@serve.zone/interfaces 31.8.0 → 32.0.0

package/dist_ts/data/networkprojection.d.ts

@@ -1,10 +1,10 @@
 import type { TSha256Digest } from './immutableimage.js';
-import type { IRuntimeAssignmentReferenceV1, IRuntimeAuthorityReferenceV1, IRuntimeControllerV1 } from './runtimeassignment.js';
-import type { IRuntimeNetworkHandoffLeaseV1, IRuntimeNetworkProtectedAuthorityV1 } from './networkauthority.js';
-import type { IPrivateNetworkV1, IServicePrivateNetworksV1, IServicePrivateNetworkDnsPolicyV1 } from './privatenetwork.js';
-import { type IRuntimeNetworkRouterPacketGrantV1, type IRuntimeNetworkRouterProjectionV1 } from './networkrouter.js';
-export interface IRuntimeNetworkNodeScopeV1 {
-    controller: IRuntimeControllerV1;
+import type { IRuntimeAssignmentReference, IRuntimeAuthorityReference, IRuntimeController } from './runtimeassignment.js';
+import type { IRuntimeNetworkHandoffLease, IRuntimeNetworkProtectedAuthority } from './networkauthority.js';
+import type { IPrivateNetwork, IServicePrivateNetworks, IServicePrivateNetworkDnsPolicy } from './privatenetwork.js';
+import { type IRuntimeNetworkRouterPacketGrant, type IRuntimeNetworkRouterProjection } from './networkrouter.js';
+export interface IRuntimeNetworkNodeScope {
+    controller: IRuntimeController;
     nodeId: string;
     runtimeNamespace: string;
 }
@@ -18,8 +18,7 @@ export interface IRuntimeNetworkDnsWindow {
     expiresAt: number;
 }
 /** Immutable per-attempt address material. Membership and projection revisions are independent. */
-export interface IRuntimeNetworkWorkloadLeaseV1 extends IRuntimeNetworkNodeScopeV1 {
-    schemaVersion: 1;
+export interface IRuntimeNetworkWorkloadLease extends IRuntimeNetworkNodeScope {
     id: string;
     /** Allocation incarnation, not a mutable desired-state revision. */
     generation: number;
@@ -28,7 +27,7 @@ export interface IRuntimeNetworkWorkloadLeaseV1 extends IRuntimeNetworkNodeScope
     serviceId: string;
     replicaId: string;
     attemptId: string;
-    protectedAuthority: IRuntimeAuthorityReferenceV1;
+    protectedAuthority: IRuntimeAuthorityReference;
     routerIncarnationId: string;
     ipv4: {
         poolId: string;
@@ -47,7 +46,7 @@ export interface IRuntimeNetworkWorkloadLeaseV1 extends IRuntimeNetworkNodeScope
  * One node-level published port for a workload. Mirrors `IAppStorePublishedPort`
  * without range fields: the runtime publishes exactly one host port per entry.
  */
-export interface IRuntimeNetworkPublishedPortV1 {
+export interface IRuntimeNetworkPublishedPort {
     protocol: 'tcp' | 'udp';
     /** 1..65535 and unique per node across the projection for its protocol. */
     hostPort: number;
@@ -63,45 +62,43 @@ export interface IRuntimeNetworkPublishedPortV1 {
      * The Cloudly decision that authorized this port. It is covered by the
      * projection signature, and a published port without it cannot exist.
      */
-    authorization: IRuntimeAuthorityReferenceV1;
+    authorization: IRuntimeAuthorityReference;
 }
 /**
- * Caller-authored published-port request. v1 carries no `hostIp` (an omitted
+ * Caller-authored published-port request. It carries no `hostIp` (an omitted
  * address means the node uplink) and no ranges: exactly one host port per entry.
  * The `authorization` reference of the resulting projection entry is derived by
  * Cloudly from the policy revision and digest, never supplied by the caller.
  */
-export interface IRuntimeNetworkPublishedPortRequestV1 {
+export interface IRuntimeNetworkPublishedPortRequest {
     protocol: 'tcp' | 'udp';
     hostPort: number;
     targetPort: number;
 }
 /** Current authorized published-port policy for one service. */
-export interface IServicePublishedPortsV1 {
-    schemaVersion: 1;
+export interface IServicePublishedPorts {
     organizationId: string;
     serviceId: string;
     revision: number;
     /** Sorted by protocol and host port. Empty means the service publishes nothing. */
-    publishedPorts: IRuntimeNetworkPublishedPortRequestV1[];
+    publishedPorts: IRuntimeNetworkPublishedPortRequest[];
 }
 /** Exact desired policy. Node-level host-port placement remains Cloudly's decision. */
-export interface ISetServicePublishedPortsV1 {
-    schemaVersion: 1;
+export interface ISetServicePublishedPorts {
     organizationId: string;
     serviceId: string;
     /** Retain the exact body and this identifier across retries. */
     mutationId: string;
     /** null means the service has never had a published-port document; not an empty list. */
     expectedRevision: number | null;
-    publishedPorts: IRuntimeNetworkPublishedPortRequestV1[];
+    publishedPorts: IRuntimeNetworkPublishedPortRequest[];
 }
 /** Controller-owned readiness evidence. A signature does not prove this evidence's provenance. */
-export interface IRuntimeNetworkEndpointV1 {
-    lease: IRuntimeNetworkWorkloadLeaseV1;
+export interface IRuntimeNetworkEndpoint {
+    lease: IRuntimeNetworkWorkloadLease;
     ready: boolean;
     observation: {
-        assignment: IRuntimeAssignmentReferenceV1;
+        assignment: IRuntimeAssignmentReference;
         reporterSessionId: string;
         sequence: number;
         digest: TSha256Digest;
@@ -110,14 +107,14 @@ export interface IRuntimeNetworkEndpointV1 {
     publicEgress: boolean;
     platformEndpointIds: string[];
     /** Sorted by protocol and host port. Absent publishes nothing; a present member is never empty. */
-    publishedPorts?: IRuntimeNetworkPublishedPortV1[];
+    publishedPorts?: IRuntimeNetworkPublishedPort[];
 }
 /** Exact directed grant identity; receiver-owned realization resolves the lease to kernel facts. */
-export interface IRuntimeNetworkPacketGrantV1 {
-    source: IRuntimeAuthorityReferenceV1;
+export interface IRuntimeNetworkPacketGrant {
+    source: IRuntimeAuthorityReference;
     destination: {
         kind: 'workload';
-        lease: IRuntimeAuthorityReferenceV1;
+        lease: IRuntimeAuthorityReference;
     } | {
         kind: 'public';
     } | {
@@ -128,42 +125,44 @@ export interface IRuntimeNetworkPacketGrantV1 {
         port: number;
     };
 }
-export interface IRuntimeNetworkProjectionV1 extends IRuntimeNetworkNodeScopeV1 {
-    schemaVersion: 1;
+export interface IRuntimeNetworkProjection extends IRuntimeNetworkNodeScope {
     id: string;
     generation: number;
-    previous: IRuntimeAuthorityReferenceV1 | null;
-    protectedAuthority: IRuntimeNetworkProtectedAuthorityV1;
+    previous: IRuntimeAuthorityReference | null;
+    protectedAuthority: IRuntimeNetworkProtectedAuthority;
     /** Exact historical authorities needed to authenticate retained allocation material. */
-    allocationAuthorities: IRuntimeNetworkProtectedAuthorityV1[];
-    handoff: IRuntimeNetworkHandoffLeaseV1 | null;
+    allocationAuthorities: IRuntimeNetworkProtectedAuthority[];
+    handoff: IRuntimeNetworkHandoffLease | null;
     /** COMPLETE relevant definitions, including declared names with no ready replicas. */
-    networks: IPrivateNetworkV1[];
-    memberships: IServicePrivateNetworksV1[];
-    endpoints: IRuntimeNetworkEndpointV1[];
+    networks: IPrivateNetwork[];
+    memberships: IServicePrivateNetworks[];
+    endpoints: IRuntimeNetworkEndpoint[];
     dns: IRuntimeNetworkDnsWindow;
     /** Explicit denial intent. Carry until the exact predecessor's application is proven. */
-    withdrawals: IRuntimeNetworkPacketGrantV1[];
-    retiredLeases: IRuntimeAuthorityReferenceV1[];
-    retiredHandoffs: IRuntimeAuthorityReferenceV1[];
-    /** Absent in existing persisted V1 projections: no router-origin authority. */
-    router?: IRuntimeNetworkRouterProjectionV1;
+    withdrawals: IRuntimeNetworkPacketGrant[];
+    retiredLeases: IRuntimeAuthorityReference[];
+    retiredHandoffs: IRuntimeAuthorityReference[];
+    /**
+     * Omitted when the issuer selects no router-origin egress; its absence keeps the
+     * projection's canonical bytes and grants no router-origin flows.
+     */
+    router?: IRuntimeNetworkRouterProjection;
     digest: TSha256Digest;
 }
-export interface IRuntimeNetworkDnsViewV1 {
-    source: IRuntimeAuthorityReferenceV1;
+export interface IRuntimeNetworkDnsView {
+    source: IRuntimeAuthorityReference;
     sourceAddress: string;
     dnsServer: string;
-    policy: IServicePrivateNetworkDnsPolicyV1;
+    policy: IServicePrivateNetworkDnsPolicy;
     /** Sorted complete A sets; [] is declared NODATA, never an omitted name. AAAA is NODATA. */
     records: Array<{
         name: string;
         addresses: string[];
     }>;
 }
-export declare const runtimeNetworkProjectionV1Contract: Readonly<{
-    readonly workloadDigestDomain: "serve.zone/runtime-network-workload-lease-v1";
-    readonly projectionDigestDomain: "serve.zone/runtime-network-projection-v1";
+export declare const runtimeNetworkProjectionContract: Readonly<{
+    readonly workloadDigestDomain: "serve.zone/runtime-network-workload-lease";
+    readonly projectionDigestDomain: "serve.zone/runtime-network-projection";
     readonly maximumCanonicalBytes: 917504;
     readonly maximumAllocationAuthorities: 16;
     readonly maximumNetworks: 128;
@@ -180,33 +179,33 @@ export declare const runtimeNetworkProjectionV1Contract: Readonly<{
     readonly acknowledgement: "admission-is-not-application-or-readiness";
     readonly allocationReuse: "requires-controller-quarantine-and-all-affected-authority-fences";
 }>;
-export declare const snapshotRuntimeNetworkNodeScopeV1: (value: unknown) => IRuntimeNetworkNodeScopeV1;
-export declare const snapshotRuntimeNetworkWorkloadLeaseV1: (value: unknown) => IRuntimeNetworkWorkloadLeaseV1;
-export declare const computeRuntimeNetworkWorkloadLeaseV1Digest: (value: IRuntimeNetworkWorkloadLeaseV1) => Promise<TSha256Digest>;
+export declare const snapshotRuntimeNetworkNodeScope: (value: unknown) => IRuntimeNetworkNodeScope;
+export declare const snapshotRuntimeNetworkWorkloadLease: (value: unknown) => IRuntimeNetworkWorkloadLease;
+export declare const computeRuntimeNetworkWorkloadLeaseDigest: (value: IRuntimeNetworkWorkloadLease) => Promise<TSha256Digest>;
 /** Structural snapshot only; node placement, quota and authorization remain Cloudly's decision. */
-export declare const snapshotServicePublishedPortsV1: (value: unknown) => IServicePublishedPortsV1;
-export declare const snapshotSetServicePublishedPortsV1: (value: unknown) => ISetServicePublishedPortsV1;
+export declare const snapshotServicePublishedPorts: (value: unknown) => IServicePublishedPorts;
+export declare const snapshotSetServicePublishedPorts: (value: unknown) => ISetServicePublishedPorts;
 /** Structural snapshot only; use validate/signature/admission helpers before accepting authority. */
-export declare const snapshotRuntimeNetworkProjectionV1: (value: unknown) => IRuntimeNetworkProjectionV1;
-export declare const computeRuntimeNetworkProjectionV1Digest: (value: IRuntimeNetworkProjectionV1) => Promise<TSha256Digest>;
+export declare const snapshotRuntimeNetworkProjection: (value: unknown) => IRuntimeNetworkProjection;
+export declare const computeRuntimeNetworkProjectionDigest: (value: IRuntimeNetworkProjection) => Promise<TSha256Digest>;
 /** Complete structural, digest, allocation and policy binding. Not an allocation/barrier/readiness proof. */
-export declare const validateRuntimeNetworkProjectionV1: (value: unknown) => Promise<IRuntimeNetworkProjectionV1>;
+export declare const validateRuntimeNetworkProjection: (value: unknown) => Promise<IRuntimeNetworkProjection>;
 /** Complete directed full-mesh and explicitly authorized egress; no DNS readiness dependency. */
-export declare const getRuntimeNetworkProjectionPacketGrantsV1: (value: unknown) => Promise<IRuntimeNetworkPacketGrantV1[]>;
+export declare const getRuntimeNetworkProjectionPacketGrants: (value: unknown) => Promise<IRuntimeNetworkPacketGrant[]>;
 /** Router-origin authority comes only from explicit signed selections, never DNS names or workload grants. */
-export declare const getRuntimeNetworkProjectionRouterPacketGrantsV1: (value: unknown) => Promise<IRuntimeNetworkRouterPacketGrantV1[]>;
+export declare const getRuntimeNetworkProjectionRouterPacketGrants: (value: unknown) => Promise<IRuntimeNetworkRouterPacketGrant[]>;
 /** Complete offline DNS material, including authorized names never previously queried. */
 /** Select exact local receivers before expansion; all targets still come from
  * the complete validated projection. Selection supplies no attachment authority. */
-export declare const composeRuntimeNetworkProjectionDnsViewsV1: (value: unknown, sourcesValue?: readonly IRuntimeAuthorityReferenceV1[]) => Promise<IRuntimeNetworkDnsViewV1[]>;
+export declare const composeRuntimeNetworkProjectionDnsViews: (value: unknown, sourcesValue?: readonly IRuntimeAuthorityReference[]) => Promise<IRuntimeNetworkDnsView[]>;
 /** Bind immutable address material without a circular assignment-digest dependency. */
-export declare const bindRuntimeNetworkWorkloadLeaseToAssignmentV1: (leaseValue: unknown, assignmentValue: unknown) => Promise<IRuntimeNetworkWorkloadLeaseV1>;
+export declare const bindRuntimeNetworkWorkloadLeaseToAssignment: (leaseValue: unknown, assignmentValue: unknown) => Promise<IRuntimeNetworkWorkloadLease>;
 /**
  * Pure revision decision. appliedPrevious must be the receiver's exact durable,
  * joined application receipt, never an incoming ACK field. All prior accepted
  * material/apply journals survive until effects and DNS/allocation quarantine end.
  */
-export declare const admitRuntimeNetworkProjectionV1: (value: unknown, previousValue: unknown | null, trustedScopeValue: unknown, appliedPreviousValue: unknown | null) => Promise<{
+export declare const admitRuntimeNetworkProjection: (value: unknown, previousValue: unknown | null, trustedScopeValue: unknown, appliedPreviousValue: unknown | null) => Promise<{
     status: "accepted" | "replay";
-    projection: IRuntimeNetworkProjectionV1;
+    projection: IRuntimeNetworkProjection;
 }>;