-        readonly provider: AppliedProviderDeployment;
-    };
-    readonly release: Release;
-}
-export interface FailedDeployResult {
-    readonly status: 'failed';
-    readonly phase: DeploymentPhase;
-    readonly progress: DeploymentProgress;
-    readonly error: Error;
-    readonly release?: Release;
-}
-export type DeployResult = ReadyDeployResult | FailedDeployResult;

package/dist/deployment/adapter/prepare/artifact.d.ts

@@ -1,33 +0,0 @@
-import type { Digest } from '@astrale-os/kernel-protocol/artifact';
-import type { Build } from '../../build/index.js';
-import type { Addressing } from '../../release/index.js';
-export interface ArtifactFile {
-    readonly path: string;
-    readonly content: Uint8Array;
-}
-export interface PreparedArtifactFile {
-    readonly path: string;
-    bytes(): Uint8Array;
-}
-export type AddressingPlan = {
-    readonly kind: 'configured';
-    readonly addressing: Addressing;
-} | {
-    readonly kind: 'provider-assigned';
-    readonly claim: string;
-};
-/** Untrusted provider-specific preparation output admitted by verify/preflight. */
-export interface ArtifactSource {
-    readonly entrypoint: string;
-    readonly files: readonly ArtifactFile[];
-    readonly addressing: AddressingPlan;
-}
-/** Exact detached input supplied to every provider deployment effect. */
-export interface PreparedArtifact<BuildValue extends Build = Build> {
-    readonly kind: 'prepared-artifact';
-    readonly build: BuildValue;
-    readonly digest: Digest;
-    readonly entrypoint: string;
-    readonly files: readonly PreparedArtifactFile[];
-    readonly addressing: AddressingPlan;
-}

package/dist/deployment/adapter/prepare/context.d.ts

@@ -1,23 +0,0 @@
-import type { Build } from '../../build/index.js';
-import type { ResolvedRuntimeReference } from '../../runtime/index.js';
-import type { InstallationTarget } from '../adapter.js';
-export interface PrepareContext<BuildValue extends Build = Build> {
-    readonly projectDir: string;
-    readonly environment: string;
-    readonly installation?: InstallationTarget;
-    /**
-     * Preparation purpose. Remote development and one-shot deployment both
-     * prepare complete release artifacts. Omitted by older custom callers means
-     * release for compatibility during the beta migration.
-     */
-    readonly mode?: 'release';
-    /**
-     * Optional preparation-input observer used by tooling that must rebuild when
-     * an adapter reads authored paths outside the Application/Runtime module graph.
-     */
-    readonly recordSource?: (path: string) => void;
-    /** Parent-owned lifecycle cancellation shared by every preparation process/effect. */
-    readonly signal: AbortSignal;
-    readonly build: BuildValue;
-    readonly runtime: ResolvedRuntimeReference;
-}

package/dist/deployment/adapter/prepare/index.d.ts

@@ -1,2 +0,0 @@
-export type { PrepareContext } from './context.js';
-export type { AddressingPlan, ArtifactFile, ArtifactSource, PreparedArtifact, PreparedArtifactFile, } from './artifact.js';

package/dist/deployment/deploy.d.ts

@@ -1,20 +0,0 @@
-import type { ApplicationIdentity } from '../application/index.js';
-import type { Adapter } from './adapter/index.js';
-import type { RuntimeReference } from './runtime/index.js';
-type CanonicalAdapter<Value> = Value extends Adapter<infer _Parameters> ? Value : never;
-/** @deprecated Declare Application and Environments directly in defineProject(). */
-export interface DeploymentInput<ApplicationValue extends ApplicationIdentity, AdapterValue extends object> {
-    readonly application: ApplicationValue;
-    readonly entrypoint: RuntimeReference;
-    readonly adapter: CanonicalAdapter<AdapterValue>;
-}
-/** @deprecated Legacy aggregate retained only so tooling can issue an exact migration diagnostic. */
-export interface LegacyDeployment<ApplicationValue extends ApplicationIdentity = ApplicationIdentity, AdapterValue extends object = object> {
-    readonly application: ApplicationValue;
-    readonly entrypoint: RuntimeReference;
-    readonly adapter: AdapterValue;
-}
-/** @deprecated Declare Application and Environments directly in defineProject(). */
-export declare function deploy<const ApplicationValue extends ApplicationIdentity, const AdapterValue extends object>(input: DeploymentInput<ApplicationValue, AdapterValue>): LegacyDeployment<ApplicationValue, AdapterValue>;
-export declare function isLegacyDeployment(input: unknown): input is LegacyDeployment;
-export {};

package/dist/deployment/deploy.js

@@ -1,31 +0,0 @@
-import { isApplication } from '../application/index.js';
-import { isAdapter } from './adapter/index.js';
-import { isRuntimeReference } from './runtime/index.js';
-const legacyDeployments = new WeakSet();
-/** @deprecated Declare Application and Environments directly in defineProject(). */
-export function deploy(input) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    const keys = Reflect.ownKeys(input);
-    if (keys.length !== 3 ||
-        keys.some((key) => key !== 'application' && key !== 'entrypoint' && key !== 'adapter')) {
-        invalid();
-    }
-    if (!isApplication(input.application)) {
-        throw new TypeError('Deployment Application is not admitted.');
-    }
-    if (!isRuntimeReference(input.entrypoint)) {
-        throw new TypeError('Deployment entrypoint must be created by runtime(path).');
-    }
-    if (!isAdapter(input.adapter))
-        throw new TypeError('Deployment Adapter is not admitted.');
-    const deployment = Object.freeze({ ...input });
-    legacyDeployments.add(deployment);
-    return deployment;
-}
-export function isLegacyDeployment(input) {
-    return input !== null && typeof input === 'object' && legacyDeployments.has(input);
-}
-function invalid() {
-    throw new TypeError('Deployment must contain exactly application, entrypoint, and adapter.');
-}

package/dist/deployment/release/publication/index.d.ts

@@ -1,6 +0,0 @@
-export { callables } from './callables.js';
-export { manifest } from './manifest.js';
-export { requirements } from './requirements.js';
-export { routes } from './routes.js';
-export { seal, type SealedPublication } from './seal.js';
-export { views } from './views.js';