@norskvideo/ctl-product-template-schema 0.1.55 → 0.1.57

package/index.js

@@ -240,7 +240,7 @@ export const ProductTemplateSideloadSchema = z
 export const ProductTemplateHostTlsSchema = z
     .object({
     services: z.array(z.string().min(1)).min(1).meta({
-        description: "Compose services that get the host certificate. Each must be a service in the template's own compose.yml. The runner mounts the certificate and key read-only at /etc/norsk-host-tls (cert.pem, key.pem) and sets NORSK_HOST_TLS_DIR=/etc/norsk-host-tls and NORSK_HOST_TLS_TRUSTED=true|false (true when the certificate is a real, browser-trusted one; false when the host's is self-signed). A host with no certificate mounts nothing and sets neither variable; the launch still goes ahead.",
+        description: "Compose services that get the host certificate. Each must be a service in the template's own compose.yml. The runner mounts the certificate and key read-only at /etc/norsk-host-tls (cert.pem, key.pem) and sets NORSK_HOST_TLS_DIR=/etc/norsk-host-tls. A host with no certificate mounts nothing and sets no variable; the launch still goes ahead.",
     }),
 })
     .meta({ id: "ProductTemplateHostTls", outputId: "ProductTemplateHostTls" });
@@ -255,7 +255,7 @@ export const ProductTemplateHostTlsSchema = z
 export const ProductTemplateWorkdirSchema = z
     .object({
     services: z.array(z.string().min(1)).min(1).meta({
-        description: "Compose services that get the instance working directory, read-write at /data -- the same directory, at the same path, that media and studio have -- with NORSK_WORKDIR=/data. Each must be a service in the template's own compose.yml. It survives relaunch, restart and runner upgrade; only `instance delete --purge` removes it.",
+        description: "Compose services that get the instance working directory, read-write at /data -- the same directory, at the same path, that media and studio have. Each must be a service in the template's own compose.yml. It survives relaunch, restart and runner upgrade; only `instance delete --purge` removes it.",
     }),
 })
     .meta({ id: "ProductTemplateWorkdir", outputId: "ProductTemplateWorkdir" });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@norskvideo/ctl-product-template-schema",
-  "version": "0.1.55",
+  "version": "0.1.57",
   "type": "module",
   "exports": {
     ".": {

package/read.d.ts

@@ -1,5 +1,17 @@
 import type { ProductTemplateParameter } from "./index.js";
 import { type ProductTemplateManifest } from "./index.js";
+/** The NORSK_ prefix is platform-injected (runtime identity, allocated ports,
+ *  the licence path...); mgr already refuses an operator value for one, so a
+ *  product declaring one asks for a value nobody may give it.
+ *
+ *  WARN-ONLY FOR ONE RELEASE, then a refusal (a superRefine on
+ *  ProductTemplateParameterSchema.name). Release order: relay (its NORSK_IMAGE
+ *  parameter became MEDIA_IMAGE) and db-chanel (NORSK_CTL_URL became CTL_URL)
+ *  ship first, then ctl and mgr with this warning, then the refusal. The
+ *  callers log what this returns at import, refresh, upload and metadata
+ *  update; nothing re-validates stored templates at startup. */
+export declare const RESERVED_PARAMETER_PREFIX = "NORSK_";
+export declare function reservedParameterNameWarnings(parameters: readonly ProductTemplateParameter[]): string[];
 /**
  * Error taxonomy for product-template lifecycle issues. Codes cover both the
  * "store + extract" path (ctl's ProductTemplateService — extraction, manifest

package/read.js

@@ -9,6 +9,23 @@
 // mgr (which stores raw bytes for relay) does not — so compose presence is a
 // reported fact here, not a verdict.
 import { ParametersFileSchema, ProductTemplateManifestSchema } from "./index.js";
+/** The NORSK_ prefix is platform-injected (runtime identity, allocated ports,
+ *  the licence path...); mgr already refuses an operator value for one, so a
+ *  product declaring one asks for a value nobody may give it.
+ *
+ *  WARN-ONLY FOR ONE RELEASE, then a refusal (a superRefine on
+ *  ProductTemplateParameterSchema.name). Release order: relay (its NORSK_IMAGE
+ *  parameter became MEDIA_IMAGE) and db-chanel (NORSK_CTL_URL became CTL_URL)
+ *  ship first, then ctl and mgr with this warning, then the refusal. The
+ *  callers log what this returns at import, refresh, upload and metadata
+ *  update; nothing re-validates stored templates at startup. */
+export const RESERVED_PARAMETER_PREFIX = "NORSK_";
+export function reservedParameterNameWarnings(parameters) {
+    return parameters
+        .filter((p) => p.name.startsWith(RESERVED_PARAMETER_PREFIX))
+        .map((p) => `parameter '${p.name}' uses the reserved ${RESERVED_PARAMETER_PREFIX} prefix, which the platform sets; ` +
+        "rename it without the prefix. A later release refuses such templates");
+}
 /**
  * Error taxonomy for product-template lifecycle issues. Codes cover both the
  * "store + extract" path (ctl's ProductTemplateService — extraction, manifest