@microck/canonfig 2.0.0

package/dist/synchronization/follower-sync-config.js

@@ -0,0 +1,81 @@
+import { Schema } from "effect";
+import { CertificateFingerprint, CredentialReference, ProfileId, ResourceId, Timestamp, } from "../domain/brand.js";
+import { AgentPolicy, FollowerIdentity } from "../domain/identity.js";
+import { ScheduleDefaultSchema } from "../domain/profile.js";
+import { ExecutableAuthorizationSchema } from "../domain/synchronization.js";
+export const SupportedAgentHarness = Schema.Literals([
+    "codex",
+    "claude",
+    "gemini",
+]);
+export const AgentHarnessCapability = Schema.Literals([
+    "elevation",
+    "login",
+    "restart",
+    "reboot",
+]);
+export const FollowerAgentHarnessConfiguration = Schema.Struct({
+    kind: SupportedAgentHarness,
+    executable: Schema.NonEmptyString,
+    environment: Schema.optional(Schema.Array(Schema.Struct({
+        name: Schema.NonEmptyString,
+        value: Schema.String,
+    }))),
+    maximumInputBytes: Schema.Int.check(Schema.isGreaterThan(0), Schema.isLessThanOrEqualTo(1024 * 1024)),
+    allowedPaths: Schema.Array(Schema.NonEmptyString),
+    allowedExecutables: Schema.Array(Schema.NonEmptyString),
+    executableAuthorizations: Schema.optional(Schema.Array(ExecutableAuthorizationSchema)),
+    allowedOrigins: Schema.Array(Schema.NonEmptyString),
+    allowedCapabilities: Schema.Array(AgentHarnessCapability),
+});
+export const LocalOverlayEntrySchema = Schema.Struct({
+    resource: ResourceId,
+    /** Optional for schemaVersion 1 configurations written before targets were recorded. */
+    target: Schema.optional(Schema.NonEmptyString),
+    keys: Schema.Array(Schema.NonEmptyString),
+});
+export const FollowerSynchronizationConfiguration = Schema.Struct({
+    schemaVersion: Schema.Literal(1),
+    follower: FollowerIdentity,
+    selectedProfile: ProfileId,
+    source: Schema.Struct({
+        endpoint: Schema.NonEmptyString,
+        tlsFingerprint: CertificateFingerprint,
+        signingFingerprint: CertificateFingerprint,
+    }),
+    credentialReference: CredentialReference,
+    cacheDirectory: Schema.NonEmptyString,
+    stateLocation: Schema.NonEmptyString,
+    agentPolicy: AgentPolicy,
+    /** Set only between source preparation and source finalization. */
+    enrollmentPending: Schema.optional(Schema.Literal(true)),
+    /** Last authorized profile-level default schedule, for durable status/recovery. */
+    scheduleDefault: Schema.optional(ScheduleDefaultSchema),
+    agentHarness: Schema.optional(FollowerAgentHarnessConfiguration),
+    localOverlay: Schema.optional(Schema.Array(LocalOverlayEntrySchema)),
+    scheduledInvocation: Schema.Struct({
+        mode: Schema.Literal("apply"),
+        noInput: Schema.Literal(true),
+        timeoutMilliseconds: Schema.Int.check(Schema.isGreaterThanOrEqualTo(1_000), Schema.isLessThanOrEqualTo(300_000)),
+        maximumMetadataBytes: Schema.Int.check(Schema.isGreaterThan(0)),
+        maximumBlobBytes: Schema.Int.check(Schema.isGreaterThan(0)),
+    }),
+    updatedAt: Timestamp,
+});
+export const defaultScheduledInvocation = {
+    mode: "apply",
+    noInput: true,
+    timeoutMilliseconds: 10_000,
+    maximumMetadataBytes: 1024 * 1024,
+    maximumBlobBytes: 8 * 1024 * 1024,
+};
+export class FollowerSynchronizationConfigurationError extends Schema.TaggedError()("FollowerSynchronizationConfigurationError", {
+    reason: Schema.Literals([
+        "missing",
+        "stale",
+        "invalid-profile",
+        "invalid-reference",
+    ]),
+    message: Schema.String,
+}) {
+}