@astrale-os/sdk 0.6.0-beta.4 → 0.6.0-beta.41

package/dist/deployment/release/publication/index.js

@@ -1,6 +0,0 @@
-export { callables } from './callables.js';
-export { manifest } from './manifest.js';
-export { requirements } from './requirements.js';
-export { routes } from './routes.js';
-export { seal } from './seal.js';
-export { views } from './views.js';

package/dist/deployment/release/publication/manifest.d.ts

@@ -1,3 +0,0 @@
-import type * as publication from '@astrale-os/kernel-protocol/publication';
-import type { Build } from '../../build/index.js';
-export declare function manifest(build: Build): publication.Manifest | undefined;

package/dist/deployment/release/publication/manifest.js

@@ -1,5 +0,0 @@
-export function manifest(build) {
-    return build.frontend === undefined
-        ? undefined
-        : Object.freeze({ entrypoint: build.frontend.entrypoint });
-}

package/dist/deployment/release/publication/requirements.d.ts

@@ -1,3 +0,0 @@
-import type * as publication from '@astrale-os/kernel-protocol/publication';
-import type { Build } from '../../build/index.js';
-export declare function requirements(build: Build): publication.PublicationRequirements;

package/dist/deployment/release/publication/requirements.js

@@ -1,3 +0,0 @@
-export function requirements(build) {
-    return build.requirements;
-}

package/dist/deployment/release/publication/seal.d.ts

@@ -1,10 +0,0 @@
-import * as publication from '@astrale-os/kernel-protocol/publication';
-import * as protocolRoutes from '@astrale-os/kernel-protocol/routes';
-import type { Build } from '../../build/index.js';
-import type { Addressing } from '../addressing.js';
-export declare const DELIVERY_PATH: '/install';
-export interface SealedPublication {
-    readonly publication: publication.Publication;
-    readonly routes: protocolRoutes.Table;
-}
-export declare function seal(build: Build, addressing: Addressing): SealedPublication;

package/dist/deployment/release/publication/seal.js

@@ -1,39 +0,0 @@
-import * as publication from '@astrale-os/kernel-protocol/publication';
-import * as protocolRoutes from '@astrale-os/kernel-protocol/routes';
-import { evidenceOf } from '../../build/admission.js';
-import { callables } from './callables.js';
-import { manifest } from './manifest.js';
-import { requirements } from './requirements.js';
-import { routes } from './routes.js';
-import { views } from './views.js';
-export const DELIVERY_PATH = '/install';
-export function seal(build, addressing) {
-    const root = build.schema.compiled.root;
-    const selectedManifest = manifest(build);
-    const sealed = publication.seal({
-        format: 'astrale.domain.publication',
-        version: 3,
-        origin: root.origin,
-        identity: { issuer: addressing.issuer, subject: root.origin },
-        schema: {
-            revision: root.revision,
-            bundle: {
-                href: publication.bundleUrl(addressing.publicUrl, build.schema.bundle.ref),
-                ref: build.schema.bundle.ref,
-            },
-        },
-        requirements: requirements(build),
-        ...(selectedManifest === undefined ? {} : { manifest: selectedManifest }),
-        bindings: {
-            callables: callables(build, addressing),
-            views: views(build, addressing),
-        },
-        delivery: publication.placeDelivery({ path: DELIVERY_PATH, authentication: { kind: 'public' } }, addressing.publicUrl, publication.bundleUrl(addressing.publicUrl, build.schema.bundle.ref)),
-        routes: routes(build, addressing),
-    });
-    const { domain } = evidenceOf(build);
-    return Object.freeze({
-        publication: sealed,
-        routes: protocolRoutes.bind(build.routes, sealed, domain, addressing.publicUrl),
-    });
-}

package/dist/deployment/verify/preflight/artifact.d.ts

@@ -1,6 +0,0 @@
-import type { ArtifactSource, PreparedArtifact } from '../../adapter/prepare/index.js';
-import type { Build } from '../../build/index.js';
-import type { ResolvedRuntimeReference } from '../../runtime/index.js';
-/** Detach preparation output and bind it to the exact Build and resolved Runtime identity. */
-export declare function artifact<const BuildValue extends Build>(build: BuildValue, runtime: ResolvedRuntimeReference, source: ArtifactSource): PreparedArtifact<BuildValue>;
-export declare function isPreparedArtifact(input: unknown): input is PreparedArtifact;

package/dist/deployment/verify/preflight/artifact.js

@@ -1,122 +0,0 @@
-import { identify } from '@astrale-os/kernel-protocol/artifact';
-import { isAddressing } from '../../release/index.js';
-import { admit as admitRuntime } from '../../runtime/index.js';
-const MEDIA_TYPE = 'application/vnd.astrale.prepared-artifact+octet-stream;v=1';
-const admittedArtifacts = new WeakSet();
-/** Detach preparation output and bind it to the exact Build and resolved Runtime identity. */
-export function artifact(build, runtime, source) {
-    admitRuntime({ runtime: build.runtime }, runtime);
-    const admitted = admitSource(source);
-    const digest = identify(evidenceBytes(build, admitted), MEDIA_TYPE).digest;
-    const files = Object.freeze(admitted.files.map(prepareFile));
-    const prepared = Object.freeze({
-        kind: 'prepared-artifact',
-        build,
-        digest,
-        entrypoint: admitted.entrypoint,
-        files,
-        addressing: admitted.addressing,
-    });
-    admittedArtifacts.add(prepared);
-    return prepared;
-}
-function prepareFile(file) {
-    const content = new Uint8Array(file.content);
-    return Object.freeze({ path: file.path, bytes: () => new Uint8Array(content) });
-}
-export function isPreparedArtifact(input) {
-    return input !== null && typeof input === 'object' && admittedArtifacts.has(input);
-}
-function admitSource(source) {
-    if (source === null || typeof source !== 'object' || Array.isArray(source))
-        invalid();
-    if (Reflect.ownKeys(source).some((key) => key !== 'entrypoint' && key !== 'files' && key !== 'addressing')) {
-        invalid();
-    }
-    const entrypoint = path(source.entrypoint, 'Artifact entrypoint');
-    if (!Array.isArray(source.files) || source.files.length === 0) {
-        throw new TypeError('Artifact files must be a non-empty array.');
-    }
-    const paths = new Set();
-    const files = source.files.map((file, index) => {
-        if (file === null || typeof file !== 'object' || Array.isArray(file))
-            invalid();
-        if (Reflect.ownKeys(file).some((key) => key !== 'path' && key !== 'content') ||
-            !(file.content instanceof Uint8Array)) {
-            invalid();
-        }
-        const selected = path(file.path, `Artifact file ${index}`);
-        if (paths.has(selected))
-            throw new TypeError(`Artifact file ${selected} is duplicated.`);
-        paths.add(selected);
-        return Object.freeze({ path: selected, content: new Uint8Array(file.content) });
-    });
-    files.sort((left, right) => compare(left.path, right.path));
-    if (!paths.has(entrypoint))
-        throw new TypeError('Artifact entrypoint file is absent.');
-    const addressing = admitPlan(source.addressing);
-    return Object.freeze({ entrypoint, files: Object.freeze(files), addressing });
-}
-function admitPlan(input) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    if (input.kind === 'configured') {
-        if (Reflect.ownKeys(input).some((key) => key !== 'kind' && key !== 'addressing'))
-            invalid();
-        if (!isAddressing(input.addressing)) {
-            throw new TypeError('Configured artifact Addressing is not admitted.');
-        }
-        return Object.freeze({ kind: 'configured', addressing: input.addressing });
-    }
-    if (input.kind === 'provider-assigned') {
-        if (Reflect.ownKeys(input).some((key) => key !== 'kind' && key !== 'claim'))
-            invalid();
-        if (typeof input.claim !== 'string' ||
-            input.claim.length === 0 ||
-            input.claim.trim() !== input.claim) {
-            throw new TypeError('Provider-assigned Addressing claim must be a non-empty stable string.');
-        }
-        return Object.freeze({ kind: 'provider-assigned', claim: input.claim });
-    }
-    return invalid();
-}
-function evidenceBytes(build, source) {
-    const encoder = new TextEncoder();
-    const chunks = [
-        encoder.encode(JSON.stringify({
-            origin: build.schema.compiled.root.origin,
-            revision: build.schema.compiled.root.revision,
-            bundle: build.schema.bundle.ref.digest,
-            entrypoint: source.entrypoint,
-            addressing: source.addressing.kind === 'configured'
-                ? { kind: 'configured', ...source.addressing.addressing }
-                : source.addressing,
-        })),
-    ];
-    for (const file of source.files) {
-        chunks.push(encoder.encode(`\0${file.path}\0${file.content.byteLength}\0`), file.content);
-    }
-    const bytes = new Uint8Array(chunks.reduce((size, chunk) => size + chunk.byteLength, 0));
-    let offset = 0;
-    for (const chunk of chunks) {
-        bytes.set(chunk, offset);
-        offset += chunk.byteLength;
-    }
-    return bytes;
-}
-function path(input, label) {
-    if (typeof input !== 'string' ||
-        input.length === 0 ||
-        input.startsWith('/') ||
-        input.includes('\\') ||
-        input.split('/').some((segment) => segment === '' || segment === '.' || segment === '..')) {
-        throw new TypeError(`${label} must be a contained relative POSIX path.`);
-    }
-    return input;
-}
-function compare(left, right) {
-    return left < right ? -1 : left > right ? 1 : 0;
-}
-function invalid() {
-    throw new TypeError('Artifact source is invalid.');
-}

package/dist/deployment/verify/preflight/publication.d.ts

@@ -1,4 +0,0 @@
-import type { PreparedArtifact } from '../../adapter/prepare/index.js';
-import type { Release } from '../../release/index.js';
-/** Verify locally assemblable Publication evidence before any provider mutation. */
-export declare function publication(artifact: PreparedArtifact): Release | undefined;

package/dist/deployment/verify/preflight/publication.js

@@ -1,14 +0,0 @@
-import { publication as protocolPublication, routes } from '@astrale-os/kernel-protocol';
-import { evidenceOf } from '../../build/admission.js';
-import { assemble } from '../../release/index.js';
-/** Verify locally assemblable Publication evidence before any provider mutation. */
-export function publication(artifact) {
-    if (artifact.addressing.kind !== 'configured')
-        return undefined;
-    const release = assemble(artifact.build, artifact.addressing.addressing);
-    const admitted = protocolPublication.accept(release.publication);
-    protocolPublication.verifyBundleBytes(admitted, artifact.build.schema.bundle.bytes());
-    const { domain } = evidenceOf(artifact.build);
-    routes.verifyTable(release.routes, admitted, domain);
-    return release;
-}

package/dist/deployment/verify/readiness/deployment.d.ts

@@ -1,3 +0,0 @@
-import type { DeployResult, PreparedArtifact } from '../../adapter/index.js';
-/** Admit adapter-reported progress without changing its mutation knowledge. */
-export declare function verifyDeployment(artifact: PreparedArtifact, input: DeployResult): DeployResult;

package/dist/deployment/verify/readiness/deployment.js

@@ -1,151 +0,0 @@
-import { isRelease } from '../../release/index.js';
-import { isPreparedArtifact } from '../preflight/artifact.js';
-/** Admit adapter-reported progress without changing its mutation knowledge. */
-export function verifyDeployment(artifact, input) {
-    if (!isPreparedArtifact(artifact))
-        throw new TypeError('PreparedArtifact is not admitted.');
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    const release = input.release === undefined ? undefined : verifyRelease(artifact, input.release);
-    const progress = verifyProgress(artifact, input.progress, release);
-    if (input.status === 'ready') {
-        exact(input, ['status', 'phase', 'progress', 'release']);
-        if (input.phase !== 'complete' ||
-            release === undefined ||
-            progress.provider.kind !== 'applied' ||
-            progress.provider.evidence.issuer === undefined ||
-            !terminal(progress.prerequisite) ||
-            !terminal(progress.configuration) ||
-            !terminal(progress.installation)) {
-            invalid();
-        }
-        return Object.freeze({ status: 'ready', phase: 'complete', progress, release });
-    }
-    if (input.status === 'failed') {
-        exact(input, ['status', 'phase', 'progress', 'error'], ['release']);
-        if (![
-            'prerequisite',
-            'provider',
-            'addressing',
-            'release',
-            'configuration',
-            'installation',
-            'readiness',
-        ].includes(input.phase) ||
-            !(input.error instanceof Error)) {
-            invalid();
-        }
-        return Object.freeze({
-            status: 'failed',
-            phase: input.phase,
-            progress,
-            error: input.error,
-            ...(release === undefined ? {} : { release }),
-        });
-    }
-    return invalid();
-}
-function verifyRelease(artifact, release) {
-    if (!isRelease(release) || release.build !== artifact.build) {
-        throw new TypeError('DeployResult Release differs from the PreparedArtifact Build.');
-    }
-    if (artifact.addressing.kind === 'configured' &&
-        (release.addressing.issuer !== artifact.addressing.addressing.issuer ||
-            release.addressing.publicUrl !== artifact.addressing.addressing.publicUrl)) {
-        throw new TypeError('DeployResult Release differs from configured Addressing.');
-    }
-    return release;
-}
-function verifyProgress(artifact, input, release) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    exact(input, ['prerequisite', 'provider', 'configuration', 'installation']);
-    return Object.freeze({
-        prerequisite: knowledge(input.prerequisite),
-        provider: providerKnowledge(artifact, input.provider, release),
-        configuration: knowledge(input.configuration),
-        installation: knowledge(input.installation),
-    });
-}
-function providerKnowledge(artifact, input, release) {
-    if (input?.kind === 'partial') {
-        exact(input, ['kind'], ['evidence']);
-        if (input.evidence === undefined)
-            return Object.freeze({ kind: 'partial' });
-        const evidence = providerEvidence(input.evidence);
-        if (evidence.artifact !== artifact.digest) {
-            throw new TypeError('Provider deployment evidence differs from the PreparedArtifact digest.');
-        }
-        if (release !== undefined &&
-            evidence.issuer !== undefined &&
-            evidence.issuer !== release.addressing.issuer) {
-            throw new TypeError('Provider deployment evidence differs from the Release issuer.');
-        }
-        return Object.freeze({ kind: 'partial', evidence });
-    }
-    if (input?.kind !== 'applied')
-        return knowledge(input);
-    exact(input, ['kind', 'evidence']);
-    const evidence = providerEvidence(input.evidence);
-    if (evidence.artifact !== artifact.digest) {
-        throw new TypeError('Provider deployment evidence differs from the PreparedArtifact digest.');
-    }
-    if (release !== undefined &&
-        evidence.issuer !== undefined &&
-        evidence.issuer !== release.addressing.issuer) {
-        throw new TypeError('Provider deployment evidence differs from the Release issuer.');
-    }
-    return Object.freeze({ kind: 'applied', evidence });
-}
-function terminal(input) {
-    return input.kind === 'none' || input.kind === 'applied';
-}
-function providerEvidence(input) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    exact(input, ['provider', 'deployment', 'artifact'], ['issuer', 'preflight']);
-    if (typeof input.provider !== 'string' ||
-        input.provider.length === 0 ||
-        input.provider.trim() !== input.provider ||
-        typeof input.deployment !== 'string' ||
-        input.deployment.length === 0 ||
-        input.deployment.trim() !== input.deployment ||
-        typeof input.artifact !== 'string' ||
-        (input.issuer !== undefined && typeof input.issuer !== 'string') ||
-        (input.preflight !== undefined &&
-            input.preflight !== 'passed' &&
-            input.preflight !== 'unavailable')) {
-        invalid();
-    }
-    return Object.freeze({ ...input });
-}
-function knowledge(input) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input))
-        invalid();
-    if (input.kind === 'applied') {
-        exact(input, ['kind', 'evidence']);
-        return Object.freeze({ kind: 'applied', evidence: input.evidence });
-    }
-    if (input.kind === 'partial') {
-        exact(input, ['kind'], ['evidence']);
-        return Object.freeze({
-            kind: 'partial',
-            ...(input.evidence === undefined ? {} : { evidence: input.evidence }),
-        });
-    }
-    if (input.kind === 'none' || input.kind === 'unknown') {
-        exact(input, ['kind']);
-        return Object.freeze({ kind: input.kind });
-    }
-    return invalid();
-}
-function exact(input, required, optional = []) {
-    const allowed = new Set([...required, ...optional]);
-    if (required.some((key) => !Object.hasOwn(input, key)) ||
-        Reflect.ownKeys(input).some((key) => typeof key !== 'string' || !allowed.has(key))) {
-        invalid();
-    }
-}
-function invalid() {
-    throw new TypeError('DeployResult is invalid.');
-}

package/dist/deployment/verify/readiness/publication.d.ts

@@ -1,11 +0,0 @@
-import { publication } from '@astrale-os/kernel-protocol';
-import type { Release } from '../../release/index.js';
-export type ReadinessFetch = (input: string, init: {
-    readonly redirect: 'error';
-    readonly signal?: AbortSignal;
-}) => Promise<Response>;
-/** Fetch and verify the exact live Publication and Bundle for one Release. */
-export declare function verifyPublication(release: Release, options?: {
-    readonly fetch?: ReadinessFetch;
-    readonly signal?: AbortSignal;
-}): Promise<publication.Publication>;

package/dist/deployment/verify/readiness/publication.js

@@ -1,41 +0,0 @@
-import { publication } from '@astrale-os/kernel-protocol';
-const MAXIMUM_PUBLICATION_BYTES = 1024 * 1024;
-const MAXIMUM_BUNDLE_BYTES = 16 * 1024 * 1024;
-/** Fetch and verify the exact live Publication and Bundle for one Release. */
-export async function verifyPublication(release, options = {}) {
-    const fetcher = options.fetch ?? globalThis.fetch;
-    const publicationUrl = publication.url(release.addressing.publicUrl);
-    const response = await fetchRequired(fetcher, publicationUrl, options.signal);
-    const deployed = publication.accept(JSON.parse(await text(response, publicationUrl, MAXIMUM_PUBLICATION_BYTES)));
-    if (!publication.matchesReference(deployed, publication.reference(release.publication))) {
-        throw new Error('Live Publication differs from the expected Release.');
-    }
-    const bundleResponse = await fetchRequired(fetcher, deployed.schema.bundle.href, options.signal);
-    const bytes = new Uint8Array(await bounded(bundleResponse, deployed.schema.bundle.href, MAXIMUM_BUNDLE_BYTES));
-    publication.decodeBundle(deployed, bytes);
-    return deployed;
-}
-async function fetchRequired(fetcher, url, signal) {
-    const response = await fetcher(url, {
-        redirect: 'error',
-        ...(signal === undefined ? {} : { signal }),
-    });
-    if (!response.ok)
-        throw new Error(`GET ${url} returned ${response.status}.`);
-    return response;
-}
-async function bounded(response, url, maximum) {
-    const bytes = await response.arrayBuffer();
-    if (bytes.byteLength > maximum)
-        throw new Error(`GET ${url} exceeded ${maximum} bytes.`);
-    return bytes;
-}
-async function text(response, url, maximum) {
-    const bytes = await bounded(response, url, maximum);
-    try {
-        return new TextDecoder('utf-8', { fatal: true, ignoreBOM: false }).decode(bytes);
-    }
-    catch (cause) {
-        throw new Error(`GET ${url} returned invalid UTF-8.`, { cause });
-    }
-}

package/dist/execution/service/errors.d.ts

@@ -1,3 +0,0 @@
-export declare class ServiceUnavailableError extends Error {
-    readonly name = "ServiceUnavailableError";
-}

package/dist/execution/service/errors.js

@@ -1,3 +0,0 @@
-export class ServiceUnavailableError extends Error {
-    name = 'ServiceUnavailableError';
-}

package/dist/execution/service/publication/delivery.d.ts

@@ -1,2 +0,0 @@
-import type { publication } from '@astrale-os/kernel-server';
-export declare function delivery(input: publication.delivery.Provider | undefined): publication.delivery.Provider | undefined;

package/dist/execution/service/publication/installation.d.ts

@@ -1,3 +0,0 @@
-import type { publication } from '@astrale-os/kernel-server';
-import type { Release } from '../../../deployment/release/index.js';
-export declare function installation(release: Release, provider: publication.delivery.Provider | undefined): void;

package/dist/execution/service/publication/installation.js

@@ -1,8 +0,0 @@
-export function installation(release, provider) {
-    const advertised = release.publication.delivery !== undefined;
-    if (advertised !== (provider !== undefined)) {
-        throw new TypeError(advertised
-            ? 'Release advertises Publication delivery without a Provider.'
-            : 'Publication delivery Provider has no Release endpoint.');
-    }
-}

package/dist/execution/service/publication/source.d.ts

@@ -1,3 +0,0 @@
-import type { PublicationSource } from '@astrale-os/kernel-server';
-import type { LoadedRuntime } from '../../runtime/index.js';
-export declare function source(runtime: LoadedRuntime): PublicationSource;

package/dist/execution/service/publication/source.js

@@ -1,11 +0,0 @@
-import { preparePublicationSnapshot } from '@astrale-os/kernel-server';
-export function source(runtime) {
-    const release = runtime.release;
-    const snapshot = preparePublicationSnapshot({
-        publication: release.publication,
-        bundle: release.build.schema.bundle.bytes(),
-        table: release.routes,
-        domain: runtime.domain,
-    });
-    return Object.freeze({ current: () => snapshot });
-}

package/dist/platform/publication/index.d.ts

@@ -1,2 +0,0 @@
-/** Canonical Publication wire contract and admission owned by the Astrale platform. */
-export { publication } from '@astrale-os/kernel-protocol';

package/dist/platform/publication/index.js

@@ -1,2 +0,0 @@
-/** Canonical Publication wire contract and admission owned by the Astrale platform. */
-export { publication } from '@astrale-os/kernel-protocol';

package/dist/tooling/cli/astrale/authority.d.ts

@@ -1,5 +0,0 @@
-/** Build one mutually exclusive authority argument set for an Astrale CLI operation. */
-export declare function astraleAuthorityArguments(input: {
-    readonly identity?: string;
-    readonly credential?: string;
-}): readonly string[];

package/dist/tooling/cli/astrale/authority.js

@@ -1,11 +0,0 @@
-/** Build one mutually exclusive authority argument set for an Astrale CLI operation. */
-export function astraleAuthorityArguments(input) {
-    if (input.identity !== undefined && input.credential !== undefined) {
-        throw new TypeError('Astrale authority cannot combine an identity and a credential.');
-    }
-    return input.credential === undefined
-        ? input.identity === undefined
-            ? Object.freeze([])
-            : Object.freeze(['--as', input.identity])
-        : Object.freeze(['--creds', input.credential]);
-}

package/dist/tooling/cli/astrale/executable.d.ts

@@ -1,2 +0,0 @@
-/** Resolve one exact executable for a complete sequence of Kernel CLI operations. */
-export declare function resolveAstraleExecutable(input?: string): Promise<string>;

package/dist/tooling/cli/astrale/executable.js

@@ -1,47 +0,0 @@
-import { constants } from 'node:fs';
-import { access, readFile, realpath } from 'node:fs/promises';
-import { homedir } from 'node:os';
-import { delimiter, isAbsolute, join } from 'node:path';
-/** Resolve one exact executable for a complete sequence of Kernel CLI operations. */
-export async function resolveAstraleExecutable(input = 'astrale') {
-    const candidates = isAbsolute(input) ? [input] : await executableCandidates(input);
-    for (const candidate of candidates) {
-        try {
-            await access(candidate, constants.X_OK);
-            return await realpath(candidate);
-        }
-        catch {
-            // Continue through the bounded recorded-install and PATH candidates.
-        }
-    }
-    throw new TypeError('Astrale CLI is unavailable. Install it with the official Astrale installer.');
-}
-async function executableCandidates(input) {
-    const path = (process.env.PATH ?? '')
-        .split(delimiter)
-        .filter(Boolean)
-        .map((directory) => join(directory, input));
-    if (input !== 'astrale')
-        return path;
-    const installed = await recordedInstallation();
-    return installed === undefined ? path : [installed, ...path];
-}
-async function recordedInstallation() {
-    const home = process.env.ASTRALE_HOME ?? join(homedir(), '.astrale');
-    try {
-        const decoded = JSON.parse(await readFile(join(home, 'install.json'), 'utf8'));
-        if (typeof decoded !== 'object' ||
-            decoded === null ||
-            !('method' in decoded) ||
-            decoded.method !== 'script' ||
-            !('bin' in decoded) ||
-            typeof decoded.bin !== 'string' ||
-            !isAbsolute(decoded.bin)) {
-            return undefined;
-        }
-        return decoded.bin;
-    }
-    catch {
-        return undefined;
-    }
-}

package/dist/tooling/cli/astrale/failure.d.ts

@@ -1,6 +0,0 @@
-import type { AstraleProcessResult } from './process.js';
-/** Only sanitized CLI diagnostics may be promoted through installation failures. */
-export declare class AstraleCliError extends Error {
-}
-export declare function astraleFailure(command: string, result: AstraleProcessResult): Error;
-export declare function isDomainNotInstalledFailure(stderr: string): boolean;

package/dist/tooling/cli/astrale/failure.js

@@ -1,48 +0,0 @@
-/** Only sanitized CLI diagnostics may be promoted through installation failures. */
-export class AstraleCliError extends Error {
-}
-export function astraleFailure(command, result) {
-    let diagnostic;
-    try {
-        const failure = record(JSON.parse(result.stderr));
-        const error = admittedCode(failure.error);
-        const reason = recordOrUndefined(failure.reason);
-        const reasonCode = admittedCode(reason?.code);
-        diagnostic =
-            error === undefined ? undefined : reasonCode === undefined ? error : `${error}/${reasonCode}`;
-    }
-    catch {
-        // Never forward raw stderr because a credential-bearing command owns it.
-    }
-    return new AstraleCliError(`Astrale CLI ${command} failed${diagnostic === undefined ? '' : ` (${diagnostic})`}.`);
-}
-function admittedCode(input) {
-    return typeof input === 'string' && /^[A-Z][A-Z0-9_]{0,63}$/u.test(input) ? input : undefined;
-}
-function recordOrUndefined(input) {
-    return input !== null && typeof input === 'object' && !Array.isArray(input)
-        ? input
-        : undefined;
-}
-export function isDomainNotInstalledFailure(stderr) {
-    try {
-        const failure = record(JSON.parse(stderr));
-        if (failure.error === 'DOMAIN_NOT_INSTALLED')
-            return true;
-        const reason = failure.reason;
-        return (failure.error === 'RESPONSE_ERROR' &&
-            reason !== null &&
-            typeof reason === 'object' &&
-            !Array.isArray(reason) &&
-            Reflect.get(reason, 'code') === 'SCHEMA_NOT_FOUND');
-    }
-    catch {
-        return false;
-    }
-}
-function record(input) {
-    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
-        throw new TypeError('Expected an object response.');
-    }
-    return input;
-}

package/dist/tooling/cli/astrale/instance.d.ts

@@ -1,11 +0,0 @@
-import { runAstrale } from './process.js';
-/** Resolve and probe a bookmark through the pinned CLI, preserving its TLS trust. */
-export declare function resolveAstraleInstanceIssuer(input: {
-    readonly executable: string;
-    readonly projectDir: string;
-    readonly instance: string;
-    readonly expectedIssuer?: string;
-    readonly signal: AbortSignal;
-}, dependencies?: {
-    readonly run: typeof runAstrale;
-}): Promise<string>;