@serve.zone/interfaces 32.35.0 → 32.36.0

package/dist_ts/data/runtimeassignmentexec.d.ts

@@ -0,0 +1,110 @@
+import type { IRuntimeAssignment, IRuntimeAssignmentReference } from './runtimeassignment.js';
+import type { IRuntimeSessionBinding } from './runtimesession.js';
+/** A terminal's size in character cells. */
+export interface IRuntimeTerminalSize {
+    columns: number;
+    rows: number;
+}
+/**
+ * A controller's request to run one command inside one running attempt's container.
+ *
+ * `command` is the argument vector the runtime executes directly: no shell parses it unless its
+ * first element names one. With `tty` the process runs on a terminal of `terminalSize`, which is
+ * stated exactly then; its output arrives on one stream. Without it stdout and stderr arrive on
+ * separate streams. Standard input is the optional stream the TypedRequest carries beside this
+ * body; its end is the process's end of input.
+ */
+export interface IOpenRuntimeAssignmentExecRequest {
+    session: IRuntimeSessionBinding;
+    /** The exact current revision of a `run` assignment on this node. */
+    assignment: IRuntimeAssignmentReference;
+    command: string[];
+    tty: boolean;
+    terminalSize: IRuntimeTerminalSize | null;
+}
+/**
+ * The node's answer once the process runs. `execId` names the session in later requests;
+ * `idleTimeoutMs` is how long the session may carry no byte in either direction before the node
+ * ends it.
+ */
+export interface IOpenRuntimeAssignmentExecResponse {
+    execId: string;
+    assignment: IRuntimeAssignmentReference;
+    tty: boolean;
+    idleTimeoutMs: number;
+}
+/** A new terminal size for a `tty` session. */
+export interface IResizeRuntimeAssignmentExecRequest {
+    session: IRuntimeSessionBinding;
+    execId: string;
+    terminalSize: IRuntimeTerminalSize;
+}
+export interface IResizeRuntimeAssignmentExecResponse {
+    execId: string;
+}
+/** Ends a session and releases its slot, whether or not its process has exited. */
+export interface ICloseRuntimeAssignmentExecRequest {
+    session: IRuntimeSessionBinding;
+    execId: string;
+}
+/**
+ * Why the node ended a process before it exited: `closed` by this request, `idle-timeout` after
+ * `idleTimeoutMs` without a byte, `container-stopped` because its container stopped.
+ */
+export type TRuntimeAssignmentExecTermination = 'closed' | 'idle-timeout' | 'container-stopped';
+/**
+ * How the session ended. `exited` carries the process's `exitCode`, 128 plus the signal number
+ * for a process a signal ended; `terminated` states why the node ended it and carries no code.
+ */
+export interface ICloseRuntimeAssignmentExecResponse {
+    execId: string;
+    outcome: 'exited' | 'terminated';
+    exitCode: number | null;
+    termination: TRuntimeAssignmentExecTermination | null;
+}
+/**
+ * Exec runs only for a controller on the node's own host (`controller.kind: 'onebox'`, which only a
+ * local controller binding carries), and only on the connection that holds its session. A session
+ * lives until it is closed, or until the node ends it: after `idleTimeoutMs` without a byte, when
+ * its container stops, or when the controller session it was opened under ends, in which case its
+ * `execId` is gone with it. An ended session keeps its slot and its outcome until it is closed.
+ */
+export declare const runtimeAssignmentExecContract: Readonly<{
+    readonly error: "Runtime assignment exec contract rejected.";
+    readonly controllerKind: "onebox";
+    /** Open sessions per node, ended ones not yet closed included; one more is refused. */
+    readonly maximumSessions: 4;
+    readonly idleTimeoutMs: 900000;
+    readonly maximumCommandArguments: 256;
+    /** The UTF-8 bytes of every argument together. */
+    readonly maximumCommandBytes: 65536;
+    /** The largest terminal dimension, the width of the runtime's own size field. */
+    readonly maximumTerminalDimension: 65535;
+    readonly maximumExitCode: 255;
+}>;
+export declare const snapshotOpenRuntimeAssignmentExecRequest: (valueArg: unknown) => IOpenRuntimeAssignmentExecRequest;
+export declare const snapshotOpenRuntimeAssignmentExecResponse: (valueArg: unknown) => IOpenRuntimeAssignmentExecResponse;
+export declare const snapshotResizeRuntimeAssignmentExecRequest: (valueArg: unknown) => IResizeRuntimeAssignmentExecRequest;
+export declare const snapshotResizeRuntimeAssignmentExecResponse: (valueArg: unknown) => IResizeRuntimeAssignmentExecResponse;
+export declare const snapshotCloseRuntimeAssignmentExecRequest: (valueArg: unknown) => ICloseRuntimeAssignmentExecRequest;
+export declare const snapshotCloseRuntimeAssignmentExecResponse: (valueArg: unknown) => ICloseRuntimeAssignmentExecResponse;
+/**
+ * Node-side content binding, not authentication. `trustedSessionArg` is the node's CURRENT
+ * session, the request must have arrived on that session's own connection, and that session must
+ * be a local controller's. `assignmentArg` is the node's current admitted revision of the named
+ * assignment: the request must name exactly it, it must be a `run` assignment, and it must belong
+ * to the session's controller, node and runtime namespace. Whether its container runs is the
+ * node's own check.
+ */
+export declare const bindOpenRuntimeAssignmentExecRequest: (valueArg: unknown, assignmentArg: unknown, trustedSessionArg: unknown) => Promise<{
+    request: IOpenRuntimeAssignmentExecRequest;
+    assignment: IRuntimeAssignment;
+}>;
+/** Matches an opened session to the request: the same assignment revision and terminal mode. */
+export declare const bindOpenRuntimeAssignmentExecResponse: (valueArg: unknown, requestArg: unknown) => IOpenRuntimeAssignmentExecResponse;
+/** Node-side content binding of a resize; which sessions exist and are `tty` is the node's check. */
+export declare const bindResizeRuntimeAssignmentExecRequest: (valueArg: unknown, trustedSessionArg: unknown) => IResizeRuntimeAssignmentExecRequest;
+export declare const bindResizeRuntimeAssignmentExecResponse: (valueArg: unknown, requestArg: unknown) => IResizeRuntimeAssignmentExecResponse;
+/** Node-side content binding of a close; which sessions exist is the node's check. */
+export declare const bindCloseRuntimeAssignmentExecRequest: (valueArg: unknown, trustedSessionArg: unknown) => ICloseRuntimeAssignmentExecRequest;
+export declare const bindCloseRuntimeAssignmentExecResponse: (valueArg: unknown, requestArg: unknown) => ICloseRuntimeAssignmentExecResponse;

package/dist_ts/data/runtimeassignmentexec.js

@@ -0,0 +1,164 @@
+import { getRuntimeAssignmentReference, snapshotRuntimeAssignment, validateRuntimeAssignment } from './runtimeassignment.js';
+import { snapshotRuntimeSessionBinding } from './runtimesession.js';
+import { captureNetwork, networkCounter, networkDigest, networkEqual, networkId, networkRecord, requireNetwork, } from '../private/networkcontract.js';
+/**
+ * Exec runs only for a controller on the node's own host (`controller.kind: 'onebox'`, which only a
+ * local controller binding carries), and only on the connection that holds its session. A session
+ * lives until it is closed, or until the node ends it: after `idleTimeoutMs` without a byte, when
+ * its container stops, or when the controller session it was opened under ends, in which case its
+ * `execId` is gone with it. An ended session keeps its slot and its outcome until it is closed.
+ */
+export const runtimeAssignmentExecContract = Object.freeze({
+    error: 'Runtime assignment exec contract rejected.',
+    controllerKind: 'onebox',
+    /** Open sessions per node, ended ones not yet closed included; one more is refused. */
+    maximumSessions: 4,
+    idleTimeoutMs: 900_000,
+    maximumCommandArguments: 256,
+    /** The UTF-8 bytes of every argument together. */
+    maximumCommandBytes: 65_536,
+    /** The largest terminal dimension, the width of the runtime's own size field. */
+    maximumTerminalDimension: 65_535,
+    maximumExitCode: 255,
+});
+const fail = () => { throw new Error(runtimeAssignmentExecContract.error); };
+const safe = (operationArg) => { try {
+    return operationArg();
+}
+catch {
+    return fail();
+} };
+const encoder = new TextEncoder();
+const terminations = ['closed', 'idle-timeout', 'container-stopped'];
+const referenceOf = (valueArg) => {
+    const value = networkRecord(valueArg, ['assignmentId', 'generation', 'digest']);
+    return {
+        assignmentId: networkId(value.assignmentId), generation: networkCounter(value.generation),
+        digest: networkDigest(value.digest),
+    };
+};
+const terminalSizeOf = (valueArg) => {
+    const value = networkRecord(valueArg, ['columns', 'rows']);
+    return {
+        columns: networkCounter(value.columns, runtimeAssignmentExecContract.maximumTerminalDimension),
+        rows: networkCounter(value.rows, runtimeAssignmentExecContract.maximumTerminalDimension),
+    };
+};
+const commandOf = (valueArg) => {
+    requireNetwork(Array.isArray(valueArg) && valueArg.length > 0
+        && valueArg.length <= runtimeAssignmentExecContract.maximumCommandArguments);
+    let bytes = 0;
+    const command = valueArg.map((argumentArg) => {
+        requireNetwork(typeof argumentArg === 'string' && !argumentArg.includes('\0'));
+        bytes += encoder.encode(argumentArg).byteLength;
+        return argumentArg;
+    });
+    requireNetwork(command[0].length > 0 && bytes <= runtimeAssignmentExecContract.maximumCommandBytes);
+    return command;
+};
+export const snapshotOpenRuntimeAssignmentExecRequest = (valueArg) => safe(() => {
+    const value = networkRecord(captureNetwork(valueArg), ['session', 'assignment', 'command', 'tty', 'terminalSize']);
+    requireNetwork(typeof value.tty === 'boolean' && (value.tty === (value.terminalSize !== null)));
+    return {
+        session: snapshotRuntimeSessionBinding(value.session), assignment: referenceOf(value.assignment),
+        command: commandOf(value.command), tty: value.tty,
+        terminalSize: value.terminalSize === null ? null : terminalSizeOf(value.terminalSize),
+    };
+});
+export const snapshotOpenRuntimeAssignmentExecResponse = (valueArg) => safe(() => {
+    const value = networkRecord(captureNetwork(valueArg), ['execId', 'assignment', 'tty', 'idleTimeoutMs']);
+    requireNetwork(typeof value.tty === 'boolean'
+        && value.idleTimeoutMs === runtimeAssignmentExecContract.idleTimeoutMs);
+    return {
+        execId: networkId(value.execId), assignment: referenceOf(value.assignment), tty: value.tty,
+        idleTimeoutMs: runtimeAssignmentExecContract.idleTimeoutMs,
+    };
+});
+export const snapshotResizeRuntimeAssignmentExecRequest = (valueArg) => safe(() => {
+    const value = networkRecord(captureNetwork(valueArg), ['session', 'execId', 'terminalSize']);
+    return {
+        session: snapshotRuntimeSessionBinding(value.session), execId: networkId(value.execId),
+        terminalSize: terminalSizeOf(value.terminalSize),
+    };
+});
+export const snapshotResizeRuntimeAssignmentExecResponse = (valueArg) => safe(() => {
+    const value = networkRecord(captureNetwork(valueArg), ['execId']);
+    return { execId: networkId(value.execId) };
+});
+export const snapshotCloseRuntimeAssignmentExecRequest = (valueArg) => safe(() => {
+    const value = networkRecord(captureNetwork(valueArg), ['session', 'execId']);
+    return { session: snapshotRuntimeSessionBinding(value.session), execId: networkId(value.execId) };
+});
+export const snapshotCloseRuntimeAssignmentExecResponse = (valueArg) => safe(() => {
+    const value = networkRecord(captureNetwork(valueArg), ['execId', 'outcome', 'exitCode', 'termination']);
+    const execId = networkId(value.execId);
+    if (value.outcome === 'exited') {
+        requireNetwork(typeof value.exitCode === 'number' && Number.isSafeInteger(value.exitCode)
+            && value.exitCode >= 0 && !Object.is(value.exitCode, -0)
+            && value.exitCode <= runtimeAssignmentExecContract.maximumExitCode && value.termination === null);
+        return { execId, outcome: 'exited', exitCode: value.exitCode, termination: null };
+    }
+    requireNetwork(value.outcome === 'terminated' && value.exitCode === null
+        && terminations.includes(value.termination));
+    return {
+        execId, outcome: 'terminated', exitCode: null,
+        termination: value.termination,
+    };
+});
+/** Exec is a local controller's alone; `trustedSessionArg` decides, never a request field. */
+const requireLocalSession = (requestSessionArg, trustedSessionArg) => {
+    const trustedSession = safe(() => snapshotRuntimeSessionBinding(trustedSessionArg));
+    safe(() => requireNetwork(networkEqual(requestSessionArg, trustedSession)
+        && trustedSession.controller.kind === runtimeAssignmentExecContract.controllerKind));
+};
+/**
+ * Node-side content binding, not authentication. `trustedSessionArg` is the node's CURRENT
+ * session, the request must have arrived on that session's own connection, and that session must
+ * be a local controller's. `assignmentArg` is the node's current admitted revision of the named
+ * assignment: the request must name exactly it, it must be a `run` assignment, and it must belong
+ * to the session's controller, node and runtime namespace. Whether its container runs is the
+ * node's own check.
+ */
+export const bindOpenRuntimeAssignmentExecRequest = async (valueArg, assignmentArg, trustedSessionArg) => {
+    const request = snapshotOpenRuntimeAssignmentExecRequest(valueArg);
+    requireLocalSession(request.session, trustedSessionArg);
+    const assignment = safe(() => snapshotRuntimeAssignment(assignmentArg));
+    if ((await validateRuntimeAssignment(assignment)).length)
+        fail();
+    safe(() => requireNetwork(assignment.disposition === 'run'
+        && networkEqual(assignment.controller, request.session.controller)
+        && assignment.nodeId === request.session.nodeId
+        && assignment.runtimeNamespace === request.session.runtimeNamespace
+        && networkEqual(request.assignment, getRuntimeAssignmentReference(assignment))));
+    return { request, assignment };
+};
+/** Matches an opened session to the request: the same assignment revision and terminal mode. */
+export const bindOpenRuntimeAssignmentExecResponse = (valueArg, requestArg) => safe(() => {
+    const response = snapshotOpenRuntimeAssignmentExecResponse(valueArg);
+    const request = snapshotOpenRuntimeAssignmentExecRequest(requestArg);
+    requireNetwork(networkEqual(response.assignment, request.assignment) && response.tty === request.tty);
+    return response;
+});
+/** Node-side content binding of a resize; which sessions exist and are `tty` is the node's check. */
+export const bindResizeRuntimeAssignmentExecRequest = (valueArg, trustedSessionArg) => {
+    const request = snapshotResizeRuntimeAssignmentExecRequest(valueArg);
+    requireLocalSession(request.session, trustedSessionArg);
+    return request;
+};
+export const bindResizeRuntimeAssignmentExecResponse = (valueArg, requestArg) => safe(() => {
+    const response = snapshotResizeRuntimeAssignmentExecResponse(valueArg);
+    requireNetwork(response.execId === snapshotResizeRuntimeAssignmentExecRequest(requestArg).execId);
+    return response;
+});
+/** Node-side content binding of a close; which sessions exist is the node's check. */
+export const bindCloseRuntimeAssignmentExecRequest = (valueArg, trustedSessionArg) => {
+    const request = snapshotCloseRuntimeAssignmentExecRequest(valueArg);
+    requireLocalSession(request.session, trustedSessionArg);
+    return request;
+};
+export const bindCloseRuntimeAssignmentExecResponse = (valueArg, requestArg) => safe(() => {
+    const response = snapshotCloseRuntimeAssignmentExecResponse(valueArg);
+    requireNetwork(response.execId === snapshotCloseRuntimeAssignmentExecRequest(requestArg).execId);
+    return response;
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/data/runtimeassignmentlogs.d.ts

@@ -0,0 +1,121 @@
+import type { IRuntimeAssignment } from './runtimeassignment.js';
+import type { IRuntimeConfigLogPolicy } from './runtimeconfig.js';
+import type { IRuntimeSessionBinding } from './runtimesession.js';
+/** The container output a log line was written to. */
+export type TRuntimeAssignmentLogStream = 'stdout' | 'stderr';
+/**
+ * One piece of one line a container wrote, as the runtime captured it.
+ *
+ * `text` holds no line terminator and no `\n`; the node decodes the captured bytes as UTF-8 and
+ * replaces an invalid sequence with U+FFFD. A line longer than one entry travels as consecutive
+ * entries of the same stream: every piece but the last states `partial: true`, and the receiver
+ * joins them. The joined line is at most the config's `logs.maximumLineBytes` UTF-8 bytes; the node
+ * cuts a longer one there and follows its last piece with a `line-cut` loss of the same stream.
+ */
+export interface IRuntimeAssignmentLogLine {
+    kind: 'line';
+    stream: TRuntimeAssignmentLogStream;
+    /** When the runtime captured the piece, in nanoseconds since the Unix epoch, as decimal digits. */
+    timestampNs: string;
+    text: string;
+    /** The line continues in the next `line` entry of the same stream. */
+    partial: boolean;
+}
+/**
+ * Why output did not reach the controller.
+ *
+ * - `buffer-overflow`: the node's buffer held `logs.maximumBufferedBytes` unacknowledged bytes and
+ *   the oldest were dropped to keep capturing;
+ * - `line-cut`: the rest of a line beyond `logs.maximumLineBytes`;
+ * - `capture-restart`: the node's capture restarted without its buffer, for example after a reboot
+ *   emptied its disposable capture directory; how much was lost is unknown;
+ * - `not-captured`: the container was started without output capture, so none of its output is
+ *   available; how much there was is unknown.
+ */
+export type TRuntimeAssignmentLogLossReason = 'buffer-overflow' | 'line-cut' | 'capture-restart' | 'not-captured';
+/**
+ * Evidence of output that was lost, in the position of the stream where it was lost.
+ *
+ * `bytes` and `lines` count exactly what was dropped; both are `null` for `capture-restart` and
+ * `not-captured`, whose extent the node cannot know, and both are stated for the other reasons.
+ * A `line-cut` counts the cut bytes and no line, because the line itself was delivered; it names
+ * the stream of that line. A `buffer-overflow` counts the dropped bytes and the whole lines among
+ * them, and names a stream only when every dropped byte came from it.
+ */
+export interface IRuntimeAssignmentLogLoss {
+    kind: 'lost';
+    reason: TRuntimeAssignmentLogLossReason;
+    stream: TRuntimeAssignmentLogStream | null;
+    /** When the node detected the loss, in nanoseconds since the Unix epoch, as decimal digits. */
+    timestampNs: string;
+    bytes: number | null;
+    lines: number | null;
+}
+export type TRuntimeAssignmentLogEntry = IRuntimeAssignmentLogLine | IRuntimeAssignmentLogLoss;
+/**
+ * One delivery of one attempt's captured output, in capture order.
+ *
+ * `captureId` names one capture of the attempt on its node: the node starts a new capture, with a
+ * new id and `sequence` 1, whenever it cannot continue the previous one, and opens it with a
+ * `capture-restart` loss. Within a capture `sequence` counts batches from 1 without gaps, and the
+ * node sends the next batch only after the controller acknowledged the previous one, so a batch is
+ * the one unit of retry. `final` states that no batch follows in this capture: the container is gone
+ * and its output is drained. Only a final batch may be empty.
+ */
+export interface IRuntimeAssignmentLogBatch {
+    assignmentId: string;
+    attemptId: string;
+    captureId: string;
+    sequence: number;
+    entries: TRuntimeAssignmentLogEntry[];
+    final: boolean;
+}
+/** Pallet push over its current authenticated session. */
+export interface IReportRuntimeAssignmentLogsRequest {
+    session: IRuntimeSessionBinding;
+    batch: IRuntimeAssignmentLogBatch;
+}
+/**
+ * The controller holds the batch durably. `replay` answers a batch it already holds, which it does
+ * not store again. It never refuses a batch for a gap in `sequence`: the node discards only what
+ * was acknowledged, so a missing batch can only be the controller's own loss, which it records.
+ */
+export interface IReportRuntimeAssignmentLogsResponse {
+    status: 'accepted' | 'replay';
+    assignmentId: string;
+    captureId: string;
+    sequence: number;
+}
+export declare const runtimeAssignmentLogContract: Readonly<{
+    readonly error: "Runtime assignment log contract rejected.";
+    /** Pallet pushes; the controller persists metadata and payloads and acknowledges by sequence. */
+    readonly delivery: "node-pushes-controller-acknowledges-each-batch";
+    /** The most entries in one batch. */
+    readonly maximumEntriesPerBatch: 1024;
+    /** The most UTF-8 bytes of `text` in one entry; a longer line travels as `partial` pieces. */
+    readonly maximumEntryTextBytes: 65536;
+    /**
+     * The canonical JSON of a whole report is at most one mebibyte, the bound every runtime network
+     * contract captures with; the node closes a batch before the next entry would cross it.
+     */
+    readonly maximumReportCanonicalBytes: 1048576;
+}>;
+/** Detached exact-schema snapshot of one batch, bounded like a whole report. */
+export declare const snapshotRuntimeAssignmentLogBatch: (valueArg: unknown) => IRuntimeAssignmentLogBatch;
+export declare const snapshotReportRuntimeAssignmentLogsRequest: (valueArg: unknown) => IReportRuntimeAssignmentLogsRequest;
+export declare const snapshotReportRuntimeAssignmentLogsResponse: (valueArg: unknown) => IReportRuntimeAssignmentLogsResponse;
+/**
+ * Controller-side content binding, not authentication. `trustedSessionArg` is the controller's
+ * CURRENT session with the node the report arrived on, never read from the request. `assignmentArg`
+ * is the controller's own record of the batch's assignment, any generation of it, and
+ * `logPolicyArg` the `logs` policy of the config it runs with. The request's session must equal the
+ * trusted one, the assignment must be this node's and carry the batch's attempt, and every line
+ * the batch holds, its pieces joined, must fit the policy's `maximumLineBytes`. A line whose first
+ * pieces travelled in an earlier batch is judged by the pieces this batch holds.
+ */
+export declare const bindReportRuntimeAssignmentLogsRequest: (valueArg: unknown, assignmentArg: unknown, logPolicyArg: IRuntimeConfigLogPolicy, trustedSessionArg: unknown) => Promise<{
+    request: IReportRuntimeAssignmentLogsRequest;
+    assignment: IRuntimeAssignment;
+}>;
+/** Matches an acknowledgement to the exact batch that was sent. */
+export declare const bindReportRuntimeAssignmentLogsResponse: (valueArg: unknown, requestArg: unknown) => IReportRuntimeAssignmentLogsResponse;

package/dist_ts/data/runtimeassignmentlogs.js

@@ -0,0 +1,139 @@
+import { snapshotRuntimeAssignment, validateRuntimeAssignment } from './runtimeassignment.js';
+import { snapshotRuntimeSessionBinding } from './runtimesession.js';
+import { captureNetwork, networkCounter, networkEqual, networkId, networkList, networkRecord, requireNetwork, } from '../private/networkcontract.js';
+import { isRuntimeLogPolicy } from '../private/runtimepolicy.js';
+export const runtimeAssignmentLogContract = Object.freeze({
+    error: 'Runtime assignment log contract rejected.',
+    /** Pallet pushes; the controller persists metadata and payloads and acknowledges by sequence. */
+    delivery: 'node-pushes-controller-acknowledges-each-batch',
+    /** The most entries in one batch. */
+    maximumEntriesPerBatch: 1024,
+    /** The most UTF-8 bytes of `text` in one entry; a longer line travels as `partial` pieces. */
+    maximumEntryTextBytes: 65_536,
+    /**
+     * The canonical JSON of a whole report is at most one mebibyte, the bound every runtime network
+     * contract captures with; the node closes a batch before the next entry would cross it.
+     */
+    maximumReportCanonicalBytes: 1_048_576,
+});
+const fail = () => { throw new Error(runtimeAssignmentLogContract.error); };
+const safe = (operationArg) => { try {
+    return operationArg();
+}
+catch {
+    return fail();
+} };
+const encoder = new TextEncoder();
+const streams = ['stdout', 'stderr'];
+const lossReasons = ['buffer-overflow', 'line-cut', 'capture-restart', 'not-captured'];
+const statuses = ['accepted', 'replay'];
+const literalOf = (valueArg, allowedArg) => {
+    requireNetwork(allowedArg.includes(valueArg));
+    return valueArg;
+};
+/** Nanoseconds since the Unix epoch as canonical decimal digits: no sign, no leading zero. */
+const timestampOf = (valueArg) => {
+    requireNetwork(typeof valueArg === 'string' && /^[1-9][0-9]{0,19}$/.test(valueArg)
+        && BigInt(valueArg) <= 18446744073709551615n);
+    return valueArg;
+};
+const countOf = (valueArg) => {
+    requireNetwork(typeof valueArg === 'number' && Number.isSafeInteger(valueArg) && valueArg >= 0
+        && !Object.is(valueArg, -0));
+    return valueArg;
+};
+const lineOf = (valueArg) => {
+    const value = networkRecord(valueArg, ['kind', 'stream', 'timestampNs', 'text', 'partial']);
+    requireNetwork(value.kind === 'line' && typeof value.text === 'string' && !value.text.includes('\n')
+        && encoder.encode(value.text).byteLength <= runtimeAssignmentLogContract.maximumEntryTextBytes
+        && typeof value.partial === 'boolean');
+    return {
+        kind: 'line', stream: literalOf(value.stream, streams), timestampNs: timestampOf(value.timestampNs),
+        text: value.text, partial: value.partial,
+    };
+};
+const lossOf = (valueArg) => {
+    const value = networkRecord(valueArg, ['kind', 'reason', 'stream', 'timestampNs', 'bytes', 'lines']);
+    requireNetwork(value.kind === 'lost');
+    const reason = literalOf(value.reason, lossReasons);
+    const stream = value.stream === null ? null : literalOf(value.stream, streams);
+    const unknownExtent = reason === 'capture-restart' || reason === 'not-captured';
+    if (unknownExtent) {
+        requireNetwork(value.bytes === null && value.lines === null && stream === null);
+        return { kind: 'lost', reason, stream, timestampNs: timestampOf(value.timestampNs), bytes: null, lines: null };
+    }
+    const bytes = networkCounter(value.bytes);
+    const lines = countOf(value.lines);
+    requireNetwork(reason !== 'line-cut' || (stream !== null && lines === 0));
+    return { kind: 'lost', reason, stream, timestampNs: timestampOf(value.timestampNs), bytes, lines };
+};
+const entryOf = (valueArg) => {
+    requireNetwork(valueArg !== null && typeof valueArg === 'object');
+    return valueArg.kind === 'lost' ? lossOf(valueArg) : lineOf(valueArg);
+};
+const batchOf = (valueArg) => {
+    const value = networkRecord(valueArg, ['assignmentId', 'attemptId', 'captureId', 'sequence', 'entries', 'final']);
+    const entries = networkList(value.entries, runtimeAssignmentLogContract.maximumEntriesPerBatch, entryOf);
+    requireNetwork(typeof value.final === 'boolean' && (entries.length > 0 || value.final));
+    return {
+        assignmentId: networkId(value.assignmentId), attemptId: networkId(value.attemptId),
+        captureId: networkId(value.captureId), sequence: networkCounter(value.sequence), entries, final: value.final,
+    };
+};
+/** Detached exact-schema snapshot of one batch, bounded like a whole report. */
+export const snapshotRuntimeAssignmentLogBatch = (valueArg) => safe(() => batchOf(captureNetwork(valueArg)));
+export const snapshotReportRuntimeAssignmentLogsRequest = (valueArg) => safe(() => {
+    const value = networkRecord(captureNetwork(valueArg), ['session', 'batch']);
+    return { session: snapshotRuntimeSessionBinding(value.session), batch: batchOf(value.batch) };
+});
+export const snapshotReportRuntimeAssignmentLogsResponse = (valueArg) => safe(() => {
+    const value = networkRecord(captureNetwork(valueArg), ['status', 'assignmentId', 'captureId', 'sequence']);
+    return {
+        status: literalOf(value.status, statuses), assignmentId: networkId(value.assignmentId),
+        captureId: networkId(value.captureId), sequence: networkCounter(value.sequence),
+    };
+});
+/**
+ * Controller-side content binding, not authentication. `trustedSessionArg` is the controller's
+ * CURRENT session with the node the report arrived on, never read from the request. `assignmentArg`
+ * is the controller's own record of the batch's assignment, any generation of it, and
+ * `logPolicyArg` the `logs` policy of the config it runs with. The request's session must equal the
+ * trusted one, the assignment must be this node's and carry the batch's attempt, and every line
+ * the batch holds, its pieces joined, must fit the policy's `maximumLineBytes`. A line whose first
+ * pieces travelled in an earlier batch is judged by the pieces this batch holds.
+ */
+export const bindReportRuntimeAssignmentLogsRequest = async (valueArg, assignmentArg, logPolicyArg, trustedSessionArg) => {
+    const request = snapshotReportRuntimeAssignmentLogsRequest(valueArg);
+    const assignment = safe(() => snapshotRuntimeAssignment(assignmentArg));
+    const trustedSession = safe(() => snapshotRuntimeSessionBinding(trustedSessionArg));
+    if ((await validateRuntimeAssignment(assignment)).length)
+        fail();
+    safe(() => {
+        requireNetwork(isRuntimeLogPolicy(logPolicyArg));
+        requireNetwork(networkEqual(request.session, trustedSession)
+            && networkEqual(assignment.controller, trustedSession.controller)
+            && assignment.nodeId === trustedSession.nodeId
+            && assignment.runtimeNamespace === trustedSession.runtimeNamespace
+            && assignment.assignmentId === request.batch.assignmentId
+            && assignment.attemptId === request.batch.attemptId);
+        const joined = { stdout: 0, stderr: 0 };
+        for (const entry of request.batch.entries) {
+            if (entry.kind !== 'line')
+                continue;
+            joined[entry.stream] += encoder.encode(entry.text).byteLength;
+            requireNetwork(joined[entry.stream] <= logPolicyArg.maximumLineBytes);
+            if (!entry.partial)
+                joined[entry.stream] = 0;
+        }
+    });
+    return { request, assignment };
+};
+/** Matches an acknowledgement to the exact batch that was sent. */
+export const bindReportRuntimeAssignmentLogsResponse = (valueArg, requestArg) => safe(() => {
+    const response = snapshotReportRuntimeAssignmentLogsResponse(valueArg);
+    const { batch } = snapshotReportRuntimeAssignmentLogsRequest(requestArg);
+    requireNetwork(response.assignmentId === batch.assignmentId && response.captureId === batch.captureId
+        && response.sequence === batch.sequence);
+    return response;
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/data/runtimeassignmentstats.d.ts

@@ -0,0 +1,60 @@
+import type { IRuntimeAssignment, IRuntimeAssignmentReference } from './runtimeassignment.js';
+import type { IRuntimeSessionBinding } from './runtimesession.js';
+/** Bytes the workload's network namespace received and sent since the sandbox started. */
+export interface IRuntimeAssignmentNetworkStats {
+    receivedBytes: number;
+    transmittedBytes: number;
+}
+/**
+ * One resource sample of one running attempt, as the runtime reports it.
+ *
+ * `cpuUsageCoreNanoseconds` is cumulative CPU time across every core since the container started,
+ * as decimal digits because it outgrows a JSON number; a reader derives utilisation from two
+ * samples and their `timestampNs`. `memoryLimitBytes` is the limit the node enforces, the sealed
+ * config's `memoryBytes`. `network` is `null` when the runtime reports no interface of the
+ * sandbox, and `writableLayerBytes` is `null` when it reports no usage of the container's writable
+ * layer.
+ */
+export interface IRuntimeAssignmentStatsSample {
+    /** When the runtime took the sample, in nanoseconds since the Unix epoch, as decimal digits. */
+    timestampNs: string;
+    cpuUsageCoreNanoseconds: string;
+    memoryWorkingSetBytes: number;
+    memoryLimitBytes: number;
+    network: IRuntimeAssignmentNetworkStats | null;
+    writableLayerBytes: number | null;
+}
+/** Controller read over the node's current authenticated session. */
+export interface IReadRuntimeAssignmentStatsRequest {
+    session: IRuntimeSessionBinding;
+    /** The exact current revision of an assignment on this node. */
+    assignment: IRuntimeAssignmentReference;
+}
+/**
+ * `sampled` carries one sample; `not-running` states that the attempt has no running container to
+ * sample, and carries none.
+ */
+export interface IReadRuntimeAssignmentStatsResponse {
+    status: 'sampled' | 'not-running';
+    assignment: IRuntimeAssignmentReference;
+    sample: IRuntimeAssignmentStatsSample | null;
+}
+export declare const runtimeAssignmentStatsContract: Readonly<{
+    readonly error: "Runtime assignment stats contract rejected.";
+    /** The node answers one read per assignment at a time and refuses a concurrent one. */
+    readonly concurrency: "one-read-per-assignment";
+}>;
+export declare const snapshotReadRuntimeAssignmentStatsRequest: (valueArg: unknown) => IReadRuntimeAssignmentStatsRequest;
+export declare const snapshotReadRuntimeAssignmentStatsResponse: (valueArg: unknown) => IReadRuntimeAssignmentStatsResponse;
+/**
+ * Node-side content binding, not authentication. `trustedSessionArg` is the node's CURRENT
+ * session, and the request must have arrived on that session's own connection. `assignmentArg` is
+ * the node's current admitted revision of the named assignment: the request must name exactly it,
+ * and it must belong to the session's controller, node and runtime namespace.
+ */
+export declare const bindReadRuntimeAssignmentStatsRequest: (valueArg: unknown, assignmentArg: unknown, trustedSessionArg: unknown) => Promise<{
+    request: IReadRuntimeAssignmentStatsRequest;
+    assignment: IRuntimeAssignment;
+}>;
+/** Matches a sample to the exact assignment revision the read named. */
+export declare const bindReadRuntimeAssignmentStatsResponse: (valueArg: unknown, requestArg: unknown) => IReadRuntimeAssignmentStatsResponse;