@norskvideo/ctl-sdk 0.1.17 → 0.1.19

package/docker-runner.d.ts

@@ -11,6 +11,10 @@ export declare function productRunArgs(image: string, hostPort: number): string[
  *  `docker ps` shows `norsk-product-studio` instead of a random docker alias.
  *  Mirrors the singleton naming of norsk-proxy / norsk-ctl-cpu-monitor. */
 export declare function productContainerName(productName: string): string;
+/** An `@sha256:...` (or any `@algo:hex`) reference names one immutable image,
+ *  so there is nothing to refresh; a tag can move under a registration. */
+export declare function isDigestRef(image: string): boolean;
+export declare function dockerPull(image: string): Promise<void>;
 export declare function dockerRun(image: string, hostPort: number): Promise<string>;
 export declare function dockerRm(containerId: string): Promise<void>;
 /** Best-effort rename of a running container. The product is tracked by

package/docker-runner.js

@@ -30,6 +30,19 @@ export function productContainerName(productName) {
         .replace(/^-+|-+$/g, "");
     return `norsk-product-${slug || "unnamed"}`;
 }
+/** An `@sha256:...` (or any `@algo:hex`) reference names one immutable image,
+ *  so there is nothing to refresh; a tag can move under a registration. */
+export function isDigestRef(image) {
+    return /@[a-z0-9]+:[0-9a-f]+$/i.test(image);
+}
+export async function dockerPull(image) {
+    const proc = Bun.spawn(["docker", "pull", image], { stdout: "pipe", stderr: "pipe" });
+    const exitCode = await proc.exited;
+    const stderr = (await new Response(proc.stderr).text()).trim();
+    if (exitCode !== 0) {
+        throw new ProductError("DOCKER_PULL_FAILED", `docker pull failed (exit ${exitCode}): ${stderr || "no stderr"}`);
+    }
+}
 export async function dockerRun(image, hostPort) {
     const proc = Bun.spawn(["docker", ...productRunArgs(image, hostPort)], { stdout: "pipe", stderr: "pipe" });
     const exitCode = await proc.exited;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@norskvideo/ctl-sdk",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "type": "module",
   "exports": {
     ".": {

package/product-error.d.ts

@@ -1,4 +1,4 @@
 export declare class ProductError extends Error {
-    code: "DEV_URL_INVALID" | "DEV_URL_NOT_LOCALHOST" | "PORT_EXHAUSTED" | "DOCKER_RUN_FAILED" | "READINESS_TIMEOUT" | "MANIFEST_FETCH_FAILED" | "MANIFEST_INVALID" | "CONFIG_SCREEN_UNREACHABLE" | "CONFIG_SCREEN_DEV_SERVER" | "LICENSE_INVALID" | "NAME_CONFLICT" | "NOT_FOUND" | "NOT_RESTARTABLE" | "PRODUCT_TEMPLATE_FETCH_FAILED";
-    constructor(code: "DEV_URL_INVALID" | "DEV_URL_NOT_LOCALHOST" | "PORT_EXHAUSTED" | "DOCKER_RUN_FAILED" | "READINESS_TIMEOUT" | "MANIFEST_FETCH_FAILED" | "MANIFEST_INVALID" | "CONFIG_SCREEN_UNREACHABLE" | "CONFIG_SCREEN_DEV_SERVER" | "LICENSE_INVALID" | "NAME_CONFLICT" | "NOT_FOUND" | "NOT_RESTARTABLE" | "PRODUCT_TEMPLATE_FETCH_FAILED", message: string);
+    code: "DEV_URL_INVALID" | "DEV_URL_NOT_LOCALHOST" | "PORT_EXHAUSTED" | "DOCKER_PULL_FAILED" | "DOCKER_RUN_FAILED" | "READINESS_TIMEOUT" | "MANIFEST_FETCH_FAILED" | "MANIFEST_INVALID" | "CONFIG_SCREEN_UNREACHABLE" | "CONFIG_SCREEN_DEV_SERVER" | "LICENSE_INVALID" | "NAME_CONFLICT" | "NOT_FOUND" | "NOT_RESTARTABLE" | "PRODUCT_TEMPLATE_FETCH_FAILED";
+    constructor(code: "DEV_URL_INVALID" | "DEV_URL_NOT_LOCALHOST" | "PORT_EXHAUSTED" | "DOCKER_PULL_FAILED" | "DOCKER_RUN_FAILED" | "READINESS_TIMEOUT" | "MANIFEST_FETCH_FAILED" | "MANIFEST_INVALID" | "CONFIG_SCREEN_UNREACHABLE" | "CONFIG_SCREEN_DEV_SERVER" | "LICENSE_INVALID" | "NAME_CONFLICT" | "NOT_FOUND" | "NOT_RESTARTABLE" | "PRODUCT_TEMPLATE_FETCH_FAILED", message: string);
 }

package/product-service.d.ts

@@ -55,11 +55,15 @@ export type ImportProductTemplateBytesFn = (opts: {
  *  module functions: calling docker-runner directly re-creates the bypass that
  *  made an injected fake silently inert on add/remove. */
 export interface ProductContainerOps {
+    pull(image: string): Promise<void>;
     run(image: string, hostPort: number): Promise<string>;
     remove(containerId: string): Promise<void>;
     rename(containerId: string, name: string): Promise<void>;
     waitForReady(baseUrl: string): Promise<void>;
 }
+/** The real docker-runner wiring. Exported so a host can override one op
+ *  (typically `pull`, onto its own docker adapter) and keep the rest. */
+export declare const defaultProductContainerOps: ProductContainerOps;
 export interface ProductServiceOptions {
     store: ProductStore;
     allocatePort: AllocatePortFn;
@@ -102,6 +106,11 @@ export declare class ProductService {
     private readonly containerOps;
     constructor(opts: ProductServiceOptions);
     list(): ProductRegistration[];
+    /** Docker's default `--pull=missing` keeps whatever a moving tag resolved to
+     *  last time, so a rebuilt `:latest`/`:dev` never reached a new registration.
+     *  Best-effort: a locally built image is in no registry, and the run that
+     *  follows must still get its turn. */
+    private refreshImage;
     /** Whether the product is actually up. Container-mode: we started it, so a
      *  tracked containerId means running. Dev-mode: externally owned, so probe
      *  the dev URL — registered no longer implies running. */

package/product-service.js

@@ -1,7 +1,7 @@
 import { readFile } from "node:fs/promises";
 import { logger, Mutex } from "@norskvideo/ctl-foundation";
 import { validateDevUrl } from "./dev-url.js";
-import { dockerRename, dockerRm, dockerRun, productContainerName } from "./docker-runner.js";
+import { dockerPull, dockerRename, dockerRm, dockerRun, isDigestRef, productContainerName } from "./docker-runner.js";
 import { resolveLicenseFile } from "./license-registration.js";
 import { checkProductEntitlement, notV2EnvelopeMessage, parseLicenseContents } from "./license-v2.js";
 import { fetchManifest, isDevUrlAlive, probeConfigScreen, specBaseUrl, waitForReady } from "./manifest-fetch.js";
@@ -24,7 +24,10 @@ async function fetchProductTemplateBytes(baseUrl, url) {
     }
     return new Uint8Array(await response.arrayBuffer());
 }
-const defaultContainerOps = {
+/** The real docker-runner wiring. Exported so a host can override one op
+ *  (typically `pull`, onto its own docker adapter) and keep the rest. */
+export const defaultProductContainerOps = {
+    pull: dockerPull,
     run: dockerRun,
     remove: dockerRm,
     rename: dockerRename,
@@ -58,11 +61,27 @@ export class ProductService {
         this.importProductTemplateBytes = opts.importProductTemplateBytes;
         this.stageLicense = opts.stageLicense;
         this.isDevUrlAlive = opts.isDevUrlAlive ?? isDevUrlAlive;
-        this.containerOps = opts.containerOps ?? defaultContainerOps;
+        this.containerOps = opts.containerOps ?? defaultProductContainerOps;
     }
     list() {
         return this.store.read();
     }
+    /** Docker's default `--pull=missing` keeps whatever a moving tag resolved to
+     *  last time, so a rebuilt `:latest`/`:dev` never reached a new registration.
+     *  Best-effort: a locally built image is in no registry, and the run that
+     *  follows must still get its turn. */
+    async refreshImage(image) {
+        if (isDigestRef(image))
+            return;
+        logger.info(`Pulling product image: ${image}`);
+        try {
+            await this.containerOps.pull(image);
+        }
+        catch (e) {
+            const msg = e instanceof Error ? e.message : String(e);
+            logger.warn(`Pull of ${image} did not complete (${msg}); continuing with the local image if present`);
+        }
+    }
     /** Whether the product is actually up. Container-mode: we started it, so a
      *  tracked containerId means running. Dev-mode: externally owned, so probe
      *  the dev URL — registered no longer implies running. */
@@ -93,6 +112,7 @@ export class ProductService {
                 throw new ProductError("PORT_EXHAUSTED", `no free port available for new product`);
             }
             port = allocated;
+            await this.refreshImage(spec.image);
             logger.info(`Starting product container: ${spec.image} on host port ${port}`);
             containerId = await this.containerOps.run(spec.image, port);
             baseUrl = specBaseUrl(spec, port);

package/product-template-parsing.js

@@ -49,6 +49,10 @@ export function parseProductTemplatesFile(raw, path) {
             rec.sha256 = entry.sha256;
         if (isRecord(entry.launchDefaults))
             rec.launchDefaults = entry.launchDefaults;
+        if (isRecord(entry.parameterDefaults) &&
+            Object.values(entry.parameterDefaults).every((v) => typeof v === "string")) {
+            rec.parameterDefaults = entry.parameterDefaults;
+        }
         if (Array.isArray(entry.suggestedSecurityGroups) &&
             entry.suggestedSecurityGroups.every((l) => typeof l === "string")) {
             rec.suggestedSecurityGroups = entry.suggestedSecurityGroups;

package/product-template-record.d.ts

@@ -49,6 +49,14 @@ export interface ProductTemplateRecord {
      *  authoritatively by the worker at launch. Rides launches as
      *  template_launch_defaults_json. */
     launchDefaults?: Record<string, unknown>;
+    /** Template-author parameter tier (env-var authoring): name → default
+     *  value. A name the product declared overrides the manifest default;
+     *  an undeclared name ADDS a template-defined variable. Fused into every
+     *  launch's parameter map beneath the operator's instance values —
+     *  instance wins, template default wins over manifest default. Names
+     *  must be env-var shaped and never `NORSK_`-prefixed (that namespace is
+     *  infra-injected: NORSK_RUNTIME_ROLE, NORSK_MATCHED_CAPABILITIES, …). */
+    parameterDefaults?: Record<string, string>;
     /** Template-author security-group suggestions, by discovery-tag LABEL
      *  (portable across deployments; ids are not). The launch UI pre-ticks
      *  discovered groups whose label matches — a suggestion the operator