Module deploy 

Operator deploy handlers shared by both transports. Shared operator-deploy handlers used by both transports.

Every operation authorizes via crate::deploy::DeployGuard before any handler logic runs, then maps engine outcomes onto the deploy wire contract: deploy_denied for authorization, version_pinned for route-active/pinned refusals, invalid_input for malformed archives and the same-hash-different-manifest tripwire, not_found for unknown (type, version), and 503/Unavailable for drain/shutdown windows. Mutations emit one structured audit line and the deploy metrics.

Enums

DeployApiError

Deploy failure classes the transports must render distinctly: 503 vs 413 vs the regular wire-code mapping.

Functions

list_versions

Handles the deploy read model (ListVersions / GET /deploy/versions).

load_package

Handles a deploy archive upload (LoadPackage / POST /deploy/packages).

route_version

Handles a route re-point (RouteVersion / POST /deploy/route).

unload_version

Handles a version unload (UnloadVersion / POST /deploy/unload).