@opengeni/agent-proto 0.4.0 → 0.5.1-canary.0

package/dist/gen/opengeni_agent.d.ts

@@ -120,6 +120,18 @@ export declare enum GoingOfflineReason {
 }
 export declare function goingOfflineReasonFromJSON(object: any): GoingOfflineReason;
 export declare function goingOfflineReasonToJSON(object: GoingOfflineReason): string;
+export declare enum AgentUpdateStage {
+    AGENT_UPDATE_STAGE_UNSPECIFIED = 0,
+    AGENT_UPDATE_STAGE_ACCEPTED = 1,
+    AGENT_UPDATE_STAGE_WAITING_FOR_IDLE = 2,
+    AGENT_UPDATE_STAGE_DOWNLOADING = 3,
+    AGENT_UPDATE_STAGE_VERIFYING = 4,
+    AGENT_UPDATE_STAGE_APPLYING = 5,
+    AGENT_UPDATE_STAGE_RESTARTING = 6,
+    AGENT_UPDATE_STAGE_FAILED = 7
+}
+export declare function agentUpdateStageFromJSON(object: any): AgentUpdateStage;
+export declare function agentUpdateStageToJSON(object: AgentUpdateStage): string;
 /** The logical byte stream an op-frame Data chunk belongs to. */
 export declare enum OpChannel {
     OP_CHANNEL_UNSPECIFIED = 0,
@@ -254,6 +266,20 @@ export interface Hello {
      * first connect.
      */
     resumeToken: string;
+    /**
+     * Lowercase sha256 of the exact running executable. The control plane uses
+     * this with agent_version to verify that a self-update's successor process is
+     * the build the signed manifest selected, not merely a process that reconnected.
+     */
+    binarySha256: string;
+    /**
+     * Durable proof written only after an explicitly requested update passed the
+     * signed-manifest, artifact signature+digest, atomic apply, and startup health
+     * gates. Repeating it on successor Hellos heals lost progress events.
+     */
+    completedUpdateOperationId: string;
+    completedUpdateTargetVersion: string;
+    completedUpdateBinarySha256: string;
 }
 /**
  * What the agent is able and consented to do. Each bool is a hard capability
@@ -298,6 +324,18 @@ export interface Capabilities {
      * one machine may host multiple Chrome profiles.
      */
     browserBridge: boolean;
+    /**
+     * The runner enforces the optional per-connection operation memory policy on
+     * every contained exec/git child. A control plane must fail closed rather than
+     * send a configured policy to a runner that does not advertise this bit.
+     */
+    operationResourcePolicy: boolean;
+    /**
+     * The runner additionally understands and enforces cpu_max_millicores. This is
+     * separate from the memory-policy bit so a newer control plane never sends a
+     * CPU quota that an older memory-only runner would ignore as an unknown field.
+     */
+    operationCpuQuota: boolean;
 }
 /**
  * Capabilities of one live browser-profile bridge endpoint. This describes the
@@ -435,6 +473,26 @@ export interface EnrollmentCredentials {
      */
     relayToken: string;
 }
+/**
+ * Optional policy selected for one Connected Machine enrollment. Absence means
+ * the control plane requests no limit; there is deliberately no runner-created
+ * default quota. cpu_max_millicores is an exact, period-independent public ratio.
+ * The Linux runner selects a cgroup-v2 period within the kernel's 1ms..1s ABI so
+ * every positive uint32 millicore value is represented without rounding or
+ * silent loosening. Local runner policy and ancestor OS/cgroup policy may tighten
+ * these values but never loosen them.
+ */
+export interface OperationResourcePolicy {
+    memoryMaxBytes?: string | undefined;
+    memoryHighBytes?: string | undefined;
+    /**
+     * Exact thousandths of one CPU (1000 = one CPU). Absence is unlimited.
+     * The runner preserves the kernel cpu.max period when it can represent this
+     * ratio exactly, otherwise minimally lengthens it to satisfy cgroup v2's 1 ms
+     * minimum quota/period and 1 s maximum period without rounding the ratio.
+     */
+    cpuMaxMillicores?: number | undefined;
+}
 export interface ExecRequest {
     /** argv[0] is the program; the agent does NOT shell-interpret unless `shell`. */
     command: string[];
@@ -588,6 +646,15 @@ export interface PtyOpenRequest {
     rows: number;
     /** The TERM value to advertise (e.g. "xterm-256color"). */
     term: string;
+    /**
+     * Stable caller-owned identity for an idempotent terminal. Repeating pty_open
+     * with the same non-empty scope_id returns the existing live PTY/channel rather
+     * than spawning another shell. Empty preserves the explicit "open a new PTY"
+     * behavior. The control plane uses the durable OpenGeni session id here so
+     * capability/token refreshes reattach the same terminal while separate sessions
+     * on one machine remain isolated.
+     */
+    scopeId: string;
 }
 export interface PtyOpenRequest_EnvEntry {
     key: string;
@@ -947,6 +1014,45 @@ export interface UpdateMayProceedResponse {
     /** When false, the number of live sessions blocking the update. */
     activeSessions: number;
 }
+/**
+ * Control-plane initiated, process-global self-update. This wraps the same
+ * signed/minisign/sha256/atomic-rollback updater used by the local CLI; it is not
+ * a second installer. The request is idempotent by operation_id and fenced by
+ * the exact process subject plus its expected running version+digest.
+ */
+export interface AgentUpdateApplyRequest {
+    operationId: string;
+    targetVersion: string;
+    channel: string;
+    expectedCurrentVersion: string;
+    expectedCurrentSha256: string;
+    /**
+     * The deployment origin serving the signed channel manifest. The pinned
+     * minisign key remains the trust root; this only chooses the fetch origin.
+     */
+    releaseBaseUrl: string;
+}
+export interface AgentUpdateApplyResponse {
+    accepted: boolean;
+    operationId: string;
+    currentVersion: string;
+    currentSha256: string;
+    targetVersion: string;
+}
+/**
+ * Durable, secret-free progress from the authoritative runner. A successful
+ * RESTARTING event is still provisional: only the successor Hello completes the
+ * update in the control plane.
+ */
+export interface AgentUpdateProgress {
+    operationId: string;
+    targetVersion: string;
+    stage: AgentUpdateStage;
+    expectedBinarySha256: string;
+    errorCode: string;
+    retryable: boolean;
+    rolledBack: boolean;
+}
 /**
  * The terminal outcome of an op — carried in the Exit frame body AND echoed in
  * OpStatus once complete. Digests/totals are keyed by channel name
@@ -1146,7 +1252,8 @@ export interface OpProgress {
 }
 /**
  * A server→runner cumulative ack + credit replenishment, published fire-and-forget
- * on the ack subject (`agent.<ws>.<id>.ack`). Best-effort, healed by repetition.
+ * on the exact process ack subject
+ * (`agent.<ws>.<id>.connection.<instance>.ack`). Best-effort, healed by repetition.
  */
 export interface OpAck {
     opId: string;
@@ -1175,6 +1282,12 @@ export interface OpAck {
 export interface ControlRequest {
     requestId: string;
     epoch: number;
+    /**
+     * Per-connection policy snapshot attached to the operation request. It lives
+     * on the envelope so request/reply Git and replayable OpStart share one
+     * contract. Absent means unrestricted by the control plane.
+     */
+    resourcePolicy: OperationResourcePolicy | undefined;
     op: {
         $case: "ping";
         ping: PingRequest;
@@ -1184,9 +1297,6 @@ export interface ControlRequest {
     } | {
         $case: "resume";
         resume: ResumeRequest;
-    } | {
-        $case: "exec";
-        exec: ExecRequest;
     } | {
         $case: "fsRead";
         fsRead: FsReadRequest;
@@ -1267,6 +1377,9 @@ export interface ControlRequest {
     } | {
         $case: "computerFramesOpen";
         computerFramesOpen: ComputerFramesOpenRequest;
+    } | {
+        $case: "agentUpdateApply";
+        agentUpdateApply: AgentUpdateApplyRequest;
     } | undefined;
 }
 /** Wraps an op-specific response, or an error. `request_id` echoes the request. */
@@ -1283,9 +1396,6 @@ export interface ControlResponse {
     } | {
         $case: "resume";
         resume: ResumeResponse;
-    } | {
-        $case: "exec";
-        exec: ExecResponse;
     } | {
         $case: "fsRead";
         fsRead: FsReadResponse;
@@ -1360,6 +1470,9 @@ export interface ControlResponse {
     } | {
         $case: "computerFramesOpen";
         computerFramesOpen: ComputerFramesOpenResponse;
+    } | {
+        $case: "agentUpdateApply";
+        agentUpdateApply: AgentUpdateApplyResponse;
     } | undefined;
 }
 /**
@@ -1385,6 +1498,9 @@ export interface AgentEvent {
     } | {
         $case: "goingOffline";
         goingOffline: GoingOffline;
+    } | {
+        $case: "agentUpdateProgress";
+        agentUpdateProgress: AgentUpdateProgress;
     } | undefined;
 }
 /** The control plane's ack of an AgentEvent (e.g. a HeartbeatAck). */
@@ -1506,6 +1622,7 @@ export declare const DeviceAuthStartResponse: MessageFns<DeviceAuthStartResponse
 export declare const DeviceAuthPollRequest: MessageFns<DeviceAuthPollRequest>;
 export declare const DeviceAuthPollResponse: MessageFns<DeviceAuthPollResponse>;
 export declare const EnrollmentCredentials: MessageFns<EnrollmentCredentials>;
+export declare const OperationResourcePolicy: MessageFns<OperationResourcePolicy>;
 export declare const ExecRequest: MessageFns<ExecRequest>;
 export declare const ExecRequest_EnvEntry: MessageFns<ExecRequest_EnvEntry>;
 export declare const ExecResponse: MessageFns<ExecResponse>;
@@ -1567,6 +1684,9 @@ export declare const UpdateManifest: MessageFns<UpdateManifest>;
 export declare const UpdateArtifact: MessageFns<UpdateArtifact>;
 export declare const UpdateMayProceedRequest: MessageFns<UpdateMayProceedRequest>;
 export declare const UpdateMayProceedResponse: MessageFns<UpdateMayProceedResponse>;
+export declare const AgentUpdateApplyRequest: MessageFns<AgentUpdateApplyRequest>;
+export declare const AgentUpdateApplyResponse: MessageFns<AgentUpdateApplyResponse>;
+export declare const AgentUpdateProgress: MessageFns<AgentUpdateProgress>;
 export declare const OpExit: MessageFns<OpExit>;
 export declare const OpExit_DigestsEntry: MessageFns<OpExit_DigestsEntry>;
 export declare const OpExit_TotalsEntry: MessageFns<OpExit_TotalsEntry>;