@serve.zone/interfaces 20.0.0 → 20.1.0

package/dist_ts/private/canonicaljson.d.ts

@@ -0,0 +1,14 @@
+export declare const strictCanonicalJsonRules: Readonly<{
+    version: 1;
+    encoding: "utf-8";
+    objectKeyOrdering: "utf-16-code-unit-ascending";
+    arrayOrdering: "preserved-dense";
+    unicodeNormalization: "preserved";
+    numberEncoding: "safe-integer-json-no-negative-zero";
+    digest: "sha256-lowercase-hex";
+}>;
+export type TCanonicalJsonFailure = (reasonArg: string) => never;
+export declare const canonicalizeStrictJson: (valueArg: unknown, failArg: TCanonicalJsonFailure, fieldNameArg?: string) => string;
+export declare const createSha256Hex: (contentsArg: Uint8Array, failArg: TCanonicalJsonFailure) => Promise<string>;
+export declare const createCanonicalJsonSha256Hex: (canonicalJsonArg: string, failArg: TCanonicalJsonFailure) => Promise<string>;
+export declare const deepFreezeValue: <T>(valueArg: T, seenArg?: WeakSet<object>) => T;

package/dist_ts/private/canonicaljson.js

@@ -0,0 +1,154 @@
+export const strictCanonicalJsonRules = Object.freeze({
+    version: 1,
+    encoding: 'utf-8',
+    objectKeyOrdering: 'utf-16-code-unit-ascending',
+    arrayOrdering: 'preserved-dense',
+    unicodeNormalization: 'preserved',
+    numberEncoding: 'safe-integer-json-no-negative-zero',
+    digest: 'sha256-lowercase-hex',
+});
+const assertUnicodeScalarString = (valueArg, fieldNameArg, failArg) => {
+    for (let index = 0; index < valueArg.length; index++) {
+        const codeUnit = valueArg.charCodeAt(index);
+        if (codeUnit >= 0xd800 && codeUnit <= 0xdbff) {
+            const followingCodeUnit = valueArg.charCodeAt(index + 1);
+            if (!Number.isInteger(followingCodeUnit) ||
+                followingCodeUnit < 0xdc00 ||
+                followingCodeUnit > 0xdfff) {
+                failArg(`${fieldNameArg} must not contain an unpaired UTF-16 surrogate`);
+            }
+            index++;
+            continue;
+        }
+        if (codeUnit >= 0xdc00 && codeUnit <= 0xdfff) {
+            failArg(`${fieldNameArg} must not contain an unpaired UTF-16 surrogate`);
+        }
+    }
+};
+const readStrictRecord = (valueArg, fieldNameArg, failArg) => {
+    const prototype = Object.getPrototypeOf(valueArg);
+    if (prototype !== Object.prototype && prototype !== null) {
+        return failArg(`${fieldNameArg} must be a plain object`);
+    }
+    const record = valueArg;
+    const ownKeys = Reflect.ownKeys(record);
+    if (ownKeys.some((keyArg) => typeof keyArg !== 'string')) {
+        return failArg(`${fieldNameArg} must not contain symbol keys`);
+    }
+    for (const key of ownKeys) {
+        const descriptor = Object.getOwnPropertyDescriptor(record, key);
+        if (!descriptor ||
+            !descriptor.enumerable ||
+            !Object.hasOwn(descriptor, 'value')) {
+            return failArg(`${fieldNameArg} must contain enumerable data properties only`);
+        }
+    }
+    return record;
+};
+const readStrictArray = (valueArg, fieldNameArg, failArg) => {
+    if (Object.getPrototypeOf(valueArg) !== Array.prototype) {
+        return failArg(`${fieldNameArg} must be a dense plain array`);
+    }
+    for (let index = 0; index < valueArg.length; index++) {
+        if (!Object.hasOwn(valueArg, index)) {
+            return failArg(`${fieldNameArg} must not contain sparse entries`);
+        }
+        const descriptor = Object.getOwnPropertyDescriptor(valueArg, String(index));
+        if (!descriptor ||
+            !descriptor.enumerable ||
+            !Object.hasOwn(descriptor, 'value')) {
+            return failArg(`${fieldNameArg} must contain enumerable data entries only`);
+        }
+    }
+    for (const key of Reflect.ownKeys(valueArg)) {
+        if (key === 'length') {
+            continue;
+        }
+        if (typeof key !== 'string' ||
+            !/^(?:0|[1-9][0-9]*)$/.test(key) ||
+            Number(key) >= valueArg.length) {
+            return failArg(`${fieldNameArg} must not contain extra properties`);
+        }
+    }
+    return valueArg;
+};
+export const canonicalizeStrictJson = (valueArg, failArg, fieldNameArg = 'canonical JSON input') => {
+    const ancestors = new Set();
+    const visit = (currentValueArg, currentFieldNameArg) => {
+        if (currentValueArg === null) {
+            return 'null';
+        }
+        if (typeof currentValueArg === 'boolean') {
+            return currentValueArg ? 'true' : 'false';
+        }
+        if (typeof currentValueArg === 'string') {
+            assertUnicodeScalarString(currentValueArg, currentFieldNameArg, failArg);
+            return JSON.stringify(currentValueArg);
+        }
+        if (typeof currentValueArg === 'number') {
+            if (!Number.isSafeInteger(currentValueArg) ||
+                Object.is(currentValueArg, -0)) {
+                return failArg(`${currentFieldNameArg} must contain safe integers only`);
+            }
+            return String(currentValueArg);
+        }
+        if (!currentValueArg || typeof currentValueArg !== 'object') {
+            return failArg(`${currentFieldNameArg} contains a non-JSON value`);
+        }
+        if (ancestors.has(currentValueArg)) {
+            return failArg(`${currentFieldNameArg} contains a cycle`);
+        }
+        ancestors.add(currentValueArg);
+        try {
+            if (Array.isArray(currentValueArg)) {
+                const array = readStrictArray(currentValueArg, currentFieldNameArg, failArg);
+                return `[${array
+                    .map((entryArg, indexArg) => visit(entryArg, `${currentFieldNameArg}[${indexArg}]`))
+                    .join(',')}]`;
+            }
+            const record = readStrictRecord(currentValueArg, currentFieldNameArg, failArg);
+            const keys = Object.keys(record).sort((leftArg, rightArg) => {
+                return leftArg < rightArg ? -1 : leftArg > rightArg ? 1 : 0;
+            });
+            return `{${keys
+                .map((keyArg) => {
+                assertUnicodeScalarString(keyArg, `${currentFieldNameArg} key`, failArg);
+                return `${JSON.stringify(keyArg)}:${visit(record[keyArg], `${currentFieldNameArg}.${keyArg}`)}`;
+            })
+                .join(',')}}`;
+        }
+        finally {
+            ancestors.delete(currentValueArg);
+        }
+    };
+    return visit(valueArg, fieldNameArg);
+};
+export const createSha256Hex = async (contentsArg, failArg) => {
+    const subtle = globalThis.crypto?.subtle;
+    if (!subtle) {
+        return failArg('Web Crypto SHA-256 is unavailable in this runtime');
+    }
+    const digest = await subtle.digest('SHA-256', new Uint8Array(contentsArg));
+    return Array.from(new Uint8Array(digest), (byteArg) => byteArg.toString(16).padStart(2, '0')).join('');
+};
+export const createCanonicalJsonSha256Hex = async (canonicalJsonArg, failArg) => {
+    return createSha256Hex(new TextEncoder().encode(canonicalJsonArg), failArg);
+};
+export const deepFreezeValue = (valueArg, seenArg = new WeakSet()) => {
+    if (!valueArg || typeof valueArg !== 'object') {
+        return valueArg;
+    }
+    const object = valueArg;
+    if (ArrayBuffer.isView(object) || seenArg.has(object)) {
+        return valueArg;
+    }
+    seenArg.add(object);
+    for (const key of Reflect.ownKeys(object)) {
+        const descriptor = Object.getOwnPropertyDescriptor(object, key);
+        if (descriptor && Object.hasOwn(descriptor, 'value')) {
+            deepFreezeValue(descriptor.value, seenArg);
+        }
+    }
+    return Object.freeze(valueArg);
+};
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@serve.zone/interfaces",
-  "version": "20.0.0",
+  "version": "20.1.0",
   "private": false,
   "description": "Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.",
   "exports": {

package/readme.md

@@ -120,6 +120,130 @@ must reject unknown manifest fields and unsupported required feature IDs before
 provisioning. Legacy `volumes` and `platformRequirements.s3` remain deprecated
 inputs for strict resolver normalization only.
 
+`platform.storagemigration` defines the provider-neutral cutover contract for a
+named object-storage binding. Corestore atomically owns and fences the source
+binding after validating a distinct, unfenced active-object snapshot. Onebox
+only receives a held candidate, stages that exact candidate, stops the matching
+workload generation, and attests the quiesced state. The candidate cannot start
+until `destinationBindingStartAuthorized` is true. Corestore continues returning
+`consumerAction: 'startDestination'` until Onebox submits the mutation-fenced
+consumer activation request and the acknowledgement becomes durable evidence.
+Candidate-issued abort tombstones authorize only `startSource` and never retain
+the staged candidate binding.
+
+Every migration DTO and status has an exact, versioned runtime normalizer.
+Unknown fields, provider or pool identifiers, unbounded strings, unsafe
+integers, stale mutation revisions, identity drift, and lifecycle-inconsistent
+fields are rejected. Migration-created digests use strict canonical JSON and a
+bare lowercase 64-hex SHA-256 value; portable golden vectors cover the source
+snapshot, target request, prepare intent, and candidate binding. Pre-cutover
+failures may retry or abort; after the durable commit point, recovery can only
+retry or roll forward. Physical pool IDs, mount details, provider receipts, and
+publication capabilities remain private.
+
+Primary exports include:
+
+- `IObjectStorageMigrationPrepareRequest` and
+  `TObjectStorageMigrationStatus` for the immutable intent and status journal.
+- `IObjectStorageMigrationConsumerQuiesceRequest` with
+  `IStorageMigrationConsumerQuiesceEvidence` for exact candidate staging and
+  source-workload shutdown.
+- `IObjectStorageMigrationConsumerActivationRequest` with
+  `IStorageMigrationConsumerActivationEvidence` for durable destination-start
+  acknowledgement.
+- `normalizeObjectStorageMigrationStatus`,
+  `bindObjectStorageMigrationConsumerQuiesceRequest`, and
+  `bindObjectStorageMigrationConsumerActivationRequest` for strict ingress and
+  current-revision mutation fencing.
+- The `create*Sha256` helpers for source snapshots, prepare intent, target
+  requests, candidate/active bindings, and persisted staging or activation
+  evidence.
+
+The phase and consumer-action progression is exact:
+
+| Phase | `consumerAction` | Destination start authorized |
+| --- | --- | --- |
+| `preparing`, `transferring` | `wait` | No |
+| `awaitingConsumerQuiesce` | `stageCandidateAndStop` | No |
+| `finalizing`, `committing` | `wait` | No |
+| `readyToStart` | `startDestination` | Yes |
+| `cleanupPending`, `complete` | `none` | Yes; durable activation evidence is required |
+| `aborting` | `wait` | No |
+| `aborted` | `startSource` | No; only the active source binding may restart |
+
+Normalize every status before acting, and bind consumer mutations to that exact
+status revision:
+
+```typescript
+const status =
+  await platform.storagemigration.normalizeObjectStorageMigrationStatus(
+    untrustedStatusPayload,
+  );
+
+if (status.phase === 'awaitingConsumerQuiesce') {
+  const request =
+    await platform.storagemigration.bindObjectStorageMigrationConsumerQuiesceRequest(
+      untrustedQuiescePayload,
+      status,
+    );
+  await submitQuiesceAcknowledgement(request);
+}
+
+if (status.phase === 'readyToStart') {
+  if (
+    !status.destinationBindingStartAuthorized ||
+    status.consumerAction !== 'startDestination'
+  ) {
+    throw new Error('destination binding is not authorized to start');
+  }
+  await startWorkload(status.activeBinding);
+  const request =
+    await platform.storagemigration.bindObjectStorageMigrationConsumerActivationRequest(
+      untrustedActivationPayload,
+      status,
+    );
+  await submitActivationAcknowledgement(request);
+}
+
+if (status.phase === 'cleanupPending') {
+  // Cleanup is reachable only after this durable acknowledgement was accepted.
+  const durableActivation = status.consumerActivationEvidence;
+}
+
+if (status.phase === 'aborted') {
+  if (
+    status.destinationBindingStartAuthorized ||
+    status.consumerAction !== 'startSource'
+  ) {
+    throw new Error('invalid aborted migration status');
+  }
+  await startWorkload(status.activeBinding);
+}
+```
+
+Here `startWorkload`, `submitQuiesceAcknowledgement`, and
+`submitActivationAcknowledgement` are consumer-owned operations, not package
+exports. Canonical digests are produced from normalized payloads:
+
+```typescript
+const snapshotSha256 =
+  await platform.storagemigration.createUnfencedObjectStorageBindingControlSnapshotSha256(
+    snapshotDigestPayload,
+  );
+const migrationSha256 =
+  await platform.storagemigration.createObjectStorageMigrationSha256(
+    prepareRequest,
+  );
+const candidateSha256 =
+  await platform.storagemigration.createObjectStorageMigrationBindingSha256(
+    candidateBinding,
+  );
+const activationRecordSha256 =
+  await platform.storagemigration.createObjectStorageMigrationPersistedActivationSha256(
+    activationDigestPayload,
+  );
+```
+
 ## Data Contracts
 
 Use `data` when you need object shapes that are persisted, exchanged between services, or exposed through the Cloudly API.
@@ -438,6 +562,8 @@ Available platform modules:
 - `platform.pushnotification` is the deprecated legacy device-token push contract. New browser Web Push integrations use `requests.webpush`.
 - `platform.letter` for physical letter workflows.
 - `platform.ai`, `platform.database`, `platform.objectstorage`, `platform.logging`, `platform.backup`, and `platform.sip` for infrastructure and application capabilities.
+- `platform.storage` for provider-neutral storage classes, requests, capabilities, and resolved bindings.
+- `platform.storagemigration` for fenced object-storage migration intent, status, consumer acknowledgements, canonical digests, and strict normalizers.
 - `platform.types` plus root re-exports for shared capability, provider, binding, credential, and endpoint metadata.
 
 ## Legacy Platformservice Contracts

package/ts/00_commitinfo_data.ts

@@ -3,6 +3,6 @@
  */
 export const commitinfo = {
   name: '@serve.zone/interfaces',
-  version: '20.0.0',
+  version: '20.1.0',
   description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 }

package/ts/data/isolatedrestore.ts

@@ -3,6 +3,13 @@ import type {
   IBackupArchiveObject,
   TIsolatedRestoreResourceMapping,
 } from './backup.js';
+import {
+  canonicalizeStrictJson,
+  createCanonicalJsonSha256Hex,
+  createSha256Hex,
+  deepFreezeValue,
+  strictCanonicalJsonRules,
+} from '../private/canonicaljson.js';
 
 /** Operations carried by a short-lived, single-operation restore grant. */
 export const isolatedRestoreGrantOperations = Object.freeze([
@@ -307,15 +314,7 @@ export class IsolatedRestoreContractError extends Error {
 }
 
 /** Cross-runtime rules for restore authority digests. */
-export const isolatedRestoreCanonicalJsonRules = Object.freeze({
-  version: 1 as const,
-  encoding: 'utf-8' as const,
-  objectKeyOrdering: 'utf-16-code-unit-ascending' as const,
-  arrayOrdering: 'preserved-dense' as const,
-  unicodeNormalization: 'preserved' as const,
-  numberEncoding: 'safe-integer-json-no-negative-zero' as const,
-  digest: 'sha256-lowercase-hex' as const,
-});
+export const isolatedRestoreCanonicalJsonRules = strictCanonicalJsonRules;
 
 const canonicalIdentifierPattern = /^[A-Za-z0-9][A-Za-z0-9._:@-]{0,255}$/;
 const canonicalScopedIdPattern = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,191}$/;
@@ -360,23 +359,7 @@ export const assertIsolatedRestoreControlIngressByteLength = (
   return byteLengthArg;
 };
 
-const deepFreeze = <T>(valueArg: T, seenArg = new WeakSet<object>()): T => {
-  if (!valueArg || typeof valueArg !== 'object') {
-    return valueArg;
-  }
-  const object = valueArg as object;
-  if (ArrayBuffer.isView(object) || seenArg.has(object)) {
-    return valueArg;
-  }
-  seenArg.add(object);
-  for (const key of Reflect.ownKeys(object)) {
-    const descriptor = Object.getOwnPropertyDescriptor(object, key);
-    if (descriptor && Object.hasOwn(descriptor, 'value')) {
-      deepFreeze(descriptor.value, seenArg);
-    }
-  }
-  return Object.freeze(valueArg);
-};
+const deepFreeze = deepFreezeValue;
 
 const verifiedIsolatedRestoreGrantCompacts = new WeakMap<object, string>();
 const verifiedIsolatedRestoreWriteBindings = new WeakSet<object>();
@@ -1419,64 +1402,7 @@ export const normalizeIsolatedRestoreControlStatusRequest = (
 };
 
 const canonicalizeJson = (valueArg: unknown): string => {
-  const ancestors = new Set<object>();
-
-  const visit = (currentValueArg: unknown, fieldNameArg: string): string => {
-    if (currentValueArg === null) {
-      return 'null';
-    }
-    if (typeof currentValueArg === 'boolean') {
-      return currentValueArg ? 'true' : 'false';
-    }
-    if (typeof currentValueArg === 'string') {
-      assertUnicodeScalarString(currentValueArg, fieldNameArg);
-      return JSON.stringify(currentValueArg);
-    }
-    if (typeof currentValueArg === 'number') {
-      if (
-        !Number.isSafeInteger(currentValueArg) ||
-        Object.is(currentValueArg, -0)
-      ) {
-        return fail(`${fieldNameArg} must contain safe integers only`);
-      }
-      return String(currentValueArg);
-    }
-    if (typeof currentValueArg !== 'object') {
-      return fail(`${fieldNameArg} contains a non-JSON value`);
-    }
-    if (ancestors.has(currentValueArg)) {
-      return fail(`${fieldNameArg} contains a cycle`);
-    }
-
-    ancestors.add(currentValueArg);
-    try {
-      if (Array.isArray(currentValueArg)) {
-        return `[${currentValueArg
-          .map((entryArg, indexArg) =>
-            visit(entryArg, `${fieldNameArg}[${indexArg}]`),
-          )
-          .join(',')}]`;
-      }
-
-      const record = readRecord(currentValueArg, fieldNameArg);
-      const keys = Object.keys(record).sort((leftArg, rightArg) => {
-        return leftArg < rightArg ? -1 : leftArg > rightArg ? 1 : 0;
-      });
-      return `{${keys
-        .map((keyArg) => {
-          assertUnicodeScalarString(keyArg, `${fieldNameArg} key`);
-          return `${JSON.stringify(keyArg)}:${visit(
-            record[keyArg],
-            `${fieldNameArg}.${keyArg}`,
-          )}`;
-        })
-        .join(',')}}`;
-    } finally {
-      ancestors.delete(currentValueArg);
-    }
-  };
-
-  return visit(valueArg, 'canonical JSON input');
+  return canonicalizeStrictJson(valueArg, fail);
 };
 
 export const canonicalizeIsolatedRestoreResourceMappings = (
@@ -1618,20 +1544,13 @@ export const canonicalizeIsolatedRestoreAuthorityProjection = (
 };
 
 const createSha256 = async (contentsArg: Uint8Array): Promise<string> => {
-  const subtle = globalThis.crypto?.subtle;
-  if (!subtle) {
-    return fail('Web Crypto SHA-256 is unavailable in this runtime');
-  }
-  const digest = await subtle.digest('SHA-256', new Uint8Array(contentsArg));
-  return Array.from(new Uint8Array(digest), (byteArg) =>
-    byteArg.toString(16).padStart(2, '0'),
-  ).join('');
+  return createSha256Hex(contentsArg, fail);
 };
 
 const createCanonicalJsonSha256 = async (
   canonicalJsonArg: string,
 ): Promise<string> => {
-  return createSha256(new TextEncoder().encode(canonicalJsonArg));
+  return createCanonicalJsonSha256Hex(canonicalJsonArg, fail);
 };
 
 export const createIsolatedRestoreBytesSha256 = async (

package/ts/platform/index.ts

@@ -9,6 +9,7 @@ import * as pushnotification from './pushnotification.js';
 import * as sip from './sip.js';
 import * as sms from './sms.js';
 import * as storage from './storage.js';
+import * as storagemigration from './storagemigration.js';
 import * as types from './types.js';
 
 export {
@@ -23,8 +24,10 @@ export {
   sip,
   sms,
   storage,
+  storagemigration,
   types,
 };
 
 export * from './storage.js';
+export * from './storagemigration.js';
 export * from './types.js';