@norskvideo/ctl-product-template-schema 0.1.31 → 0.1.32

package/index.d.ts

@@ -55,6 +55,10 @@ export declare const ProductTemplateSideloadSchema: z.ZodObject<{
     llmVenv: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ProductTemplateSideload = z.infer<typeof ProductTemplateSideloadSchema>;
+export declare const ProductTemplateHostTlsSchema: z.ZodObject<{
+    services: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type ProductTemplateHostTls = z.infer<typeof ProductTemplateHostTlsSchema>;
 export declare const ProductTemplateAcceleratorSchema: z.ZodEnum<{
     none: "none";
     nvidia: "nvidia";
@@ -316,6 +320,9 @@ export declare const ProductTemplateManifestSchema: z.ZodObject<{
             configPath: z.ZodString;
         }, z.core.$strict>]>>;
     }, z.core.$strict>>>;
+    hostTls: z.ZodOptional<z.ZodObject<{
+        services: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
     migration: z.ZodOptional<z.ZodObject<{
         strategy: z.ZodEnum<{
             overlap: "overlap";
@@ -551,6 +558,9 @@ export declare const ProductTemplateMaterialsSchema: z.ZodObject<{
                 configPath: z.ZodString;
             }, z.core.$strict>]>>;
         }, z.core.$strict>>>;
+        hostTls: z.ZodOptional<z.ZodObject<{
+            services: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
         migration: z.ZodOptional<z.ZodObject<{
             strategy: z.ZodEnum<{
                 overlap: "overlap";

package/index.js

@@ -191,6 +191,19 @@ export const ProductTemplateSideloadSchema = z
     }),
 })
     .meta({ id: "ProductTemplateSideload", outputId: "ProductTemplateSideload" });
+// The host's own TLS certificate, handed to a product's containers. WHY THIS
+// EXISTS: norsk-ctl already holds the certificate the host is reached by, and a
+// product that serves TLS itself (relays in a cluster talk HTTPS to each other,
+// and later run QUIC listeners) needs the same identity rather than minting a
+// self-signed one nobody trusts. Additive: an older runner ignoring the field
+// still launches the product, which then simply has no certificate mounted.
+export const ProductTemplateHostTlsSchema = z
+    .object({
+    services: z.array(z.string().min(1)).min(1).meta({
+        description: "Compose services that get the host certificate. Each must be a service in the template's own compose.yml. The runner mounts the certificate and key read-only at /etc/norsk-host-tls (cert.pem, key.pem) and sets NORSK_HOST_TLS_DIR=/etc/norsk-host-tls and NORSK_HOST_TLS_TRUSTED=true|false (true when the certificate is a real, browser-trusted one; false when the host's is self-signed). A host with no certificate mounts nothing and sets neither variable; the launch still goes ahead.",
+    }),
+})
+    .meta({ id: "ProductTemplateHostTls", outputId: "ProductTemplateHostTls" });
 // Placement requirements guidance (requirements-authoring.md). Each dimension
 // the placer reasons over — capacity (vCPUs), cores, GPU, capabilities, host
 // ports — is optionally declared with a `mode`:
@@ -337,6 +350,9 @@ export const ProductTemplateManifestSchema = z
         description: "Host-port bindings whose value rides a product-template parameter. Opt-in per launch via the param value: absent = closed, 'auto' = allocate a free port from `preferred`, number = use it. When opened the port is published as a managed host binding and surfaced to the containers via compose interpolation. Alongside the per-param scalars the runner sets NORSK_ALLOCATED_PORTS: a JSON object keyed by param, each value {port, protocol, service?}, describing every opened port ('{}' when none opted in; unset when nothing is declared) — so a product needing the allocation as data maps one var instead of folding scalars into JSON via interpolation.",
     }),
     logs: ProductTemplateLogsSchema.optional(),
+    hostTls: ProductTemplateHostTlsSchema.optional().meta({
+        description: "Mount the host's TLS certificate and key, read-only, into the named compose services — for a product that serves TLS itself. Copied per launch, so a rotated certificate is picked up on relaunch. Absent = nothing mounted.",
+    }),
     migration: ProductTemplateMigrationSchema.optional().meta({
         description: "How a running instance may be moved between nodes. `strategy` is the strongest promise the product keeps: `overlap` (target started, then source stopped — both may produce briefly), `stopThenStart` (the default when absent — target prepared but not started, source stopped, target started), or `handover` (the job speaks the worker's migration socket and hands over at an exact position). A migrate request may down-grade to a safer strategy but never up-grade past the declaration. Only the manager reads this; the worker never does.",
     }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@norskvideo/ctl-product-template-schema",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "type": "module",
   "exports": {
     ".": {