@norskvideo/ctl-product-template-schema 0.1.31 → 0.1.33

package/index.d.ts

@@ -55,6 +55,14 @@ export declare const ProductTemplateSideloadSchema: z.ZodObject<{
     llmVenv: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type ProductTemplateSideload = z.infer<typeof ProductTemplateSideloadSchema>;
+export declare const ProductTemplateHostTlsSchema: z.ZodObject<{
+    services: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type ProductTemplateHostTls = z.infer<typeof ProductTemplateHostTlsSchema>;
+export declare const ProductTemplateWorkdirSchema: z.ZodObject<{
+    services: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type ProductTemplateWorkdir = z.infer<typeof ProductTemplateWorkdirSchema>;
 export declare const ProductTemplateAcceleratorSchema: z.ZodEnum<{
     none: "none";
     nvidia: "nvidia";
@@ -316,6 +324,12 @@ export declare const ProductTemplateManifestSchema: z.ZodObject<{
             configPath: z.ZodString;
         }, z.core.$strict>]>>;
     }, z.core.$strict>>>;
+    workdir: z.ZodOptional<z.ZodObject<{
+        services: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    hostTls: z.ZodOptional<z.ZodObject<{
+        services: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
     migration: z.ZodOptional<z.ZodObject<{
         strategy: z.ZodEnum<{
             overlap: "overlap";
@@ -551,6 +565,12 @@ export declare const ProductTemplateMaterialsSchema: z.ZodObject<{
                 configPath: z.ZodString;
             }, z.core.$strict>]>>;
         }, z.core.$strict>>>;
+        workdir: z.ZodOptional<z.ZodObject<{
+            services: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
+        hostTls: z.ZodOptional<z.ZodObject<{
+            services: z.ZodArray<z.ZodString>;
+        }, z.core.$strip>>;
         migration: z.ZodOptional<z.ZodObject<{
             strategy: z.ZodEnum<{
                 overlap: "overlap";

package/index.js

@@ -191,6 +191,34 @@ export const ProductTemplateSideloadSchema = z
     }),
 })
     .meta({ id: "ProductTemplateSideload", outputId: "ProductTemplateSideload" });
+// The host's own TLS certificate, handed to a product's containers. WHY THIS
+// EXISTS: norsk-ctl already holds the certificate the host is reached by, and a
+// product that serves TLS itself (relays in a cluster talk HTTPS to each other,
+// and later run QUIC listeners) needs the same identity rather than minting a
+// self-signed one nobody trusts. Additive: an older runner ignoring the field
+// still launches the product, which then simply has no certificate mounted.
+export const ProductTemplateHostTlsSchema = z
+    .object({
+    services: z.array(z.string().min(1)).min(1).meta({
+        description: "Compose services that get the host certificate. Each must be a service in the template's own compose.yml. The runner mounts the certificate and key read-only at /etc/norsk-host-tls (cert.pem, key.pem) and sets NORSK_HOST_TLS_DIR=/etc/norsk-host-tls and NORSK_HOST_TLS_TRUSTED=true|false (true when the certificate is a real, browser-trusted one; false when the host's is self-signed). A host with no certificate mounts nothing and sets neither variable; the launch still goes ahead.",
+    }),
+})
+    .meta({ id: "ProductTemplateHostTls", outputId: "ProductTemplateHostTls" });
+// The instance working directory, handed to a product's own services. WHY THIS
+// EXISTS: it is the one per-instance store that survives a relaunch (a named
+// volume does not: relaunch tears down with `down -v`), and the runner mounts
+// it at /data only into media and studio. A product whose own service keeps
+// state -- a relay's state file and site key -- or writes files the engine must
+// read (assets, recordings) needs the same directory at the same path. A
+// product relying on it declares the runner capability `service-workdir`,
+// since an older runner would ignore the field and lose the state.
+export const ProductTemplateWorkdirSchema = z
+    .object({
+    services: z.array(z.string().min(1)).min(1).meta({
+        description: "Compose services that get the instance working directory, read-write at /data -- the same directory, at the same path, that media and studio have -- with NORSK_WORKDIR=/data. Each must be a service in the template's own compose.yml. It survives relaunch, restart and runner upgrade; only `instance delete --purge` removes it.",
+    }),
+})
+    .meta({ id: "ProductTemplateWorkdir", outputId: "ProductTemplateWorkdir" });
 // Placement requirements guidance (requirements-authoring.md). Each dimension
 // the placer reasons over — capacity (vCPUs), cores, GPU, capabilities, host
 // ports — is optionally declared with a `mode`:
@@ -337,6 +365,12 @@ export const ProductTemplateManifestSchema = z
         description: "Host-port bindings whose value rides a product-template parameter. Opt-in per launch via the param value: absent = closed, 'auto' = allocate a free port from `preferred`, number = use it. When opened the port is published as a managed host binding and surfaced to the containers via compose interpolation. Alongside the per-param scalars the runner sets NORSK_ALLOCATED_PORTS: a JSON object keyed by param, each value {port, protocol, service?}, describing every opened port ('{}' when none opted in; unset when nothing is declared) — so a product needing the allocation as data maps one var instead of folding scalars into JSON via interpolation.",
     }),
     logs: ProductTemplateLogsSchema.optional(),
+    workdir: ProductTemplateWorkdirSchema.optional().meta({
+        description: "Mount the instance working directory at /data into the named compose services, as media and studio always have it -- for a product's own service that keeps state across relaunch or shares files with the engine. Absent = not mounted. Declare the runner capability `service-workdir` alongside it.",
+    }),
+    hostTls: ProductTemplateHostTlsSchema.optional().meta({
+        description: "Mount the host's TLS certificate and key, read-only, into the named compose services — for a product that serves TLS itself. Copied per launch, so a rotated certificate is picked up on relaunch. Absent = nothing mounted.",
+    }),
     migration: ProductTemplateMigrationSchema.optional().meta({
         description: "How a running instance may be moved between nodes. `strategy` is the strongest promise the product keeps: `overlap` (target started, then source stopped — both may produce briefly), `stopThenStart` (the default when absent — target prepared but not started, source stopped, target started), or `handover` (the job speaks the worker's migration socket and hands over at an exact position). A migrate request may down-grade to a safer strategy but never up-grade past the declaration. Only the manager reads this; the worker never does.",
     }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@norskvideo/ctl-product-template-schema",
-  "version": "0.1.31",
+  "version": "0.1.33",
   "type": "module",
   "exports": {
     ".": {