@serve.zone/interfaces 31.9.0 → 32.0.0

package/dist_ts/protocol.d.ts

@@ -0,0 +1,137 @@
+/**
+ * The contract this build speaks: the installed `@serve.zone/interfaces` release.
+ *
+ * There is no protocol number beside it and no per-shape version anywhere in this package. One
+ * release of these interfaces is exactly one contract, so naming the release is the complete
+ * statement about what a peer sends and what it can read.
+ */
+export declare const protocolVersion: string;
+/**
+ * What one side of a session speaks, and the oldest peer it accepts.
+ *
+ * Frozen across majors together with `IProtocolRefusal`: a peer built against the next major must
+ * still be able to read this, or the mismatch it exists to name arrives as an unreadable body and
+ * degrades into a generic contract rejection.
+ */
+export interface IProtocolOffer {
+    /** `MAJOR.MINOR.PATCH` of the `@serve.zone/interfaces` release the sender was built against. */
+    interfacesVersion: string;
+    /**
+     * The oldest peer release this side accepts: in the same major as `interfacesVersion` and never
+     * above it. A deployable raises it in the commit that starts depending on a later minor, for the
+     * session kind that depends on it, which is what orders a rollout: peers first.
+     */
+    minimumPeerVersion: string;
+}
+/**
+ * Why two offers cannot serve one session, judged from the side that refuses.
+ *
+ * `peer-below-minimum` and `self-below-peer-minimum` are the same fact seen from the two sides,
+ * which is why both exist: a log line names who was too old without the reader having to know
+ * which side wrote it.
+ */
+declare const protocolIncompatibilities: readonly ["major-mismatch", "peer-below-minimum", "self-below-peer-minimum"];
+export type TProtocolIncompatibility = (typeof protocolIncompatibilities)[number];
+/**
+ * The named refusal, carried as `TypedResponseError.errorData` on a TypedRequest hop and as the
+ * response body on the Spark heartbeat's refusal status. Frozen across majors.
+ */
+export interface IProtocolRefusal {
+    code: 'protocol-incompatible';
+    /** Judged from the refusing side. */
+    reason: TProtocolIncompatibility;
+    /** The offer of the side that refused. */
+    refusing: IProtocolOffer;
+    /** The offer it refused. */
+    refused: IProtocolOffer;
+}
+export type TProtocolNegotiation = {
+    compatible: true;
+} | {
+    compatible: false;
+    refusal: IProtocolRefusal;
+};
+/**
+ * The cadence at which a refused client offers again.
+ *
+ * Shared so that no client invents its own: a refusal stands until one of the two sides is
+ * upgraded, which is an operator action, so offering faster only costs connections.
+ */
+export declare const refusedOfferRetryIntervalMs = 300000;
+/**
+ * The status a route that carries no typed error answers a refusal with, body `IProtocolRefusal`.
+ *
+ * The Spark routes are plain HTTPS POSTs, so the refusal needs a status of its own: 422 says the
+ * body was read and judged, which is exactly what happened, and separates a refused offer from the
+ * 401 an unknown node gets and the 400 a malformed body gets.
+ */
+export declare const protocolRefusalHttpStatus = 422;
+/**
+ * Validates one protocol offer and names every reason it is refused.
+ *
+ * Shape and self-consistency only, like every other validator in this package: whether the peer
+ * that sent it may open a session is the server's decision against its own records, and whether
+ * the two sides can serve one is `negotiateProtocol`.
+ */
+export declare const validateProtocolOffer: (valueArg: unknown, pathArg?: string) => string[];
+/**
+ * Every reason the `protocol` key of a body does not carry one offer.
+ *
+ * The naming twin of `readProtocolOffer`, for a validator that lists reasons instead of throwing:
+ * both read that key once as a data property, so a carrier never runs an accessor a peer put on a
+ * body, and both judge the copy that read produced rather than the peer's object.
+ */
+export declare const validateProtocolOfferOn: (bodyArg: unknown, pathArg?: string) => string[];
+/**
+ * This build's offer towards one kind of peer.
+ *
+ * The spoken version is never stated by the caller: it is the installed release, so an offer
+ * cannot claim a contract this build does not carry. A minimum above that release, or in another
+ * major, is refused here — at start-up of the deployable that declared it, rather than at its
+ * first registration in production.
+ */
+export declare const createProtocolOffer: (minimumPeerVersionArg: string) => IProtocolOffer;
+/**
+ * The offer on a request or response body, read before anything else on that body.
+ *
+ * This is where the one server order on every carrier is written down, so that each carrier can
+ * refer to it instead of restating it: read the raw body as a bounded record, `readProtocolOffer`
+ * on it, `negotiateProtocol` against this server's offer for that session kind, answer a refusal,
+ * and only then the carrier's exact-key validator, the bearer and any mutation. The offer comes
+ * before the validator because every validator in this package is exact-key: a peer of a later
+ * major sends keys this build cannot validate, so a server that shape-checked first would answer
+ * an incompatible peer with a generic malformed-body rejection instead of the named refusal it
+ * backs off from. A carrier whose validator also checks `protocol` checks it for self-consistency
+ * within one major; the negotiation has already happened by then.
+ *
+ * Reads `protocol` alone and touches no other key, for that same reason. The returned offer is
+ * detached, so validating the rest of the body afterwards cannot change what was negotiated.
+ */
+export declare const readProtocolOffer: (bodyArg: unknown) => IProtocolOffer;
+/**
+ * Whether the two sides can serve one session, judged from the local side.
+ *
+ * Pure, and the order of the three checks is part of the contract: a major mismatch is reported as
+ * a major mismatch even when a minimum would also fail, because that is the fact an operator acts
+ * on. The two minimum rules are mirror images — one of them holding means the other holds on the
+ * peer, and they can never hold at once, since that would need each version to be below the other.
+ * An offer whose versions are not release versions is refused by throwing, at the caller that
+ * passed it, rather than named as an incompatibility between two peers.
+ */
+export declare const negotiateProtocol: (localArg: IProtocolOffer, remoteArg: IProtocolOffer) => TProtocolNegotiation;
+/**
+ * The refusal inside an error payload or a response body, or `null` when the value is not one.
+ *
+ * Every transport hands it over as plain JSON, so this reads a value that survived serialization
+ * and answers `null` for everything else: that is how a client tells a protocol refusal, which it
+ * must not retry quickly, apart from every other error a server may return.
+ */
+export declare const readProtocolRefusal: (valueArg: unknown) => IProtocolRefusal | null;
+/**
+ * One line naming both sides, for the log a refusal is judged from.
+ *
+ * It opens with the code, which is the text prefix frozen across majors, so a refusal stays
+ * recognisable in a log written by a build nobody runs any more.
+ */
+export declare const describeProtocolRefusal: (refusalArg: IProtocolRefusal) => string;
+export {};

package/dist_ts/protocol.js

@@ -0,0 +1,255 @@
+import { commitinfo } from './00_commitinfo_data.js';
+import { isPlainRecord, readDataProperty, readExactDataRecord, } from './private/dataproperties.js';
+import { compareReleaseVersions, isReleaseVersion, maximumReleaseVersionLength, parseReleaseVersion, } from './private/releaseversion.js';
+/**
+ * The contract this build speaks: the installed `@serve.zone/interfaces` release.
+ *
+ * There is no protocol number beside it and no per-shape version anywhere in this package. One
+ * release of these interfaces is exactly one contract, so naming the release is the complete
+ * statement about what a peer sends and what it can read.
+ */
+export const protocolVersion = commitinfo.version;
+const protocolOfferKeys = ['interfacesVersion', 'minimumPeerVersion'];
+/**
+ * Why two offers cannot serve one session, judged from the side that refuses.
+ *
+ * `peer-below-minimum` and `self-below-peer-minimum` are the same fact seen from the two sides,
+ * which is why both exist: a log line names who was too old without the reader having to know
+ * which side wrote it.
+ */
+const protocolIncompatibilities = [
+    'major-mismatch',
+    'peer-below-minimum',
+    'self-below-peer-minimum',
+];
+const protocolRefusalKeys = ['code', 'reason', 'refusing', 'refused'];
+/**
+ * The cadence at which a refused client offers again.
+ *
+ * Shared so that no client invents its own: a refusal stands until one of the two sides is
+ * upgraded, which is an operator action, so offering faster only costs connections.
+ */
+export const refusedOfferRetryIntervalMs = 300_000;
+/**
+ * The status a route that carries no typed error answers a refusal with, body `IProtocolRefusal`.
+ *
+ * The Spark routes are plain HTTPS POSTs, so the refusal needs a status of its own: 422 says the
+ * body was read and judged, which is exactly what happened, and separates a refused offer from the
+ * 401 an unknown node gets and the 400 a malformed body gets.
+ */
+export const protocolRefusalHttpStatus = 422;
+const exactSchemaMessage = (pathArg) => `${pathArg} must use its exact schema`;
+const releaseVersionMessage = (pathArg) => (`${pathArg} must be a MAJOR.MINOR.PATCH release version of at most `
+    + `${maximumReleaseVersionLength} characters, without prerelease or build metadata`);
+const requireReleaseVersion = (valueArg, pathArg) => {
+    const version = parseReleaseVersion(valueArg);
+    if (version === null) {
+        throw new Error(releaseVersionMessage(pathArg));
+    }
+    return version;
+};
+/**
+ * The one place an offer is built: frozen, over two values that were read once and then judged.
+ *
+ * Every offer this module hands out comes from here, so what a caller holds shares nothing with
+ * the body it arrived on and cannot change under a session that was already negotiated.
+ */
+const buildProtocolOffer = (interfacesVersionArg, minimumPeerVersionArg) => Object.freeze({
+    interfacesVersion: interfacesVersionArg,
+    minimumPeerVersion: minimumPeerVersionArg,
+});
+/** Every reason two values are not one offer, in the order a reader fixes them. */
+const offerErrors = (interfacesVersionArg, minimumPeerVersionArg, pathArg) => {
+    const spoken = parseReleaseVersion(interfacesVersionArg);
+    const minimum = parseReleaseVersion(minimumPeerVersionArg);
+    if (spoken === null || minimum === null) {
+        return [
+            ...(spoken === null ? [releaseVersionMessage(`${pathArg} interfacesVersion`)] : []),
+            ...(minimum === null ? [releaseVersionMessage(`${pathArg} minimumPeerVersion`)] : []),
+        ];
+    }
+    return [
+        ...(spoken.major !== minimum.major
+            ? [`${pathArg} minimumPeerVersion must be in the same major as interfacesVersion`]
+            : []),
+        ...(compareReleaseVersions(minimum, spoken) > 0
+            ? [`${pathArg} minimumPeerVersion must not be above interfacesVersion`]
+            : []),
+    ];
+};
+/**
+ * Reads both fields once and judges those two values.
+ *
+ * The copy is built from what was judged rather than read again from the source: an offer arrives
+ * on a body a peer wrote, and the session must be served by the offer the validator saw. A field
+ * that is not plain data is refused by `readExactDataRecord` instead of run, so reading an offer
+ * never executes a peer's code and cannot observe two different values.
+ */
+const readOffer = (valueArg, pathArg = 'protocol offer') => {
+    const offer = readExactDataRecord(valueArg, protocolOfferKeys);
+    if (offer === null) {
+        return { offer: null, errors: [exactSchemaMessage(pathArg)] };
+    }
+    const interfacesVersion = offer.interfacesVersion;
+    const minimumPeerVersion = offer.minimumPeerVersion;
+    // The grammar is judged first because the rules below compare two releases, and a value that
+    // names none cannot be compared to one.
+    if (!isReleaseVersion(interfacesVersion) || !isReleaseVersion(minimumPeerVersion)) {
+        return { offer: null, errors: offerErrors(interfacesVersion, minimumPeerVersion, pathArg) };
+    }
+    const errors = offerErrors(interfacesVersion, minimumPeerVersion, pathArg);
+    return errors.length > 0
+        ? { offer: null, errors }
+        : { offer: buildProtocolOffer(interfacesVersion, minimumPeerVersion), errors };
+};
+/**
+ * Validates one protocol offer and names every reason it is refused.
+ *
+ * Shape and self-consistency only, like every other validator in this package: whether the peer
+ * that sent it may open a session is the server's decision against its own records, and whether
+ * the two sides can serve one is `negotiateProtocol`.
+ */
+export const validateProtocolOffer = (valueArg, pathArg = 'protocol offer') => readOffer(valueArg, pathArg).errors;
+/**
+ * Every reason the `protocol` key of a body does not carry one offer.
+ *
+ * The naming twin of `readProtocolOffer`, for a validator that lists reasons instead of throwing:
+ * both read that key once as a data property, so a carrier never runs an accessor a peer put on a
+ * body, and both judge the copy that read produced rather than the peer's object.
+ */
+export const validateProtocolOfferOn = (bodyArg, pathArg = 'protocol offer') => validateProtocolOffer(readDataProperty(bodyArg, 'protocol')?.value, pathArg);
+/** One valid offer, detached and inert, or the first reason the value is not one. */
+const requireProtocolOffer = (valueArg, pathArg) => {
+    const read = readOffer(valueArg, pathArg);
+    if (read.offer === null) {
+        throw new Error(read.errors[0]);
+    }
+    return read.offer;
+};
+/**
+ * This build's offer towards one kind of peer.
+ *
+ * The spoken version is never stated by the caller: it is the installed release, so an offer
+ * cannot claim a contract this build does not carry. A minimum above that release, or in another
+ * major, is refused here — at start-up of the deployable that declared it, rather than at its
+ * first registration in production.
+ */
+export const createProtocolOffer = (minimumPeerVersionArg) => (requireProtocolOffer({
+    interfacesVersion: protocolVersion,
+    minimumPeerVersion: minimumPeerVersionArg,
+}, 'protocol offer'));
+/**
+ * The offer on a request or response body, read before anything else on that body.
+ *
+ * This is where the one server order on every carrier is written down, so that each carrier can
+ * refer to it instead of restating it: read the raw body as a bounded record, `readProtocolOffer`
+ * on it, `negotiateProtocol` against this server's offer for that session kind, answer a refusal,
+ * and only then the carrier's exact-key validator, the bearer and any mutation. The offer comes
+ * before the validator because every validator in this package is exact-key: a peer of a later
+ * major sends keys this build cannot validate, so a server that shape-checked first would answer
+ * an incompatible peer with a generic malformed-body rejection instead of the named refusal it
+ * backs off from. A carrier whose validator also checks `protocol` checks it for self-consistency
+ * within one major; the negotiation has already happened by then.
+ *
+ * Reads `protocol` alone and touches no other key, for that same reason. The returned offer is
+ * detached, so validating the rest of the body afterwards cannot change what was negotiated.
+ */
+export const readProtocolOffer = (bodyArg) => {
+    if (!isPlainRecord(bodyArg)) {
+        throw new Error('protocol offer must be carried as the protocol key of a body record');
+    }
+    // One data property, read once: a `protocol` key that is an accessor carries no offer this
+    // module will serve a session from, exactly like a key that is missing or malformed.
+    return requireProtocolOffer(readDataProperty(bodyArg, 'protocol')?.value, 'protocol offer');
+};
+/**
+ * The one place an `IProtocolRefusal` is built: frozen, over two offers this module already
+ * detached, so a refusal states what was judged and nothing a caller can change afterwards.
+ */
+const buildProtocolRefusal = (reasonArg, refusingArg, refusedArg) => Object.freeze({
+    code: 'protocol-incompatible',
+    reason: reasonArg,
+    refusing: refusingArg,
+    refused: refusedArg,
+});
+/**
+ * One side, read exactly once.
+ *
+ * Only the grammar is judged here: whether two offers can serve one session is the decision this
+ * feeds, and a side whose own two versions disagree still has to get a named answer rather than a
+ * different error. Reading once is what lets the refusal state what was judged while each caller
+ * goes on holding, and changing, its own offer object.
+ */
+const readNegotiatingSide = (offerArg, pathArg) => {
+    const { interfacesVersion, minimumPeerVersion } = offerArg;
+    const spoken = requireReleaseVersion(interfacesVersion, `${pathArg} interfacesVersion`);
+    const minimum = requireReleaseVersion(minimumPeerVersion, `${pathArg} minimumPeerVersion`);
+    return { offer: buildProtocolOffer(interfacesVersion, minimumPeerVersion), spoken, minimum };
+};
+/**
+ * Whether the two sides can serve one session, judged from the local side.
+ *
+ * Pure, and the order of the three checks is part of the contract: a major mismatch is reported as
+ * a major mismatch even when a minimum would also fail, because that is the fact an operator acts
+ * on. The two minimum rules are mirror images — one of them holding means the other holds on the
+ * peer, and they can never hold at once, since that would need each version to be below the other.
+ * An offer whose versions are not release versions is refused by throwing, at the caller that
+ * passed it, rather than named as an incompatibility between two peers.
+ */
+export const negotiateProtocol = (localArg, remoteArg) => {
+    const local = readNegotiatingSide(localArg, 'local protocol offer');
+    const remote = readNegotiatingSide(remoteArg, 'remote protocol offer');
+    const refuse = (reasonArg) => ({
+        compatible: false,
+        refusal: buildProtocolRefusal(reasonArg, local.offer, remote.offer),
+    });
+    if (local.spoken.major !== remote.spoken.major) {
+        return refuse('major-mismatch');
+    }
+    if (compareReleaseVersions(remote.spoken, local.minimum) < 0) {
+        return refuse('peer-below-minimum');
+    }
+    if (compareReleaseVersions(local.spoken, remote.minimum) < 0) {
+        return refuse('self-below-peer-minimum');
+    }
+    return { compatible: true };
+};
+const isProtocolIncompatibility = (valueArg) => (protocolIncompatibilities.some((reasonArg) => reasonArg === valueArg));
+/**
+ * The refusal inside an error payload or a response body, or `null` when the value is not one.
+ *
+ * Every transport hands it over as plain JSON, so this reads a value that survived serialization
+ * and answers `null` for everything else: that is how a client tells a protocol refusal, which it
+ * must not retry quickly, apart from every other error a server may return.
+ */
+export const readProtocolRefusal = (valueArg) => {
+    const refusal = readExactDataRecord(valueArg, protocolRefusalKeys);
+    if (refusal === null) {
+        return null;
+    }
+    // Every field is read once and both offers are judged as copies, so what a client waits on is
+    // what its own check answered `null` or a refusal for.
+    const code = refusal.code;
+    const reason = refusal.reason;
+    if (code !== 'protocol-incompatible' || !isProtocolIncompatibility(reason)) {
+        return null;
+    }
+    const refusing = readOffer(refusal.refusing).offer;
+    const refused = readOffer(refusal.refused).offer;
+    if (refusing === null || refused === null) {
+        return null;
+    }
+    return buildProtocolRefusal(reason, refusing, refused);
+};
+/**
+ * One line naming both sides, for the log a refusal is judged from.
+ *
+ * It opens with the code, which is the text prefix frozen across majors, so a refusal stays
+ * recognisable in a log written by a build nobody runs any more.
+ */
+export const describeProtocolRefusal = (refusalArg) => (`${refusalArg.code} (${refusalArg.reason}): `
+    + `refusing side speaks ${refusalArg.refusing.interfacesVersion} `
+    + `and accepts from ${refusalArg.refusing.minimumPeerVersion}; `
+    + `refused side speaks ${refusalArg.refused.interfacesVersion} `
+    + `and accepts from ${refusalArg.refused.minimumPeerVersion}`);
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/requests/admin.d.ts

@@ -1,15 +1,15 @@
 import * as plugins from '../plugins.js';
 import type { IIdentity, IIdentityCredential, IServiceDeploymentGrant } from '../data/user.js';
-import type { IServiceMachineCredentialMetadataV1, IServiceMachineCredentialMutationResultV1, TServiceMachineCredentialMutationV1 } from '../data/servicecredential.js';
-export interface IReq_Admin_GetServiceMachineCredentialV1 extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_Admin_GetServiceMachineCredentialV1> {
-    method: 'getServiceMachineCredentialV1';
+import type { IServiceMachineCredentialMetadata, IServiceMachineCredentialMutationResult, TServiceMachineCredentialMutation } from '../data/servicecredential.js';
+export interface IReq_Admin_GetServiceMachineCredential extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_Admin_GetServiceMachineCredential> {
+    method: 'getServiceMachineCredential';
     request: {
         identity: IIdentityCredential;
         organizationId: string;
         serviceId: string;
     };
     response: {
-        credential: IServiceMachineCredentialMetadataV1 | null;
+        credential: IServiceMachineCredentialMetadata | null;
     };
 }
 /**
@@ -17,13 +17,13 @@ export interface IReq_Admin_GetServiceMachineCredentialV1 extends plugins.typedr
  * encrypted SecretSet delivery and the replay receipt in one fenced transaction.
  * No bearer is returned. Existing legacy deployment/cluster credentials are separate.
  */
-export interface IReq_Admin_MutateServiceMachineCredentialV1 extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_Admin_MutateServiceMachineCredentialV1> {
-    method: 'mutateServiceMachineCredentialV1';
+export interface IReq_Admin_MutateServiceMachineCredential extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_Admin_MutateServiceMachineCredential> {
+    method: 'mutateServiceMachineCredential';
     request: {
         identity: IIdentityCredential;
-        mutation: TServiceMachineCredentialMutationV1;
+        mutation: TServiceMachineCredentialMutation;
     };
-    response: IServiceMachineCredentialMutationResultV1;
+    response: IServiceMachineCredentialMutationResult;
 }
 /** Backend-owned human credential metadata; never includes a password verifier. */
 export interface IHumanCredentialMetadata {