@moinulmoin/eden 0.4.1 → 0.6.0

package/NOTICE

@@ -1,15 +1,6 @@
 Eden
 Copyright 2026 Eden contributors
 
-Cloudflare Containers
-  @cloudflare/containers, version 0.3.7
-  https://github.com/cloudflare/containers
-
-Eden's generated Worker host bundle includes software from
-`@cloudflare/containers`, distributed under MIT OR Apache-2.0. Eden
-redistributes that bundled software under the Apache-2.0 option included in
-LICENSE.
-
 Workflow SDK
   @workflow/world-postgres, version 5.0.0-beta.47
   https://github.com/vercel/workflow

package/README.md

@@ -12,15 +12,15 @@ If you already have an Eve project, start with `eden deploy`.
 Use any one of these package managers:
 
 ```sh
-npm install --global @moinulmoin/eden@0.4.1
+npm install --global @moinulmoin/eden@0.6.0
 ```
 
 ```sh
-pnpm add --global @moinulmoin/eden@0.4.1
+pnpm add --global @moinulmoin/eden@0.6.0
 ```
 
 ```sh
-bun add --global @moinulmoin/eden@0.4.1
+bun add --global @moinulmoin/eden@0.6.0
 ```
 
 Then confirm the CLI is available:
@@ -39,7 +39,7 @@ Bun can install Eden, but Eden still runs on Node. Do not use `bunx --bun`.
 - Wrangler authentication:
 
   ```sh
-  npx wrangler@4.120.0 login
+  npx wrangler@4.147.0 login
   ```
 
 - Docker or OrbStack with Linux/amd64 container support

package/dist/eve-control-plane.d.ts

@@ -2,7 +2,7 @@ import { type EveCliEnvironment, type EveCliExecutionRequest } from "./eve.js";
 import { type EveNodeImage, type EveProjectBuildCandidate, type EveProjectBuilder } from "./eve-packaging.js";
 import { type EveHostRequirements, type EveRuntimeCleanup, type EveRuntimeImageDiscardRequest } from "./eve-runtime-image.js";
 import { type EveRuntimeConfig, type EveRuntimeInjection, type EveRuntimeProtectedStore } from "./eve-runtime-config.js";
-import type { EveHostConfig } from "@moinulmoin/eden-runtime-cloudflare";
+import { type EveHostConfig } from "@moinulmoin/eden-runtime-cloudflare";
 export declare const DEFAULT_EVE_HOST_REQUIREMENTS: EveHostRequirements;
 export declare const DEFAULT_EVE_NODE_IMAGE: EveNodeImage;
 export type EvePreflightCheckStatus = "passed" | "failed" | "blocked" | "skipped";
@@ -21,6 +21,12 @@ export interface EvePreflightCandidate {
 export type EveDeploymentStatus = "deployed" | "failed" | "indeterminate";
 export interface EveDeploymentMetadata {
     readonly status: EveDeploymentStatus;
+    /**
+     * `create` is a first deploy onto an absent target; `update` is an
+     * in-place redeploy of a provably Eden-owned target that keeps the Worker,
+     * Durable Object classes, and durable state.
+     */
+    readonly operation: "create" | "update";
     readonly targetKey: string;
     readonly deploymentId: string;
     readonly workerName: string;
@@ -28,6 +34,9 @@ export interface EveDeploymentMetadata {
     readonly stableContainerInstanceName: string;
     readonly stableWorkersDevOrigin: string;
     readonly imageReference: string;
+    /** Present on updates: the superseded generation and its registry image. */
+    readonly supersededGenerationId?: string;
+    readonly supersededImageReference?: string;
     readonly runtimeVariableNames: readonly string[];
     readonly evidenceRetained: true;
 }
@@ -50,6 +59,7 @@ export type EveCloudflareTargetState = "absent" | "owned" | "unowned" | "mismatc
 export interface EveCloudflareReadRequest {
     readonly projectId: string;
     readonly sourceDigest: string;
+    readonly projectRoot: string;
     readonly environment: EveCliEnvironment;
     readonly name: string;
 }
@@ -65,6 +75,32 @@ export interface EveCloudflareReadResult {
         readonly message?: string;
         readonly remediation?: string;
         readonly identity?: EveDeploymentIdentityProof;
+        /**
+         * Which exact resources the read observed. `undefined` means the
+         * inventory could not be proven; `worker`/`container` booleans mean the
+         * exact names were present or absent without any ownership claim.
+         */
+        readonly observed?: {
+            readonly worker: boolean;
+            readonly container: boolean;
+        };
+        /**
+         * Provider-backed facts about the live target, read through the
+         * Cloudflare API (not self-asserted response headers, which any Worker
+         * can forge): the Container application's Durable Object namespace and
+         * the `EDEN_EVE_DEPLOYMENT_ID` plain-text var Eden stamps into every
+         * Worker it publishes. `settingsReadable` tells the ownership resolver
+         * whether a missing var is evidence of a foreign Worker or just an
+         * unreadable settings call.
+         */
+        readonly providerEvidence?: {
+            readonly containerApplicationId?: string;
+            readonly containerSchedulingPolicy?: string;
+            readonly containerNamespaceId?: string;
+            readonly workerDeploymentId?: string;
+            readonly workerContainerNamespaceId?: string;
+            readonly settingsReadable?: boolean;
+        };
     };
 }
 export type EveCloudflareReadRunner = (request: EveCloudflareReadRequest) => EveCloudflareReadResult | Promise<EveCloudflareReadResult>;
@@ -104,7 +140,10 @@ export interface EveDeploymentIdentity {
     readonly runtimeVariableNames: readonly string[];
     readonly runtimeRevisionHandle?: string;
 }
-export type EveDeploymentIdentityProof = Partial<EveDeploymentIdentity>;
+export type EveDeploymentIdentityProof = Partial<EveDeploymentIdentity> & {
+    /** The deployment the serving Container verifiably started under; set only by a deployed Eden host that proves its running image before stamping. */
+    readonly startedDeploymentId?: string;
+};
 export interface EveDeploymentPublicationRequest {
     readonly identity: EveDeploymentIdentity;
     readonly hostConfig: EveHostConfig;
@@ -213,19 +252,20 @@ export interface EvePreflightOptions {
     readonly destroyCloudflareRead?: EveDestroyCloudflareReadRunner;
     readonly deleteWorker?: EveWorkerDeleteRunner;
     readonly deleteContainer?: EveContainerDeleteRunner;
-    readonly deleteRegistryImage?: EveRegistryImageDeleteRunner;
+    readonly deleteRegistryRepository?: EveRegistryRepositoryDeleteRunner;
 }
 export interface EveDestroyTargetRead {
     readonly workerExists: boolean;
     readonly containerApplicationId?: string;
     readonly accountId?: string;
     /**
-     * Subset of the request's owned registry image tags (`repository:tag`)
-     * still present in the managed registry. `undefined` means the reader
-     * could not enumerate the registry; destroy then relies on the exact
-     * delete outcomes only.
+     * Every `repository:tag` ref still present in the managed registry whose
+     * repository is one of the request's owned repositories — including the
+     * `rootfs-snapshot-*`/`rootfs-set-*` tags container snapshots create.
+     * `undefined` means the reader could not enumerate the registry; destroy
+     * then relies on the exact delete outcomes only.
      */
-    readonly registryImagesPresent?: readonly string[];
+    readonly registryTagsPresent?: readonly string[];
 }
 export type EveDestroyCloudflareReadRunner = (request: EveDestroyCloudflareReadRequest) => EveDestroyTargetRead | Promise<EveDestroyTargetRead>;
 export type EveWorkerDeleteRunner = (request: {
@@ -234,15 +274,15 @@ export type EveWorkerDeleteRunner = (request: {
 export type EveContainerDeleteRunner = (request: {
     readonly applicationId: string;
 }) => "deleted" | "absent" | "indeterminate" | Promise<"deleted" | "absent" | "indeterminate">;
-export type EveRegistryImageDeleteRunner = (request: {
-    readonly image: string;
+export type EveRegistryRepositoryDeleteRunner = (request: {
+    readonly repository: string;
 }) => "deleted" | "absent" | "indeterminate" | Promise<"deleted" | "absent" | "indeterminate">;
 export type EveRuntimeConfigLoader = (path: string, cwd: string) => EveRuntimeConfig | Promise<EveRuntimeConfig>;
 export interface EveDestroyCloudflareReadRequest {
     readonly workerName: string;
     readonly containerApplicationName: string;
-    /** Exact `repository:tag` image refs recorded for this target. */
-    readonly registryImages?: readonly string[];
+    /** Registry repository names this target provably owns. */
+    readonly registryRepositories?: readonly string[];
 }
 /**
  * Container applications in the account that belong to this exact target.