@norskvideo/ctl-product-template-schema 0.1.50 → 0.1.52

package/index.d.ts

@@ -150,6 +150,11 @@ export declare const ProductTemplateMigrationSchema: z.ZodObject<{
     }>;
 }, z.core.$strip>;
 export type ProductTemplateMigration = z.infer<typeof ProductTemplateMigrationSchema>;
+export declare const ProductTemplateLeaseSchema: z.ZodObject<{
+    protected: z.ZodLiteral<true>;
+    graceMs: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strip>;
+export type ProductTemplateLease = z.infer<typeof ProductTemplateLeaseSchema>;
 export declare const PRODUCT_TEMPLATE_WORKLOAD_ROLES: readonly ["viewer", "operator", "builder"];
 export declare const ProductTemplateWorkloadSchema: z.ZodObject<{
     role: z.ZodEnum<{
@@ -352,6 +357,10 @@ export declare const ProductTemplateManifestSchema: z.ZodObject<{
         name: z.ZodString;
         version: z.ZodNumber;
     }, z.core.$catchall<z.ZodUnknown>>>>;
+    lease: z.ZodOptional<z.ZodObject<{
+        protected: z.ZodLiteral<true>;
+        graceMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
     migration: z.ZodOptional<z.ZodObject<{
         strategy: z.ZodEnum<{
             overlap: "overlap";
@@ -609,6 +618,10 @@ export declare const ProductTemplateMaterialsSchema: z.ZodObject<{
             name: z.ZodString;
             version: z.ZodNumber;
         }, z.core.$catchall<z.ZodUnknown>>>>;
+        lease: z.ZodOptional<z.ZodObject<{
+            protected: z.ZodLiteral<true>;
+            graceMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
         migration: z.ZodOptional<z.ZodObject<{
             strategy: z.ZodEnum<{
                 overlap: "overlap";

package/index.js

@@ -320,6 +320,24 @@ export const ProductTemplateMigrationSchema = z
     }),
 })
     .meta({ id: "ProductTemplateMigration", outputId: "ProductTemplateMigration" });
+// Lease-protected instances (norsk task 115 Phase 6; protocol 1.6). A product
+// whose instance holds something that must never be in use by two encoders
+// at once — an Akamai entry point, a multicast address, a SIP number —
+// declares it here; the Manager does not need to know what the thing is.
+// An instance lost uncleanly (its worker dropped off the network) is then
+// not started again until `graceMs` has passed (absent: the deployment's,
+// 60 s by default), and its worker stops it when it can no longer reach a
+// live Manager. A clean stop needs no grace. Pair it with the default
+// `stopThenStart` migration: an `overlap` migration would run two at once,
+// which the Manager refuses for a lease-protected instance.
+export const ProductTemplateLeaseSchema = z
+    .object({
+    protected: z.literal(true).meta({ description: "This product's instances are lease-protected." }),
+    graceMs: z.number().int().positive().max(3_600_000).optional().meta({
+        description: "How long an instance whose worker was lost uncleanly waits before it may start elsewhere, in ms. Must exceed the workers' lease deadline (30 s by default) by a margin. Absent: the deployment's (60 s by default).",
+    }),
+})
+    .meta({ id: "ProductTemplateLease", outputId: "ProductTemplateLease" });
 // The roles a template may declare for its instances' workload: at most
 // builder, since registering a template takes builder and that registration is
 // the consent. Built-in names only, whose meaning every host agrees on.
@@ -388,6 +406,9 @@ export const ProductTemplateManifestSchema = z
     interfaces: z.array(ProductTemplateInterfaceSchema).optional().meta({
         description: "Named, versioned contracts this template implements (e.g. norsk.io/media-conversion), so a client can find the templates that implement one whatever product built them. Each entry is carried verbatim; the runner checks only contracts it knows, so a template declaring one an older ctl does not know still launches. Absent = implements none.",
     }),
+    lease: ProductTemplateLeaseSchema.optional().meta({
+        description: "Lease-protected instances: each holds something that must never be in use by two encoders at once. An instance lost uncleanly is not started again until its grace has passed; a clean stop needs none.",
+    }),
     migration: ProductTemplateMigrationSchema.optional().meta({
         description: "How a running instance may be moved between nodes. `strategy` is the strongest promise the product keeps: `overlap` (target started, then source stopped — both may produce briefly), `stopThenStart` (the default when absent — target prepared but not started, source stopped, target started), or `handover` (the job speaks the worker's migration socket and hands over at an exact position). A migrate request may down-grade to a safer strategy but never up-grade past the declaration. Only the manager reads this; the worker never does.",
     }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@norskvideo/ctl-product-template-schema",
-  "version": "0.1.50",
+  "version": "0.1.52",
   "type": "module",
   "exports": {
     ".": {