@celestia-island/plana-types 0.1.2 → 0.1.4

package/bindings/gateway.ts

@@ -0,0 +1,205 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+import type { JsonValue } from "./serde_json/JsonValue";
+
+/**
+ * `device.bootstrap` result: the one-shot payload a freshly flashed
+ * device fetches with its enrollment token (parity with the host agent's
+ * `BootstrapResponse`).
+ */
+export type DeviceBootstrap = { node_id: string, 
+/**
+ * Candidate evernight-server endpoints (`ws(s)://…/api/ws`).
+ */
+server_urls: Array<string>, device_secret?: string | null, status?: string | null, };
+
+/**
+ * `enrollment.mint` params (parity with the gateway's `EnrollRequest`).
+ */
+export type EnrollmentMintParams = { 
+/**
+ * Free-form device label stored as the enrollment note.
+ */
+name?: string | null, 
+/**
+ * Explicit target server override (`ws(s)://…/api/ws`).
+ */
+target_server?: string | null, 
+/**
+ * Parent signing-certificate flow: when present the gateway prepares
+ * the claims and the flasher signs locally with the key bound in the
+ * certificate.
+ */
+signing?: SigningRequest | null, };
+
+/**
+ * `enrollment.mint` result, parent-chained path (parity with the
+ * flasher's `MintParentChained`): the gateway only assigns identifiers
+ * and returns the unsigned JOSE signing input; the flasher signs it with
+ * the key bound in its parent certificate before burning to media.
+ */
+export type EnrollmentMintParentChained = { serial: string, node_id: string, 
+/**
+ * Unsigned JOSE signing input (base64url `header.payload`).
+ */
+signing_input: string, parent_jti: string, 
+/**
+ * Epoch seconds; clamped inside the parent certificate window.
+ */
+expires_at: bigint, 
+/**
+ * Epoch seconds.
+ */
+created_at: bigint, target_server?: string | null, name?: string | null, };
+
+/**
+ * `enrollment.mint` result, legacy gateway-signed path (parity with the
+ * flasher's `EnrollmentMint`).
+ */
+export type EnrollmentMinted = { serial: string, node_id: string, enrollment_token: string, 
+/**
+ * Epoch seconds.
+ */
+expires_at: bigint, 
+/**
+ * Epoch seconds.
+ */
+created_at: bigint, target_server?: string | null, name?: string | null, };
+
+/**
+ * `enrollment.status` result (parity with the flasher's
+ * `EnrollmentStatus`; `status` stays a free string — `"pending"`,
+ * `"activated"`, `"revoked"`, `"expired"` — until every deployment
+ * agrees on the enum).
+ */
+export type EnrollmentStatus = { serial: string, node_id: string, status: string, 
+/**
+ * Epoch seconds.
+ */
+created_at: bigint, activated_at?: bigint | null, activated_ip?: string | null, revoked_at?: bigint | null, 
+/**
+ * Epoch seconds.
+ */
+expires_at: bigint, name?: string | null, };
+
+/**
+ * `gateway.info` result: capability descriptor served before
+ * authentication (replaces the old `rescue_channel_not_configured` +
+ * `missing` map dance).
+ */
+export type GatewayServiceInfo = { 
+/**
+ * Human-readable service identifier, e.g. `"gateway"`.
+ */
+service: string, 
+/**
+ * Server version.
+ */
+version: string, 
+/**
+ * Whether the rescue channel is configured and usable.
+ */
+rescue_ready: boolean, 
+/**
+ * Unset configuration keys that keep `rescue_ready` false.
+ */
+missing?: Array<string>, 
+/**
+ * Deployment region descriptor (`"XX"` when unknown).
+ */
+region: string, };
+
+/**
+ * `enrollment.signing_cert.mint` result (parity with the flasher's
+ * `ParentCertIssued`).
+ */
+export type ParentCertIssued = { 
+/**
+ * The signed certificate JWT.
+ */
+certificate: string, jti: string, 
+/**
+ * Not-before, epoch seconds (anchored at the operator's last login).
+ */
+nbf: bigint, 
+/**
+ * Expiry, epoch seconds.
+ */
+exp: bigint, };
+
+/**
+ * Quota outlook as adjudicated by the ERP quota service.
+ */
+export type QuotaState = { remaining: bigint, limit: bigint, allowed: boolean, };
+
+/**
+ * `rescue.diagnose` params. The diagnostics bundle is opaque to the
+ * protocol (the model defines its shape).
+ */
+export type RescueDiagnoseParams = { bundle: JsonValue, };
+
+/**
+ * `rescue.diagnose.progress` notification params.
+ */
+export type RescueDiagnoseProgressParams = { 
+/**
+ * Monotonic 1-based step counter.
+ */
+step: number, };
+
+/**
+ * `rescue.diagnose` result.
+ */
+export type RescueDiagnoseResult = { 
+/**
+ * Structured diagnosis as produced by the model (opaque JSON).
+ */
+diagnosis: JsonValue, 
+/**
+ * Model identifier that produced the diagnosis.
+ */
+model: string, 
+/**
+ * RFC 3339 timestamp.
+ */
+generated_at: string, };
+
+/**
+ * `rescue.open_session` params. The ticket is the one-shot opaque
+ * credential issued by the OAuth callback redirect; it is consumed
+ * exactly once at session mint.
+ */
+export type RescueOpenSessionParams = { ticket: string, };
+
+/**
+ * `rescue.open_session` result. The session handle itself is
+ * connection-bound server state and never crosses the wire; the caller
+ * learns only how long the bound session lives and the quota outlook.
+ */
+export type RescueSessionOpened = { 
+/**
+ * Seconds until the bound session expires.
+ */
+expires_in: bigint, quota: QuotaState, };
+
+/**
+ * `enrollment.signing_cert.mint` params (parity with `SigningCertRequest`).
+ *
+ * The protocol caps `ttl_days` at 3 years (1095 days): a stolen keystore
+ * must die on its own within a bounded horizon.
+ */
+export type SigningCertParams = { 
+/**
+ * Client-generated Ed25519 public key, base64url raw (the JWK `x`).
+ * The private half never leaves the flasher's keystore.
+ */
+public_key: string, 
+/**
+ * Requested validity in days, window anchored at the operator's last
+ * login.
+ */
+ttl_days: bigint, };
+
+/**
+ * Parent-certificate mint selection inside [`EnrollmentMintParams`].
+ */
+export type SigningRequest = { parent_jti: string, };

package/index.ts

@@ -14,7 +14,7 @@
 //     OTHER (star-exported) source the earlier line exports, so "first
 //     listed source wins" is the deliberate outcome, not an artifact.
 //   - Shadowed duplicates stay importable via deep imports
-//     (`import type { FileEntry } from "@celestia-island/plana-celestia-types/bindings/tools/kalos"`).
+//     (`import type { FileEntry } from "@celestia-island/plana-types/bindings/tools/kalos"`).
 //
 // The 6 current collisions (flat winner -> shadowed source):
 //
@@ -35,6 +35,7 @@
 // name must be dropped from the earlier star-exported source.
 export * from "./bindings/engine";
 export * from "./bindings/enums";
+export * from "./bindings/gateway";
 export * from "./bindings/httpTypes";
 export * from "./bindings/mdd";
 export * from "./bindings/model";
@@ -65,7 +66,7 @@ export * from "./bindings/tools/hubris";
 export type { Annotation, FileCreateDirParams, FileDeleteParams, FileDeleteResult, FileEditParams, FileEditResult, FileExistsParams, FileExistsResult, FileGetInfoParams, FileInfoResult, FileListParams, FileListResult, FileReadResult, FileTreeListResult, FileWriteParams, FileWriteResult, ListAnnotationsResult, MkDirResult, ResolveAnnotationResult } from "./bindings/tools/kalos";
 export type { CheckWaitParams, ContainerCreateResult, ContainerFilterCriteria, ContainerForkParams, ContainerForkResult, ContainerInfoParams, ContainerInfoResult, ContainerListItem, ContainerListParams, ContainerListResult, ContainerRemoveParams, ContainerRemoveResult, ContainerSnapshotResult, ContainerStartParams, ContainerStartResult, ContainerStopParams, ContainerStopResult, ExecOnContainerParams, ExecResult, GitPushBranchParams, GitPushResult, NewContainerToolParams, NewContainerVolumeMount, SidecarDeliverResult, SidecarKillParams, SidecarSendParams, SidecarSendResult, SidecarSpawnParams, ToolchainEnsureParams, ToolchainEnsureResult, ToolchainListParams, ToolchainListResult, ToolchainProfileInfo, ToolchainVolumeSpec, VolumeInfo, WaitParams } from "./bindings/tools/neikos";
 export type { AgentIntegrityParams, AskResult, AuditAlignmentParams, AuditAlignmentResult, AuditFinding, AuditLegalityParams, AuditLegalityResult, BlockToolParams, CheckResultItem, ComplianceReportParams, ComplianceReportToolResult, ComplianceRule, ComplianceSummary, InspectToolCallParams, ManageSensitivityRulesParams, ReplyResult, ReportDetail, ReportHumanResult, RuleCheckResult, SecurityAuditParams, SecurityStatusParams, SecuritySuggestionsParams, SensitivityRule, SetNetworkPolicyParams, SetRiskThresholdParams, SetSecurityPolicyParams, StandardCheckParams, StandardCheckResult, StandardRegisterResult, UnblockToolParams } from "./bindings/tools/orexis";
-export type { GrantItem, GrantListResponse, MyPermissions, OAuthProvider, RbacUser, RbacUsersResponse } from "./bindings/httpTypes";
+export type { GrantItem, GrantListResponse, MyPermissions, OAuthProvider, RbacGroupsResponse, RbacUser, RbacUsersResponse } from "./bindings/protocol-core-httpTypes";
 export * from "./bindings/tools/philia";
 export * from "./bindings/tools/polemos";
 export * from "./bindings/tools/skemma";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celestia-island/plana-types",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "repository": {
     "type": "git",
     "url": "https://github.com/celestia-island/plana"