@hasna/capacity 0.1.0

package/dist/domain/native-subscription.d.ts

@@ -0,0 +1,211 @@
+import { KeyObject, type KeyLike } from "node:crypto";
+import { type Counter } from "./counter";
+import type { OnlineGenerationReceiptUseCasRequest, OnlineGenerationReceiptUseCasResult, OnlineGenerationReceiptUseStore } from "./online-generation-receipt";
+export declare const NATIVE_SUBSCRIPTION_PROBE_REQUEST_SCHEMA_VERSION: "accounts.native-subscription-probe-request/v1";
+export declare const NATIVE_SUBSCRIPTION_PROBE_RESULT_SCHEMA_VERSION: "accounts.native-subscription-probe-result/v1";
+export declare const CAPSULE_MAINTENANCE_REQUEST_SCHEMA_VERSION: "accounts.capsule-maintenance-request/v1";
+export declare const CAPSULE_MAINTENANCE_GRANT_SCHEMA_VERSION: "accounts.capsule-maintenance/v1";
+export declare const CAPSULE_MAINTENANCE_CONSUME_REQUEST_SCHEMA_VERSION: "accounts.capsule-maintenance-consume-request/v1";
+export declare const CAPSULE_MAINTENANCE_CONSUME_RECEIPT_SCHEMA_VERSION: "accounts.capsule-maintenance-consume-receipt/v1";
+export type CapsuleMaintenanceTargetKind = "account_record" | "native_capsule";
+export type CapsuleMaintenanceCommand = "SUSPEND_ACCOUNT" | "RESUME_ACCOUNT" | "REVOKE_ACCOUNT" | "REFRESH_CAPSULE" | "BEGIN_REAUTH" | "ROTATE_CAPSULE" | "REVOKE_CAPSULE";
+export interface NativeSubscriptionProbeRequest {
+    readonly schema_version: typeof NATIVE_SUBSCRIPTION_PROBE_REQUEST_SCHEMA_VERSION;
+    readonly command: "PROBE_NATIVE";
+    readonly owner_ref: string;
+    readonly provider_account_id: string;
+    readonly subscription_id: string;
+    readonly account_lane_id: string;
+    readonly auth_capsule_id: string;
+    readonly canonical_node_id: string;
+    readonly node_key_thumbprint: string;
+    readonly node_generation: Counter;
+    readonly placement_generation: Counter;
+    readonly auth_generation: Counter;
+    readonly auth_state_revision: Counter;
+}
+export interface NativeSubscriptionBindingSnapshot {
+    readonly ownerRef: string;
+    readonly providerAccountId: string;
+    readonly subscriptionId: string;
+    readonly accountLaneId: string;
+    readonly authCapsuleId: string;
+    readonly canonicalNodeId: string;
+    readonly nodeKeyThumbprint: string;
+    readonly nodeGeneration: Counter;
+    readonly placementGeneration: Counter;
+    readonly authGeneration: Counter;
+    readonly authStateRevision: Counter;
+    readonly accountRevision: Counter;
+    readonly capsuleRevision: Counter;
+    readonly accountStatus: "active" | "suspended" | "revoked";
+    readonly subscriptionStatus: "active" | "paused" | "expired" | "revoked";
+    readonly accountLaneStatus: "ready" | "draining" | "disabled" | "retired";
+    readonly capsuleStatus: "ready" | "degraded" | "maintenance" | "quiescing" | "revoked";
+    readonly liveLeaseCount: Counter;
+    readonly drainState: "not_started" | "draining" | "drained";
+    readonly zeroLiveEvidenceDigest: string;
+    readonly drainEvidenceDigest: string;
+    readonly evidenceExpiresAt: string;
+}
+export interface NativeSubscriptionSnapshotSource {
+    read(accountLaneId: string): NativeSubscriptionBindingSnapshot | undefined | Promise<NativeSubscriptionBindingSnapshot | undefined>;
+}
+export interface NativeSubscriptionProbeResult {
+    readonly schema_version: typeof NATIVE_SUBSCRIPTION_PROBE_RESULT_SCHEMA_VERSION;
+    readonly capability_eligible: boolean;
+    readonly maintenance_ready: boolean;
+    readonly reason_codes: readonly string[];
+    readonly owner_ref: string;
+    readonly provider_account_id: string;
+    readonly subscription_id: string;
+    readonly account_lane_id: string;
+    readonly auth_capsule_id: string;
+    readonly canonical_node_id: string;
+    readonly node_key_thumbprint: string;
+    readonly node_generation: Counter;
+    readonly placement_generation: Counter;
+    readonly auth_generation: Counter;
+    readonly auth_state_revision: Counter;
+    readonly account_revision: Counter;
+    readonly capsule_revision: Counter;
+    readonly account_status: NativeSubscriptionBindingSnapshot["accountStatus"];
+    readonly subscription_status: NativeSubscriptionBindingSnapshot["subscriptionStatus"];
+    readonly account_lane_status: NativeSubscriptionBindingSnapshot["accountLaneStatus"];
+    readonly capsule_status: NativeSubscriptionBindingSnapshot["capsuleStatus"];
+    readonly live_lease_count: Counter;
+    readonly drain_state: NativeSubscriptionBindingSnapshot["drainState"];
+    readonly zero_live_evidence_digest: string;
+    readonly drain_evidence_digest: string;
+    readonly evidence_expires_at: string;
+    readonly binding_digest: string;
+}
+export interface CapsuleMaintenanceRequest extends Omit<NativeSubscriptionProbeRequest, "schema_version" | "command"> {
+    readonly schema_version: typeof CAPSULE_MAINTENANCE_REQUEST_SCHEMA_VERSION;
+    readonly target_kind: CapsuleMaintenanceTargetKind;
+    readonly command: CapsuleMaintenanceCommand;
+    readonly expected_target_revision: Counter;
+    readonly zero_live_evidence_digest: string;
+    readonly drain_evidence_digest: string;
+    readonly idempotency_key_digest: string;
+}
+export interface CapsuleMaintenanceGrant extends Omit<CapsuleMaintenanceRequest, "schema_version"> {
+    readonly schema_version: typeof CAPSULE_MAINTENANCE_GRANT_SCHEMA_VERSION;
+    readonly grant_id: string;
+    readonly issuer: string;
+    readonly issuer_incarnation: string;
+    readonly key_id: string;
+    readonly audience: string;
+    readonly request_digest: string;
+    readonly issued_at: string;
+    readonly expires_at: string;
+    readonly signature: string;
+}
+export interface CapsuleMaintenanceConsumeRequest {
+    readonly schema_version: typeof CAPSULE_MAINTENANCE_CONSUME_REQUEST_SCHEMA_VERSION;
+    readonly grant_id: string;
+    readonly operation_id: string;
+    readonly request_digest: string;
+    readonly idempotency_key_digest: string;
+}
+export interface CapsuleMaintenanceConsumeReceipt {
+    readonly schema_version: typeof CAPSULE_MAINTENANCE_CONSUME_RECEIPT_SCHEMA_VERSION;
+    readonly grant_id: string;
+    readonly operation_id: string;
+    readonly issuer: string;
+    readonly issuer_incarnation: string;
+    readonly key_id: string;
+    readonly audience: string;
+    readonly target_kind: CapsuleMaintenanceTargetKind;
+    readonly command: CapsuleMaintenanceCommand;
+    readonly owner_ref: string;
+    readonly provider_account_id: string;
+    readonly subscription_id: string;
+    readonly account_lane_id: string;
+    readonly auth_capsule_id: string;
+    readonly canonical_node_id: string;
+    readonly node_key_thumbprint: string;
+    readonly auth_generation: Counter;
+    readonly auth_state_revision: Counter;
+    readonly grant_request_digest: string;
+    readonly consume_request_digest: string;
+    readonly consumed_at: string;
+    readonly signature: string;
+}
+export interface CapsuleMaintenanceTrust {
+    readonly issuer: string;
+    readonly issuerIncarnation: string;
+    readonly keyId: string;
+    readonly audience: string;
+    readonly publicKey: KeyObject | string | Buffer;
+}
+export interface CapsuleMaintenanceAuthorityOptions extends CapsuleMaintenanceTrust {
+    readonly privateKey: KeyLike;
+    readonly snapshots: NativeSubscriptionSnapshotSource;
+    readonly clock?: () => Date;
+    readonly idFactory?: (nowMs: number) => string;
+    readonly grantLifetimeMs?: number;
+}
+export interface CapsuleMaintenanceTransport {
+    readonly authenticatedOwnerRef: string;
+    readonly authenticatedNodeKeyThumbprint: string;
+}
+export declare function evaluateNativeSubscriptionProbe(source: unknown, snapshotSource: NativeSubscriptionSnapshotSource, authenticatedOwnerRef: string, now?: Date): Promise<NativeSubscriptionProbeResult>;
+/**
+ * Process-local POC authority. Production adapters must persist issuance,
+ * consumption, and idempotency records in one durable atomic authority.
+ */
+export declare class CapsuleMaintenanceAuthority {
+    private readonly options;
+    private readonly publicKey;
+    private readonly clock;
+    private readonly idFactory;
+    private readonly grantLifetimeMs;
+    private readonly issued;
+    private readonly consumed;
+    private tail;
+    constructor(options: CapsuleMaintenanceAuthorityOptions);
+    probe(source: unknown, authenticatedOwnerRef: string): Promise<NativeSubscriptionProbeResult>;
+    issueMaintenanceGrant(source: unknown, authenticatedOwnerRef: string): Promise<CapsuleMaintenanceGrant>;
+    consumeMaintenanceGrant(grantSource: Uint8Array, consumeSource: unknown, transport: CapsuleMaintenanceTransport): Promise<CapsuleMaintenanceConsumeReceipt>;
+    private now;
+    private newId;
+    private serialize;
+}
+export declare function verifyCapsuleMaintenanceGrant(source: Uint8Array, trust: CapsuleMaintenanceTrust, now: Date): CapsuleMaintenanceGrant;
+export interface NativeCapabilityUseCurrentState {
+    readonly catalogIncarnation: string;
+    readonly recoveryFrontierSequence: Counter;
+    readonly recoveryFrontierHash: string;
+}
+export interface InMemoryNativeCapabilityUseStoreOptions {
+    readonly issuer: string;
+    readonly issuerIncarnation: string;
+    readonly keyId: string;
+    readonly audience: string;
+    readonly privateKey: KeyLike;
+    readonly clock?: () => Date;
+    readonly idFactory?: (nowMs: number) => string;
+    readonly validateCurrent: (request: OnlineGenerationReceiptUseCasRequest) => NativeCapabilityUseCurrentState | Promise<NativeCapabilityUseCurrentState>;
+}
+/**
+ * Process-local conformance adapter only. It proves CAS/replay semantics but is
+ * deliberately not a production substitute for the durable Accounts store.
+ */
+export declare class InMemoryNativeCapabilityUseStore implements OnlineGenerationReceiptUseStore {
+    private readonly options;
+    private readonly clock;
+    private readonly idFactory;
+    private readonly requests;
+    private readonly capabilities;
+    private tail;
+    constructor(options: InMemoryNativeCapabilityUseStoreOptions);
+    compareAndConsume(source: OnlineGenerationReceiptUseCasRequest): Promise<OnlineGenerationReceiptUseCasResult>;
+    private serialize;
+}
+export declare class StaticNativeSubscriptionSnapshotSource implements NativeSubscriptionSnapshotSource {
+    private readonly records;
+    constructor(records: readonly NativeSubscriptionBindingSnapshot[]);
+    read(accountLaneId: string): NativeSubscriptionBindingSnapshot | undefined;
+}
+export declare function parseNativeSubscriptionProbeRequest(source: unknown): NativeSubscriptionProbeRequest;