@forgezero/agent 0.1.2 → 0.1.9

package/dist/metal-helper-socket.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/metal-isolation.d.ts

@@ -0,0 +1,14 @@
+import { type MetalExec, type MetalProvisionProfile } from './metal-provision';
+/** Aggregate boundary for every QEMU service on one physical host. */
+export declare function metalGuestSliceUnit(profile: MetalProvisionProfile): string;
+/** Keep host daemons and interactive sessions off every guest CPU. */
+export declare function metalHousekeepingDropIn(profile: MetalProvisionProfile, kind: 'slice' | 'scope'): string;
+/**
+ * Persist and activate the host/guest cgroup boundary.
+ *
+ * Existing ForgeZero guests are never silently moved: changing a service's
+ * Slice requires a restart, so an old QEMU still under system.slice makes this
+ * operation fail before host restrictions are applied. The operator can then
+ * drain and restart it deliberately.
+ */
+export declare function applyMetalIsolation(profile: MetalProvisionProfile, exec?: MetalExec): Promise<void>;

package/dist/metal-isolation.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/metal-provision.d.ts

@@ -0,0 +1,85 @@
+import type { CreateRemoteProvisionClaim, RemoteProvisionClaim, ProvisionResult } from './provisioning-pull';
+export interface MetalImage {
+    path: string;
+    sha256: string;
+}
+/** One non-overlapping physical isolation boundary available to one guest. */
+export interface MetalCpuPool {
+    key: string;
+    /** Linux CPU-list syntax, including every SMT sibling in this pool. */
+    cpus: string;
+    /** Real cores represented by cpus; checked against the commercial promise. */
+    physicalCores: number;
+    /** Linux NUMA node-list syntax. Optional on a non-NUMA machine. */
+    memoryNodes?: string;
+}
+export interface MetalProvisionProfile {
+    volumeGroup: string;
+    bridge: string;
+    subnetPrefix: string;
+    addressStart: number;
+    addressEnd: number;
+    gateway: string;
+    nameservers?: readonly string[];
+    stateDir: string;
+    seedDir: string;
+    unitDir: string;
+    apiUrl: string;
+    images: Record<string, MetalImage>;
+    /** Explicit host-observed pools. No pool means no dynamic guest authority. */
+    cpuPools: readonly MetalCpuPool[];
+    /** CPUs kept outside every guest pool for the host and control services. */
+    housekeepingCpus: string;
+    /** NUMA nodes reserved for host allocations when the topology permits it. */
+    housekeepingMemoryNodes?: string;
+    bunVersion: string;
+    bunInstallerSha256: string;
+    agentVersion: string;
+    confidential?: {
+        cbitpos: number;
+        reducedPhysBits: number;
+        policy: string;
+    };
+}
+export interface MetalCommandResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export type MetalExec = (argv: readonly string[]) => Promise<MetalCommandResult>;
+export interface GuestManifest {
+    computeKey: string;
+    reference: string;
+    name: string;
+    address: string;
+    mac: string;
+    cpuPoolKey: string;
+    allowedCpus: string;
+    allowedMemoryNodes?: string;
+    phase: 'allocating' | 'image-ready' | 'running';
+}
+export declare class MetalProvisionError extends Error {
+}
+export declare const guestNameFor: (computeKey: string) => string;
+/** Linux interface names are capped at 15 bytes. */
+export declare const tapNameFor: (computeKey: string) => string;
+export declare const macForAddress: (address: string) => string;
+export declare function validateMetalProfile(profile: MetalProvisionProfile): void;
+export declare function allocateAddress(profile: MetalProvisionProfile, computeKey: string, rows: GuestManifest[]): string;
+/** Stable tight-fit allocation of one exclusive CPU/NUMA pool. */
+export declare function allocateCpuPool(profile: MetalProvisionProfile, claim: Pick<RemoteProvisionClaim, 'computeKey' | 'spec'>, rows: GuestManifest[]): MetalCpuPool;
+export declare function guestBootstrapScript(profile: MetalProvisionProfile, attested?: boolean): string;
+export declare function guestAgentUnit(profile: MetalProvisionProfile, name: string, attested?: boolean): string;
+/** Removed by the root cleanup service once the non-secret binding is durable. */
+export declare function guestEnrolmentDropIn(): string;
+export declare function guestEnrolmentCleanupScript(): string;
+export declare function guestEnrolmentCleanupUnit(): string;
+export declare function cloudInit(profile: MetalProvisionProfile, claim: CreateRemoteProvisionClaim, manifest: GuestManifest): {
+    userData: string;
+    metaData: string;
+    networkConfig: string;
+};
+/** The only root operation the metal agent may request. */
+export declare function provisionMetalGuest(profile: MetalProvisionProfile, claim: CreateRemoteProvisionClaim, exec: MetalExec): Promise<ProvisionResult>;
+/** Idempotently remove every host-owned artifact before capacity is returned. */
+export declare function removeMetalGuest(profile: MetalProvisionProfile, claim: RemoteProvisionClaim, exec: MetalExec): Promise<ProvisionResult>;