@celestia-island/plana-types 0.1.9 → 0.1.13

package/bindings/evernightGateway.ts

@@ -0,0 +1,168 @@
+// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
+
+/**
+ * Node-side acknowledgment pushed back up the relay.
+ */
+export type ConfigApplyAck = { applied_version: bigint, manifest_id: string, };
+
+/**
+ * The `Config.Apply` downlink payload: the manifest + its version for
+ * idempotent push (replayed old versions are refused by the node).
+ */
+export type ConfigApplyParams = { manifest: GatewayManifest, 
+/**
+ * Monotonically increasing version (refuse <= applied).
+ */
+config_version: bigint, };
+
+/**
+ * Route action, discriminated by the `type` field (serde internally-tagged).
+ */
+export type GatewayAction = { "type": "proxy", 
+/**
+ * Upstream URL(s); multiple = load-balanced (P1 feature).
+ */
+upstream: Array<string>, 
+/**
+ * Load-balancing strategy (default round_robin).
+ */
+lb: string, 
+/**
+ * **Critical for SigV4**: preserve the original Host header.
+ * rustfs presigned URLs verify the Host; changing it = 403.
+ */
+preserve_host: boolean, } | { "type": "static", status: number, body: string, } | { "type": "redirect", to: string, status: number, } | { "type": "reject", status: number, };
+
+/**
+ * Top-level manifest: identifies the document, pins the executing node,
+ * and carries the server blocks.
+ */
+export type GatewayManifest = { 
+/**
+ * Schema version (for forward-compatible evolution).
+ */
+version: number, 
+/**
+ * Unique manifest id (for idempotent push/pull and audit).
+ */
+id: string, 
+/**
+ * Who produced this manifest ("chest-admin" or "hand-written").
+ */
+generated_by: string, 
+/**
+ * The tier-3 node that must execute this manifest (I2 invariant).
+ */
+exit_node: string, 
+/**
+ * Server blocks: one per public hostname.
+ */
+servers: Array<GatewayServer>, };
+
+/**
+ * Structured route matcher. Fields AND across, arrays OR within.
+ * Rejects string-DSL patterns (traefik-style) — everything is
+ * structurally validated at parse time.
+ */
+export type GatewayMatch = { 
+/**
+ * Path prefixes to match (any of).
+ */
+path_prefix: Array<string>, 
+/**
+ * Exact paths (any of).
+ */
+path: Array<string>, 
+/**
+ * HTTP methods (any of).
+ */
+methods: Array<string>, 
+/**
+ * Header presence/value match.
+ */
+headers: { [key in string]: string }, };
+
+/**
+ * Per-route rate limit.
+ */
+export type GatewayRateLimit = { requests: number, per: string, key: string, };
+
+/**
+ * One route: a structured matcher + a discriminated action.
+ */
+export type GatewayRoute = { 
+/**
+ * Route id (for logs and mutation targeting).
+ */
+id: string, 
+/**
+ * Structured match table (fields are AND'd; arrays within a field are OR'd).
+ */
+match: GatewayMatch, 
+/**
+ * What to do when the route matches (discriminated by `type`).
+ */
+action: GatewayAction, 
+/**
+ * Named middleware to apply (references or inline). Serde renames to
+ * `use` so hand-written TOML (`use = [mw]`) round-trips — without
+ * the rename serde looks for `use_` and silently drops the field.
+ */
+use: Array<string>, 
+/**
+ * Rate limit for this route.
+ */
+ratelimit: GatewayRateLimit | null, 
+/**
+ * Request body size ceiling.
+ */
+body_max: string | null, 
+/**
+ * Request timeout.
+ */
+timeout: string | null, };
+
+/**
+ * One public hostname's routing tree.
+ */
+export type GatewayServer = { 
+/**
+ * Public hostname(s) this server block answers (SNI + Host match).
+ */
+host: Array<string>, 
+/**
+ * Listen address (default `0.0.0.0:443`).
+ */
+listen: string, 
+/**
+ * TLS termination config.
+ */
+tls: GatewayTls | null, 
+/**
+ * Redirect plain HTTP to HTTPS (adds a :80 listener).
+ */
+redirect_http: boolean, 
+/**
+ * Ordered routes (first match wins).
+ */
+routes: Array<GatewayRoute>, };
+
+/**
+ * TLS material reference: the cert/key live on the tier-3 node's local
+ * secure storage; the manifest only carries a **reference** (the door's
+ * host), never the private key bytes.
+ */
+export type GatewayTls = { 
+/**
+ * `static` (file-based, managed by acme.sh + install-cert) — ACME
+ * in-process is a future variant.
+ */
+type: string, 
+/**
+ * Reference to the door's certificate (e.g. "door:s3.celestia.world").
+ */
+cert: string, 
+/**
+ * Reference to the door's private key (same node-local storage).
+ */
+key: string, };

package/bindings/ops.ts

@@ -1,9 +1,9 @@
 // Vendored snapshot of packages/plana/bindings/ops.ts (ts-rs generated) so the
 // published npm tarball carries the deferred-operation wire shapes: npm `files`
 // cannot reach a sibling package's directory, exactly as with
-// `protocol-core-httpTypes.ts` above. Re-sync after `cargo test -p plana`
-// whenever the deferred types in packages/plana/src/jsonrpc/deferred.rs or the
-// JSON-RPC error object change.
+// `protocol-core-httpTypes.ts` above. Regenerate with
+// `python3 scripts/vendor_http_types.py` (CI runs `--check`; do not hand-edit
+// this copy).
 // This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
 import type { JsonValue } from "./serde_json/JsonValue";
 

package/bindings/protocol-core-httpTypes.ts

@@ -4,8 +4,8 @@
 // re-export shim no longer owns) so the published npm tarball is
 // self-contained: npm `files` cannot reach a sibling package's directory.
 // Distinct filename to avoid colliding with this crate's own ts-rs-generated
-// bindings/httpTypes.ts. Re-sync when the foundation's HttpTypes bindings
-// change (`cargo test -p plana` then re-copy).
+// bindings/httpTypes.ts. Regenerate with `python3 scripts/vendor_http_types.py`
+// (CI runs `--check`; do not hand-edit this copy).
 // This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
 
 /**
@@ -29,7 +29,10 @@ export type GrantItem = { id: string, scope: string, user_id: string | null, gro
 export type GrantListResponse = { grants: Array<GrantItem>, };
 
 /**
- * Standard /api/health response for all plana backends.
+ * Standard /api/health response for all plana backends (backend service
+ * plane). Not to be confused with the malkuth supervision worker probe
+ * `plana_celestia_types::malkuth::WorkerHealthResponse` (`/healthz` on the
+ * worker-lifecycle plane) — a different type with a distinct field set.
  */
 export type HealthResponse = { status: ServiceStatus, version: string, kind: BackendKind, uptime: bigint, network: NetworkInfo, build_hash: string | null, engine_version: string | null, };
 
@@ -52,11 +55,40 @@ export type OkResponse = { ok: boolean, };
 
 export type PermissionsResponse = { role: string, permissions: Array<string>, };
 
-export type RbacGroup = { id: string, name: string, description: string, member_count: number, created_at: string, updated_at: string, };
+export type RbacGroup = { id: string, name: string, description: string | null, 
+/**
+ * Members attached to this listing (the list response computes it from
+ * the membership table; single-group reads may not). Carried since the
+ * first DTO revision — the doc comment is what 2026-10-06 added.
+ */
+member_count: number, 
+/**
+ * Personal-visibility enforcement: members see only their own
+ * resources while the flag is on (and must acknowledge it once).
+ */
+enforce_personal_visibility: boolean, 
+/**
+ * Builtin groups ship with the deployment and cannot be deleted.
+ */
+is_builtin: boolean, 
+/**
+ * Stable key for a builtin group (e.g. "administrators"); null for
+ * admin-authored groups.
+ */
+builtin_key: string | null, 
+/**
+ * Admin-authored per-locale display names (locale tag → name); null
+ * when none are authored.
+ */
+display_names: { [key in string]: string } | null, created_at: string, updated_at: string, };
 
 export type RbacGroupsResponse = { groups: Array<RbacGroup>, };
 
-export type RbacUser = { id: string, username: string, email: string, display_name: string, avatar_url: string | null, is_active: boolean, role: string, tier: string, created_at: string, };
+export type RbacUser = { id: string, username: string, 
+/**
+ * `auth_users.email` is nullable — accounts can exist without one.
+ */
+email: string | null, display_name: string | null, avatar_url: string | null, is_active: boolean, role: string, tier: string, created_at: string, updated_at: string, };
 
 export type RbacUsersResponse = { users: Array<RbacUser>, };
 
@@ -68,3 +100,12 @@ export type ReadinessResponse = { status: string, database: boolean, };
 export type ServiceStatus = "ok" | "degraded" | "unhealthy";
 
 export type StatusResponse = { status: string, agent_id?: string, platform?: string, id?: string, plugin_id?: string, };
+
+/**
+ * The version half of a health payload, shared by HTTP and JSON-RPC.
+ *
+ * Backends answer `Service.Info` with exactly this struct, built from the
+ * same [`HealthResponse`] they serve on `/health`, so the two transports can
+ * never drift apart.
+ */
+export type VersionReport = { version: string, build_hash?: string, kind: BackendKind, engine_version?: string, };

package/bindings/ws/malkuth.ts

@@ -27,15 +27,6 @@ drain_budget_secs: bigint | null, };
 
 export type GateDecision = "allow" | "review" | "block";
 
-/**
- * Health probe response returned by each worker at `/healthz` or `/readyz`.
- */
-export type HealthResponse = { worker_id: string, healthy: boolean, ready: boolean, 
-/**
- * If not ready, the reason (e.g. "draining", "starting").
- */
-not_ready_reason: string | null, uptime_secs: bigint, version: string, };
-
 /**
  * OreXis LAYER3_PREFLIGHT_GUARD gate decision for a restart proposal.
  */
@@ -48,6 +39,23 @@ export type RestartProposal = { proposal_id: string, worker_id: string, repo_pat
 
 export type RestartRisk = "low" | "medium" | "high" | "critical";
 
+/**
+ * Health probe response returned by each malkuth supervision worker at
+ * `/healthz` or `/readyz` (worker-lifecycle plane).
+ *
+ * Distinct from the generic backend descriptor
+ * `plana::protocol_core::http::HealthResponse` (the `/api/health` payload of
+ * plana backends): the two share only the historical concept, not a wire
+ * shape — this struct carries the worker probe fields, the other the backend
+ * service/build fields — so they are separate types with distinct shapes
+ * (both carry the generic `version` field).
+ */
+export type WorkerHealthResponse = { worker_id: string, healthy: boolean, ready: boolean, 
+/**
+ * If not ready, the reason (e.g. "draining", "starting").
+ */
+not_ready_reason: string | null, uptime_secs: bigint, version: string, };
+
 /**
  * Registers a new worker with the malkuth supervisor.
  * Sent by a worker at startup to announce its presence and capabilities.

package/bindings/ws/tasks.ts

@@ -6,6 +6,18 @@ export type TaskCreatedParams = { task_id: string, issue_id: string, title: stri
  * Topic correlation: the conversation this task was spawned for,
  * when the spawning chain knows one.
  */
-conversation_id?: string, };
+conversation_id?: string, 
+/**
+ * Task Decompose estimate in degrees; absent = no estimate produced.
+ * Consumers MUST use `!= null` — 0 is a legitimate zero-cost estimate.
+ *
+ * Round-21's finding: this field (and TaskEstimateUpdatedParams
+ * below) existed ONLY as a hand-edit in the generated binding — any
+ * regeneration silently wiped them from the published npm surface.
+ * They now live in the SOURCE, so regeneration is faithful.
+ */
+estimated_degrees?: number, };
+
+export type TaskEstimateUpdatedParams = { task_id: string, estimated_degrees?: number, };
 
 export type TaskStatusUpdateParams = { task_id: string, status: TaskStatus, progress: number, };

package/index.ts

@@ -16,7 +16,7 @@
 //   - Shadowed duplicates stay importable via deep imports
 //     (`import type { FileEntry } from "@celestia-island/plana-types/bindings/tools/kalos"`).
 //
-// The 6 current collisions (flat winner -> shadowed source):
+// The 7 current collisions (flat winner -> shadowed source):
 //
 //   WorkspaceStatusParams    ws/workspace        wins vs tools/aporia
 //   FileEntry                httpTypes           wins vs tools/kalos
@@ -24,10 +24,18 @@
 //   FileTreeEntry            ws/fileBrowsing     wins vs tools/kalos
 //   ContainerSnapshotParams  ws/stateSync        wins vs tools/neikos
 //   ReportHumanParams        tools/hubris          wins vs tools/orexis
+//   RbacGroup                httpTypes           wins vs protocol-core-httpTypes
+//     ↑ that winner is a STALE mirror: nothing in this crate generates it
+//     (it predates the RBAC DTOs moving to the foundation), and it survives
+//     only because UserProfileResponse — same file — references the bare
+//     name. The TRUTHFUL RbacGroup (builtin/personal-visibility fields,
+//     nullable description) is the foundation's, vendored into
+//     protocol-core-httpTypes; deep-import it from there until the DTOs
+//     move into this crate or ts-rs learns the cross-crate import.
 //
-// MAINTENANCE WARNING: the four exclusion lists are hand-maintained here —
+// MAINTENANCE WARNING: the five exclusion lists are hand-maintained here —
 // there is no generator script that rewrites this file. New types added to
-// the generated aporia/kalos/neikos/orexis files do NOT appear in the flat
+// the generated aporia/kalos/neikos/orexis/protocol-core-httpTypes files do NOT appear in the flat
 // surface unless their name is appended to the matching `export { ... }`
 // line below (keep the list alphabetically sorted). A type added with a
 // name that already exists on the flat surface is silently shadowed: it
@@ -70,7 +78,12 @@ export * from "./bindings/tools/hubris";
 export type { Annotation, FileCreateDirParams, FileDeleteParams, FileDeleteResult, FileEditParams, FileEditResult, FileExistsParams, FileExistsResult, FileGetInfoParams, FileInfoResult, FileListParams, FileListResult, FileReadResult, FileTreeListResult, FileWriteParams, FileWriteResult, ListAnnotationsResult, MkDirResult, ResolveAnnotationResult } from "./bindings/tools/kalos";
 export type { CheckWaitParams, ContainerCreateResult, ContainerFilterCriteria, ContainerForkParams, ContainerForkResult, ContainerInfoParams, ContainerInfoResult, ContainerListItem, ContainerListParams, ContainerListResult, ContainerRemoveParams, ContainerRemoveResult, ContainerSnapshotResult, ContainerStartParams, ContainerStartResult, ContainerStopParams, ContainerStopResult, ExecOnContainerParams, ExecResult, GitPushBranchParams, GitPushResult, NewContainerToolParams, NewContainerVolumeMount, SidecarDeliverResult, SidecarKillParams, SidecarSendParams, SidecarSendResult, SidecarSpawnParams, ToolchainEnsureParams, ToolchainEnsureResult, ToolchainListParams, ToolchainListResult, ToolchainProfileInfo, ToolchainVolumeSpec, VolumeInfo, WaitParams } from "./bindings/tools/neikos";
 export type { AgentIntegrityParams, AskResult, AuditAlignmentParams, AuditAlignmentResult, AuditFinding, AuditLegalityParams, AuditLegalityResult, BlockToolParams, CheckResultItem, ComplianceReportParams, ComplianceReportToolResult, ComplianceRule, ComplianceSummary, InspectToolCallParams, ManageSensitivityRulesParams, ReplyResult, ReportDetail, ReportHumanResult, RuleCheckResult, SecurityAuditParams, SecurityStatusParams, SecuritySuggestionsParams, SensitivityRule, SetNetworkPolicyParams, SetRiskThresholdParams, SetSecurityPolicyParams, StandardCheckParams, StandardCheckResult, StandardRegisterResult, UnblockToolParams } from "./bindings/tools/orexis";
-export type { GrantItem, GrantListResponse, MyPermissions, OAuthProvider, RbacGroupsResponse, RbacUser, RbacUsersResponse } from "./bindings/protocol-core-httpTypes";
+// Vendored foundation snapshot (see the file header there): RbacGroup stays
+// off this list on purpose — bindings/httpTypes already puts an identically
+// shaped RbacGroup on the flat surface — and HealthResponse is aliased to
+// ServiceHealthResponse so consumers that also bind their own backend's
+// /api/health HealthResponse never import two same-named shapes.
+export type { BackendKind, ConnectionStatus, CreatedResponse, DeletedResponse, ErrorResponse, GrantItem, GrantListResponse, HealthResponse as ServiceHealthResponse, IdResponse, MyPermissions, NetworkInfo, OAuthProvider, OkIdResponse, OkMessageResponse, OkResponse, PermissionsResponse, RbacGroupsResponse, RbacUser, RbacUsersResponse, ReadinessResponse, ServiceStatus, StatusResponse, VersionReport } from "./bindings/protocol-core-httpTypes";
 export * from "./bindings/tools/philia";
 export * from "./bindings/tools/polemos";
 export * from "./bindings/tools/skemma";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@celestia-island/plana-types",
-  "version": "0.1.9",
+  "version": "0.1.13",
   "repository": {
     "type": "git",
     "url": "https://github.com/celestia-island/plana"