@serve.zone/interfaces 31.9.0 → 32.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.smartconfig.json +1 -0
- package/changelog.md +467 -0
- package/dist_ts/00_commitinfo_data.js +3 -3
- package/dist_ts/appstore/types.d.ts +4 -6
- package/dist_ts/appstore/types.js +5 -5
- package/dist_ts/data/backup.d.ts +3 -26
- package/dist_ts/data/cluster.d.ts +36 -11
- package/dist_ts/data/cluster.js +33 -22
- package/dist_ts/data/clusteringress.d.ts +8 -0
- package/dist_ts/data/clusteringress.js +13 -8
- package/dist_ts/data/clusternode.d.ts +121 -74
- package/dist_ts/data/clusternode.js +109 -132
- package/dist_ts/data/coremail.d.ts +3 -7
- package/dist_ts/data/coremail.js +2 -2
- package/dist_ts/data/coremail.runtime.d.ts +0 -1
- package/dist_ts/data/coremail.runtime.js +5 -22
- package/dist_ts/data/deploymentadoption.d.ts +0 -2
- package/dist_ts/data/deploymentadoption.js +40 -6
- package/dist_ts/data/deploymentoperation.js +16 -3
- package/dist_ts/data/deploymentpreflight.d.ts +0 -2
- package/dist_ts/data/deploymentpreflight.js +1 -1
- package/dist_ts/data/immutableimage.d.ts +38 -21
- package/dist_ts/data/immutableimage.js +45 -5
- package/dist_ts/data/index.d.ts +1 -1
- package/dist_ts/data/isolatedrestore.d.ts +139 -21
- package/dist_ts/data/isolatedrestore.golden.d.ts +0 -1
- package/dist_ts/data/isolatedrestore.golden.js +6 -9
- package/dist_ts/data/isolatedrestore.js +176 -40
- package/dist_ts/data/mail.d.ts +1 -1
- package/dist_ts/data/networkaddressplan.d.ts +8 -8
- package/dist_ts/data/networkaddressplan.js +4 -4
- package/dist_ts/data/networkauthority.d.ts +20 -22
- package/dist_ts/data/networkauthority.js +26 -28
- package/dist_ts/data/networkcredential.d.ts +10 -10
- package/dist_ts/data/networkcredential.js +16 -16
- package/dist_ts/data/networkdelivery.d.ts +18 -18
- package/dist_ts/data/networkdelivery.js +16 -16
- package/dist_ts/data/networklease.d.ts +18 -7
- package/dist_ts/data/networklease.js +29 -7
- package/dist_ts/data/networknode.d.ts +2 -2
- package/dist_ts/data/networkprojection.d.ts +59 -60
- package/dist_ts/data/networkprojection.js +53 -57
- package/dist_ts/data/networkprotection.d.ts +27 -28
- package/dist_ts/data/networkprotection.js +36 -36
- package/dist_ts/data/networkrouter.d.ts +11 -11
- package/dist_ts/data/networkrouter.js +1 -1
- package/dist_ts/data/networksigning.d.ts +16 -18
- package/dist_ts/data/networksigning.js +20 -21
- package/dist_ts/data/nodecredential.d.ts +4 -6
- package/dist_ts/data/nodeenrollment.d.ts +35 -40
- package/dist_ts/data/nodeenrollment.js +57 -72
- package/dist_ts/data/privatenetwork.d.ts +21 -24
- package/dist_ts/data/privatenetwork.js +39 -54
- package/dist_ts/data/runtimeassignment.d.ts +50 -34
- package/dist_ts/data/runtimeassignment.js +79 -45
- package/dist_ts/data/runtimeconfig.d.ts +21 -22
- package/dist_ts/data/runtimeconfig.js +24 -24
- package/dist_ts/data/runtimesession.d.ts +100 -62
- package/dist_ts/data/runtimesession.js +98 -79
- package/dist_ts/data/runtimeterminalreceipt.d.ts +28 -29
- package/dist_ts/data/runtimeterminalreceipt.js +42 -42
- package/dist_ts/data/secret.d.ts +18 -25
- package/dist_ts/data/secret.js +12 -52
- package/dist_ts/data/servicecredential.d.ts +14 -16
- package/dist_ts/data/servicecredential.js +17 -28
- package/dist_ts/data/serviceruntime.d.ts +7 -7
- package/dist_ts/data/serviceruntime.js +4 -4
- package/dist_ts/data/sparknodereport.d.ts +27 -14
- package/dist_ts/data/sparknodereport.js +35 -28
- package/dist_ts/data/webpush.d.ts +0 -1
- package/dist_ts/index.d.ts +2 -1
- package/dist_ts/index.js +3 -2
- package/dist_ts/platform/objectstorageretention.d.ts +21 -24
- package/dist_ts/platform/objectstorageretention.js +6 -18
- package/dist_ts/platform/storage.d.ts +1 -3
- package/dist_ts/platform/storagemigration.d.ts +0 -7
- package/dist_ts/platform/storagemigration.golden.d.ts +0 -1
- package/dist_ts/platform/storagemigration.golden.js +8 -12
- package/dist_ts/platform/storagemigration.js +6 -51
- package/dist_ts/platform/types.d.ts +2 -2
- package/dist_ts/private/canonicaljson.d.ts +9 -1
- package/dist_ts/private/canonicaljson.js +14 -2
- package/dist_ts/private/dataproperties.d.ts +62 -0
- package/dist_ts/private/dataproperties.js +117 -0
- package/dist_ts/private/networkcontract.d.ts +10 -10
- package/dist_ts/private/networkcontract.js +1 -1
- package/dist_ts/private/releaseversion.d.ts +37 -0
- package/dist_ts/private/releaseversion.js +48 -0
- package/dist_ts/private/runtimepolicy.d.ts +2 -2
- package/dist_ts/private/runtimepolicy.js +1 -1
- package/dist_ts/private/tokenlist.d.ts +9 -0
- package/dist_ts/private/tokenlist.js +23 -0
- package/dist_ts/protocol.d.ts +137 -0
- package/dist_ts/protocol.js +255 -0
- package/dist_ts/requests/admin.d.ts +8 -8
- package/dist_ts/requests/backup.d.ts +102 -112
- package/dist_ts/requests/cluster.d.ts +10 -10
- package/dist_ts/requests/clusteringress.d.ts +9 -0
- package/dist_ts/requests/clusteringress.js +1 -1
- package/dist_ts/requests/config.d.ts +3 -3
- package/dist_ts/requests/corestore.d.ts +0 -3
- package/dist_ts/requests/corestore.js +5 -9
- package/dist_ts/requests/network.d.ts +30 -30
- package/dist_ts/requests/node.d.ts +15 -28
- package/dist_ts/requests/pallet.d.ts +13 -13
- package/dist_ts/requests/runtimesession.d.ts +53 -41
- package/dist_ts/requests/secret.d.ts +4 -5
- package/dist_ts/requests/secret.js +1 -5
- package/dist_ts/runtime.corestore.d.ts +56 -74
- package/dist_ts/runtime.corestore.databaseexportpackage.d.ts +30 -36
- package/dist_ts/runtime.corestore.databaseexportpackage.golden.d.ts +11 -12
- package/dist_ts/runtime.corestore.databaseexportpackage.golden.js +54 -71
- package/dist_ts/runtime.corestore.databaseexportpackage.js +9 -25
- package/dist_ts/runtime.corestore.js +35 -135
- package/dist_ts/runtime.corestore.relay.js +2 -7
- package/dist_ts/runtime.d.ts +38 -48
- package/dist_ts/runtime.js +20 -77
- package/dist_ts/runtime.networkprojection.d.ts +4 -4
- package/dist_ts/runtime.networkprojection.js +18 -18
- package/dist_ts/runtime.workloadinit.d.ts +23 -24
- package/dist_ts/runtime.workloadinit.js +6 -13
- package/package.json +2 -2
- package/readme.md +421 -270
- package/ts/00_commitinfo_data.ts +3 -3
- package/ts/appstore/types.ts +4 -6
- package/ts/data/backup.ts +3 -38
- package/ts/data/cluster.ts +51 -34
- package/ts/data/clusteringress.ts +12 -12
- package/ts/data/clusternode.ts +204 -232
- package/ts/data/coremail.runtime.ts +4 -21
- package/ts/data/coremail.ts +3 -7
- package/ts/data/deploymentadoption.ts +46 -4
- package/ts/data/deploymentoperation.ts +16 -1
- package/ts/data/deploymentpreflight.ts +0 -2
- package/ts/data/immutableimage.ts +71 -24
- package/ts/data/index.ts +1 -1
- package/ts/data/isolatedrestore.golden.ts +5 -9
- package/ts/data/isolatedrestore.ts +339 -54
- package/ts/data/mail.ts +1 -1
- package/ts/data/networkaddressplan.ts +13 -13
- package/ts/data/networkauthority.ts +42 -46
- package/ts/data/networkcredential.ts +24 -24
- package/ts/data/networkdelivery.ts +27 -27
- package/ts/data/networklease.ts +40 -13
- package/ts/data/networknode.ts +2 -2
- package/ts/data/networkprojection.ts +119 -124
- package/ts/data/networkprotection.ts +54 -55
- package/ts/data/networkrouter.ts +14 -14
- package/ts/data/networksigning.ts +29 -32
- package/ts/data/nodecredential.ts +4 -6
- package/ts/data/nodeenrollment.ts +96 -114
- package/ts/data/privatenetwork.ts +58 -74
- package/ts/data/runtimeassignment.ts +143 -94
- package/ts/data/runtimeconfig.ts +45 -46
- package/ts/data/runtimesession.ts +185 -138
- package/ts/data/runtimeterminalreceipt.ts +72 -73
- package/ts/data/secret.ts +28 -76
- package/ts/data/servicecredential.ts +33 -43
- package/ts/data/serviceruntime.ts +11 -11
- package/ts/data/sparknodereport.ts +48 -36
- package/ts/data/webpush.ts +0 -1
- package/ts/index.ts +2 -0
- package/ts/platform/objectstorageretention.ts +36 -55
- package/ts/platform/storage.ts +1 -3
- package/ts/platform/storagemigration.golden.ts +7 -11
- package/ts/platform/storagemigration.ts +5 -55
- package/ts/platform/types.ts +2 -2
- package/ts/private/canonicaljson.ts +13 -1
- package/ts/private/dataproperties.ts +139 -0
- package/ts/private/networkcontract.ts +9 -9
- package/ts/private/releaseversion.ts +70 -0
- package/ts/private/runtimepolicy.ts +2 -2
- package/ts/private/tokenlist.ts +30 -0
- package/ts/protocol.ts +364 -0
- package/ts/requests/admin.ts +11 -11
- package/ts/requests/backup.ts +112 -117
- package/ts/requests/cluster.ts +13 -13
- package/ts/requests/clusteringress.ts +9 -0
- package/ts/requests/config.ts +3 -3
- package/ts/requests/corestore.ts +4 -16
- package/ts/requests/network.ts +40 -40
- package/ts/requests/node.ts +21 -38
- package/ts/requests/pallet.ts +17 -17
- package/ts/requests/runtimesession.ts +63 -51
- package/ts/requests/secret.ts +5 -10
- package/ts/runtime.corestore.databaseexportpackage.golden.ts +77 -95
- package/ts/runtime.corestore.databaseexportpackage.ts +51 -73
- package/ts/runtime.corestore.relay.ts +1 -10
- package/ts/runtime.corestore.ts +118 -268
- package/ts/runtime.networkprojection.ts +30 -30
- package/ts/runtime.ts +83 -158
- package/ts/runtime.workloadinit.ts +36 -48
- package/dist_ts/runtime.cloudlylegacydeploymentsettlement.d.ts +0 -902
- package/dist_ts/runtime.cloudlylegacydeploymentsettlement.golden.d.ts +0 -35
- package/dist_ts/runtime.cloudlylegacydeploymentsettlement.golden.js +0 -315
- package/dist_ts/runtime.cloudlylegacydeploymentsettlement.js +0 -3315
- package/dist_ts/runtime.cloudlylegacydeploymentsettlement.offlineexport.d.ts +0 -291
- package/dist_ts/runtime.cloudlylegacydeploymentsettlement.offlineexport.golden.d.ts +0 -30
- package/dist_ts/runtime.cloudlylegacydeploymentsettlement.offlineexport.golden.js +0 -408
- package/dist_ts/runtime.cloudlylegacydeploymentsettlement.offlineexport.js +0 -1126
- package/ts/runtime.cloudlylegacydeploymentsettlement.golden.ts +0 -421
- package/ts/runtime.cloudlylegacydeploymentsettlement.offlineexport.golden.ts +0 -510
- package/ts/runtime.cloudlylegacydeploymentsettlement.offlineexport.ts +0 -2470
- package/ts/runtime.cloudlylegacydeploymentsettlement.ts +0 -6630
|
@@ -1,16 +1,11 @@
|
|
|
1
1
|
import { corestoreDatabaseBackupRuntimeLimits, normalizeCorestoreDatabaseBackupReceipt, } from './runtime.corestore.js';
|
|
2
|
+
import { hasExactKeys } from './private/dataproperties.js';
|
|
2
3
|
const bareSha256Pattern = /^[a-f0-9]{64}$/;
|
|
3
4
|
const isRecord = (valueArg) => (Boolean(valueArg)
|
|
4
5
|
&& typeof valueArg === 'object'
|
|
5
6
|
&& !Array.isArray(valueArg)
|
|
6
7
|
&& (Object.getPrototypeOf(valueArg) === Object.prototype
|
|
7
8
|
|| Object.getPrototypeOf(valueArg) === null));
|
|
8
|
-
const hasExactKeys = (valueArg, keysArg) => {
|
|
9
|
-
const actualKeys = Object.keys(valueArg).sort();
|
|
10
|
-
const expectedKeys = [...keysArg].sort();
|
|
11
|
-
return actualKeys.length === expectedKeys.length
|
|
12
|
-
&& actualKeys.every((keyArg, indexArg) => keyArg === expectedKeys[indexArg]);
|
|
13
|
-
};
|
|
14
9
|
/**
|
|
15
10
|
* Validates one closure descriptor and names every reason it is refused.
|
|
16
11
|
*
|
|
@@ -54,4 +49,4 @@ export const validateCorestoreDatabaseClosureDescriptor = (valueArg, pathArg = '
|
|
|
54
49
|
}
|
|
55
50
|
return errors;
|
|
56
51
|
};
|
|
57
|
-
//# sourceMappingURL=data:application/json;base64,
|
|
52
|
+
//# sourceMappingURL=data:application/json;base64,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
|
package/dist_ts/runtime.d.ts
CHANGED
|
@@ -1,22 +1,19 @@
|
|
|
1
1
|
import * as plugins from './plugins.js';
|
|
2
|
-
import type { IActiveSecretRecipientMetadata,
|
|
2
|
+
import type { IActiveSecretRecipientMetadata, IClusterRuntimeTargetSetReady, IClusterRuntimeTarget, IClusterSecretDeploymentState, IIdentityCredential, IResolvedSecretManifest, IResolvedSecretManifestReference, TCoreflowRuntimeCapability, TSha256Digest, TSecretRecipientMetadata } from './data/index.js';
|
|
3
3
|
import { validateSecretRecipientMetadata } from './data/secret.js';
|
|
4
|
-
import type {
|
|
4
|
+
import type { IWorkloadInitActiveApprovalAuthority, IWorkloadInitApprovalAuthorityReference } from './runtime.workloadinit.js';
|
|
5
5
|
export * from './runtime.workloadinit.js';
|
|
6
6
|
export * from './runtime.networkprojection.js';
|
|
7
7
|
export * from './runtime.corestore.js';
|
|
8
8
|
export * from './runtime.corestore.databaseexportpackage.js';
|
|
9
9
|
export * from './runtime.corestore.relay.js';
|
|
10
|
-
export * from './runtime.cloudlylegacydeploymentsettlement.js';
|
|
11
|
-
export * from './runtime.cloudlylegacydeploymentsettlement.offlineexport.js';
|
|
12
10
|
export interface ISealedResolvedSecretMaterialEntry {
|
|
13
11
|
secretVersionId: string;
|
|
14
12
|
envelope: plugins.smartcrypto.IX25519EnvelopeV1;
|
|
15
13
|
}
|
|
16
14
|
/** Runtime-only material. No plaintext value is represented in this DTO. */
|
|
17
15
|
export interface ISealedResolvedSecretMaterial {
|
|
18
|
-
|
|
19
|
-
/** Full schema-v2 value-free manifest used for digest and rollout verification. */
|
|
16
|
+
/** The complete value-free manifest, used for digest and rollout verification. */
|
|
20
17
|
manifest: IResolvedSecretManifest;
|
|
21
18
|
/** Sorted exact coverage of the manifest's pinned versions. */
|
|
22
19
|
entries: ISealedResolvedSecretMaterialEntry[];
|
|
@@ -53,8 +50,7 @@ export interface IReq_GetResolvedSecretMaterial extends plugins.typedrequestInte
|
|
|
53
50
|
material: ISealedResolvedSecretMaterial;
|
|
54
51
|
};
|
|
55
52
|
}
|
|
56
|
-
export interface
|
|
57
|
-
schemaVersion: 1;
|
|
53
|
+
export interface ISecretRecipientEnrollmentChallenge {
|
|
58
54
|
enrollmentId: string;
|
|
59
55
|
clusterId: string;
|
|
60
56
|
recipientKeyId: string;
|
|
@@ -79,7 +75,7 @@ export interface IReq_BeginSecretRecipientEnrollment extends plugins.typedreques
|
|
|
79
75
|
expectedGeneration: number;
|
|
80
76
|
};
|
|
81
77
|
response: {
|
|
82
|
-
challenge:
|
|
78
|
+
challenge: ISecretRecipientEnrollmentChallenge;
|
|
83
79
|
};
|
|
84
80
|
}
|
|
85
81
|
export interface IReq_CompleteSecretRecipientEnrollment extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_CompleteSecretRecipientEnrollment> {
|
|
@@ -103,8 +99,7 @@ export { validateSecretRecipientMetadata };
|
|
|
103
99
|
* Reproducible binding persisted inside a trusted Cloudly mutation receipt.
|
|
104
100
|
* This value alone does not prove that Cloudly admitted the envelope.
|
|
105
101
|
*/
|
|
106
|
-
export interface
|
|
107
|
-
schemaVersion: 1;
|
|
102
|
+
export interface ISecretEnvelopeAdmissionBinding {
|
|
108
103
|
recipientKeyId: string;
|
|
109
104
|
recipientGeneration: number;
|
|
110
105
|
envelopeDigest: TSha256Digest;
|
|
@@ -114,14 +109,12 @@ export declare const createSecretEnvelopeDigestInput: (envelopeArg: unknown) =>
|
|
|
114
109
|
export declare const computeSecretEnvelopeDigest: (envelopeArg: unknown) => Promise<TSha256Digest>;
|
|
115
110
|
export declare const computeSecretRequestContextDigest: (contextArg: Uint8Array) => Promise<TSha256Digest>;
|
|
116
111
|
export declare const validateSecretEnvelopeAdmissionBinding: (bindingArg: unknown) => string[];
|
|
117
|
-
export declare const createSecretEnvelopeAdmissionBinding: (recipientArg: IActiveSecretRecipientMetadata, envelopeArg: unknown, requestContextArg: Uint8Array) => Promise<
|
|
112
|
+
export declare const createSecretEnvelopeAdmissionBinding: (recipientArg: IActiveSecretRecipientMetadata, envelopeArg: unknown, requestContextArg: Uint8Array) => Promise<ISecretEnvelopeAdmissionBinding>;
|
|
118
113
|
export declare const verifySecretEnvelopeAdmissionBinding: (bindingArg: unknown, envelopeArg: unknown, requestContextArg: Uint8Array) => Promise<boolean>;
|
|
119
|
-
export type
|
|
120
|
-
schemaVersion: 1;
|
|
114
|
+
export type TSecretRecipientEnrollmentState = {
|
|
121
115
|
generation: 0;
|
|
122
116
|
recipients: [];
|
|
123
117
|
} | {
|
|
124
|
-
schemaVersion: 1;
|
|
125
118
|
generation: number;
|
|
126
119
|
recipients: TSecretRecipientMetadata[];
|
|
127
120
|
};
|
|
@@ -131,29 +124,28 @@ export interface IReq_GetSecretRecipientEnrollmentState extends plugins.typedreq
|
|
|
131
124
|
request: {
|
|
132
125
|
identity: IIdentityCredential;
|
|
133
126
|
};
|
|
134
|
-
response:
|
|
127
|
+
response: TSecretRecipientEnrollmentState;
|
|
135
128
|
}
|
|
136
129
|
export declare const validateGetSecretRecipientEnrollmentStateRequest: (requestArg: unknown) => string[];
|
|
137
130
|
export declare const validateSecretRecipientEnrollmentState: (stateArg: unknown) => string[];
|
|
138
|
-
export interface
|
|
131
|
+
export interface ICoreflowSecretRuntimeNodeTarget extends IClusterRuntimeTarget {
|
|
139
132
|
}
|
|
140
|
-
export interface
|
|
133
|
+
export interface ICoreflowSecretRuntimeNodeEvidence extends ICoreflowSecretRuntimeNodeTarget {
|
|
141
134
|
workloadInitPlatformManifestDigest: TSha256Digest;
|
|
142
135
|
workloadInitExecutableDigest: TSha256Digest;
|
|
143
136
|
}
|
|
144
|
-
export interface
|
|
145
|
-
expectationVersion: 2;
|
|
137
|
+
export interface ICoreflowSecretRuntimeRegistrationExpectation {
|
|
146
138
|
expectationDigest: TSha256Digest;
|
|
147
139
|
reporterSessionId: string;
|
|
148
|
-
targetAuthority:
|
|
149
|
-
workloadInitAuthority:
|
|
140
|
+
targetAuthority: IClusterRuntimeTargetSetReady;
|
|
141
|
+
workloadInitAuthority: IWorkloadInitActiveApprovalAuthority;
|
|
150
142
|
activeRecipient: IActiveSecretRecipientMetadata;
|
|
151
143
|
}
|
|
152
|
-
/** Dedicated TypedSocket tag carrying
|
|
144
|
+
/** Dedicated TypedSocket tag carrying ICoreflowSecretRuntimeRegistration. */
|
|
153
145
|
export declare const coreflowSecretRuntimeRegistrationTagId: "coreflowSecretRuntimeRegistration";
|
|
154
|
-
export type
|
|
146
|
+
export type TCoreflowSecretRuntimeRegistrationExpectationResponse = {
|
|
155
147
|
status: 'available';
|
|
156
|
-
expectation:
|
|
148
|
+
expectation: ICoreflowSecretRuntimeRegistrationExpectation;
|
|
157
149
|
} | {
|
|
158
150
|
status: 'unavailable';
|
|
159
151
|
reason: 'recipient-unavailable' | 'workloadinit-unconfigured' | 'workloadinit-revoked' | 'targets-unavailable';
|
|
@@ -164,25 +156,25 @@ export interface IReq_GetCoreflowSecretRuntimeRegistrationExpectation extends pl
|
|
|
164
156
|
request: {
|
|
165
157
|
identity: IIdentityCredential;
|
|
166
158
|
};
|
|
167
|
-
response:
|
|
159
|
+
response: TCoreflowSecretRuntimeRegistrationExpectationResponse;
|
|
168
160
|
}
|
|
169
161
|
export declare const validateGetCoreflowSecretRuntimeRegistrationExpectationRequest: (requestArg: unknown) => string[];
|
|
170
|
-
export interface
|
|
171
|
-
registrationVersion: 2;
|
|
162
|
+
export interface ICoreflowSecretRuntimeRegistration {
|
|
172
163
|
expectationDigest: TSha256Digest;
|
|
173
164
|
reporterSessionId: string;
|
|
174
165
|
registeredAt: number;
|
|
175
166
|
targetGeneration: number;
|
|
176
167
|
targetSetDigest: TSha256Digest;
|
|
177
|
-
targets:
|
|
178
|
-
nodeEvidence:
|
|
179
|
-
|
|
168
|
+
targets: ICoreflowSecretRuntimeNodeTarget[];
|
|
169
|
+
nodeEvidence: ICoreflowSecretRuntimeNodeEvidence[];
|
|
170
|
+
/** Sorted and duplicate-free; every required capability of this major is present. */
|
|
171
|
+
capabilities: TCoreflowRuntimeCapability[];
|
|
180
172
|
activeRecipient: IActiveSecretRecipientMetadata;
|
|
181
|
-
workloadInitAuthority:
|
|
173
|
+
workloadInitAuthority: IWorkloadInitApprovalAuthorityReference;
|
|
182
174
|
workloadInitImageIndexDigest: TSha256Digest;
|
|
183
175
|
}
|
|
184
|
-
export declare const createCoreflowSecretRuntimeRegistrationExpectationDigestInput: (expectationArg:
|
|
185
|
-
export declare const computeCoreflowSecretRuntimeRegistrationExpectationDigest: (expectationArg:
|
|
176
|
+
export declare const createCoreflowSecretRuntimeRegistrationExpectationDigestInput: (expectationArg: ICoreflowSecretRuntimeRegistrationExpectation) => string;
|
|
177
|
+
export declare const computeCoreflowSecretRuntimeRegistrationExpectationDigest: (expectationArg: ICoreflowSecretRuntimeRegistrationExpectation) => Promise<TSha256Digest>;
|
|
186
178
|
/**
|
|
187
179
|
* Validates only a Cloudly-created expectation. It does not establish the
|
|
188
180
|
* private DSSE trust decision or Spark manager consensus that produced it.
|
|
@@ -193,8 +185,7 @@ export declare const validateCoreflowSecretRuntimeRegistrationExpectation: (expe
|
|
|
193
185
|
* removal/replacement, reporter-session change, or any expectation change.
|
|
194
186
|
*/
|
|
195
187
|
export declare const validateCoreflowSecretRuntimeRegistration: (registrationArg: unknown, expectationArg: unknown, trustedNowArg: number) => Promise<string[]>;
|
|
196
|
-
interface
|
|
197
|
-
schemaVersion: 1;
|
|
188
|
+
interface ISecretDeploymentReportBase {
|
|
198
189
|
reporterSessionId: string;
|
|
199
190
|
reportSequence: number;
|
|
200
191
|
serviceId: string;
|
|
@@ -203,39 +194,38 @@ interface ISecretDeploymentReportBaseV1 {
|
|
|
203
194
|
reportedAt: number;
|
|
204
195
|
reportDigest: TSha256Digest;
|
|
205
196
|
}
|
|
206
|
-
export interface
|
|
197
|
+
export interface ISecretDeploymentApplyingReport extends ISecretDeploymentReportBase {
|
|
207
198
|
status: 'applying';
|
|
208
199
|
}
|
|
209
|
-
export interface
|
|
200
|
+
export interface ISecretDeploymentAppliedReport extends ISecretDeploymentReportBase {
|
|
210
201
|
status: 'applied';
|
|
211
202
|
appliedManifest: IResolvedSecretManifestReference;
|
|
212
203
|
}
|
|
213
|
-
export interface
|
|
204
|
+
export interface ISecretDeploymentDriftedReport extends ISecretDeploymentReportBase {
|
|
214
205
|
status: 'drifted';
|
|
215
206
|
observedManifest?: IResolvedSecretManifestReference;
|
|
216
207
|
failureCode: string;
|
|
217
208
|
}
|
|
218
|
-
export interface
|
|
209
|
+
export interface ISecretDeploymentFailedReport extends ISecretDeploymentReportBase {
|
|
219
210
|
status: 'failed';
|
|
220
211
|
failureCode: string;
|
|
221
212
|
}
|
|
222
|
-
export type
|
|
223
|
-
export type
|
|
224
|
-
export interface
|
|
225
|
-
schemaVersion: 1;
|
|
213
|
+
export type TSecretDeploymentReport = ISecretDeploymentApplyingReport | ISecretDeploymentAppliedReport | ISecretDeploymentDriftedReport | ISecretDeploymentFailedReport;
|
|
214
|
+
export type TSecretDeploymentReportWithoutDigest = Omit<ISecretDeploymentApplyingReport, 'reportDigest'> | Omit<ISecretDeploymentAppliedReport, 'reportDigest'> | Omit<ISecretDeploymentDriftedReport, 'reportDigest'> | Omit<ISecretDeploymentFailedReport, 'reportDigest'>;
|
|
215
|
+
export interface ISecretDeploymentReportResponse {
|
|
226
216
|
acceptedSequence: number;
|
|
227
217
|
planRevision: number;
|
|
228
218
|
clusterState: IClusterSecretDeploymentState;
|
|
229
219
|
}
|
|
230
220
|
export interface IReq_ReportSecretDeploymentState extends plugins.typedrequestInterfaces.implementsTR<plugins.typedrequestInterfaces.ITypedRequest, IReq_ReportSecretDeploymentState> {
|
|
231
221
|
method: 'reportSecretDeploymentState';
|
|
232
|
-
request:
|
|
222
|
+
request: TSecretDeploymentReport & {
|
|
233
223
|
identity: IIdentityCredential;
|
|
234
224
|
};
|
|
235
|
-
response:
|
|
225
|
+
response: ISecretDeploymentReportResponse;
|
|
236
226
|
}
|
|
237
|
-
export declare const createSecretDeploymentReportDigestInput: (reportArg:
|
|
238
|
-
export declare const computeSecretDeploymentReportDigest: (reportArg:
|
|
227
|
+
export declare const createSecretDeploymentReportDigestInput: (reportArg: TSecretDeploymentReportWithoutDigest | TSecretDeploymentReport) => string;
|
|
228
|
+
export declare const computeSecretDeploymentReportDigest: (reportArg: TSecretDeploymentReportWithoutDigest | TSecretDeploymentReport) => Promise<TSha256Digest>;
|
|
239
229
|
export declare const verifySecretDeploymentReportDigest: (reportArg: unknown) => Promise<boolean>;
|
|
240
230
|
/**
|
|
241
231
|
* The expected cluster and reporter session come from the consumer's verified
|