@serve.zone/interfaces 32.35.0 → 32.36.0

package/ts/requests/runtimesession.ts

@@ -9,6 +9,10 @@ import type * as assignmentSecret from '../runtime.assignmentsecret.js';
 import type * as fleet from '../data/fleetcutover.js';
 import type { IRuntimeStorageClaim } from '../data/runtimestorageclaim.js';
 import type * as localStorage from '../data/runtimelocalstorageclaim.js';
+import type * as logs from '../data/runtimeassignmentlogs.js';
+import type * as stats from '../data/runtimeassignmentstats.js';
+import type * as exec from '../data/runtimeassignmentexec.js';
+import type * as volumeArchive from '../data/runtimelocalvolumearchive.js';
 
 /** Current-peer, exact-projection authorization; response contains secret keys. */
 export interface IReq_Pallet_Controller_GetRuntimeManagedVpnCredential extends plugins.typedrequestInterfaces.implementsTR<
@@ -215,6 +219,104 @@ export interface IReq_Pallet_Controller_ReportRuntimeAssignmentTerminalReceipt e
   response: terminal.IReportRuntimeAssignmentTerminalReceiptResponse;
 }
 
+/**
+ * Pallet pushes one batch of one attempt's captured output over its current session and sends the
+ * next only after this one is acknowledged (`runtimeAssignmentLogContract`). The controller owns
+ * log persistence; the node's capture files are disposable transport artifacts.
+ */
+export interface IReq_Pallet_Controller_ReportRuntimeAssignmentLogs extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest, IReq_Pallet_Controller_ReportRuntimeAssignmentLogs
+> {
+  method: 'reportRuntimeAssignmentLogs';
+  request: logs.IReportRuntimeAssignmentLogsRequest;
+  response: logs.IReportRuntimeAssignmentLogsResponse;
+}
+
+/** Controller read of one resource sample of one attempt, over the node's current session. */
+export interface IReq_Controller_Pallet_ReadRuntimeAssignmentStats extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest, IReq_Controller_Pallet_ReadRuntimeAssignmentStats
+> {
+  method: 'readRuntimeAssignmentStats';
+  request: stats.IReadRuntimeAssignmentStatsRequest;
+  response: stats.IReadRuntimeAssignmentStatsResponse;
+}
+
+/**
+ * A local controller runs one command in one running attempt's container
+ * (`runtimeAssignmentExecContract`). The controller sends standard input on `stdin`, or states
+ * `null` for none. The node answers once the process runs: `stdout` carries a `tty` session's
+ * whole output, and `stderr` is `null` exactly for a `tty` session. The streams outlive this
+ * request and end when the process's output ends or the session ends.
+ */
+export interface IReq_Onebox_Pallet_OpenRuntimeAssignmentExec extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest, IReq_Onebox_Pallet_OpenRuntimeAssignmentExec
+> {
+  method: 'openRuntimeAssignmentExec';
+  request: {
+    exec: exec.IOpenRuntimeAssignmentExecRequest;
+    /** Requester sends standard input; the TypedHandler receives the opposite endpoint. */
+    stdin: plugins.typedrequestInterfaces.TVirtualStream<'send'> | null;
+  };
+  response: {
+    exec: exec.IOpenRuntimeAssignmentExecResponse;
+    /** Requester receives output; the TypedHandler returns sender endpoints. */
+    stdout: plugins.typedrequestInterfaces.TVirtualStream<'receive'>;
+    stderr: plugins.typedrequestInterfaces.TVirtualStream<'receive'> | null;
+  };
+}
+
+/** A local controller resizes the terminal of one `tty` exec session. */
+export interface IReq_Onebox_Pallet_ResizeRuntimeAssignmentExec extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest, IReq_Onebox_Pallet_ResizeRuntimeAssignmentExec
+> {
+  method: 'resizeRuntimeAssignmentExec';
+  request: exec.IResizeRuntimeAssignmentExecRequest;
+  response: exec.IResizeRuntimeAssignmentExecResponse;
+}
+
+/** A local controller ends one exec session, releases its slot and learns how it ended. */
+export interface IReq_Onebox_Pallet_CloseRuntimeAssignmentExec extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest, IReq_Onebox_Pallet_CloseRuntimeAssignmentExec
+> {
+  method: 'closeRuntimeAssignmentExec';
+  request: exec.ICloseRuntimeAssignmentExecRequest;
+  response: exec.ICloseRuntimeAssignmentExecResponse;
+}
+
+/**
+ * A local controller reads one node-local volume as a pax archive
+ * (`runtimeLocalVolumeArchiveContract`). The archive arrives on `archive`, which outlives this
+ * request; the node's completion of that stream is the end of the archive.
+ */
+export interface IReq_Onebox_Pallet_ReadRuntimeLocalVolumeArchive extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest, IReq_Onebox_Pallet_ReadRuntimeLocalVolumeArchive
+> {
+  method: 'readRuntimeLocalVolumeArchive';
+  request: volumeArchive.IReadRuntimeLocalVolumeArchiveRequest;
+  response: {
+    volume: volumeArchive.IReadRuntimeLocalVolumeArchiveResponse;
+    /** Requester receives archive bytes; the TypedHandler returns a sender endpoint. */
+    archive: plugins.typedrequestInterfaces.TVirtualStream<'receive'>;
+  };
+}
+
+/**
+ * A local controller writes one pax archive as the bytes of an `import` claim waiting in
+ * `import-required`. The stream's integrity is `getRuntimeLocalVolumeArchiveIntegrity(volume)`;
+ * its acceptance receipt confirms that the node published the volume as `ready`.
+ */
+export interface IReq_Onebox_Pallet_WriteRuntimeLocalVolumeArchive extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest, IReq_Onebox_Pallet_WriteRuntimeLocalVolumeArchive
+> {
+  method: 'writeRuntimeLocalVolumeArchive';
+  request: {
+    volume: volumeArchive.IWriteRuntimeLocalVolumeArchiveRequest;
+    /** Requester sends archive bytes; the TypedHandler receives the opposite endpoint. */
+    archive: plugins.typedrequestInterfaces.TVirtualStream<'send'>;
+  };
+  response: volumeArchive.IWriteRuntimeLocalVolumeArchiveResponse;
+}
+
 /** Current-peer, exact current assignment authorization; response is secret material. */
 export interface IReq_Pallet_Controller_GetRuntimeRegistryCredential extends plugins.typedrequestInterfaces.implementsTR<
   plugins.typedrequestInterfaces.ITypedRequest,

package/ts/requests/service.ts

@@ -17,6 +17,7 @@ import type {
   IServiceDeploymentStatus,
 } from '../data/deploymentoperation.js';
 import type { TSha256Digest } from '../data/immutableimage.js';
+import type { ILegacyServiceRuntimeAttestation } from '../data/deploymentlegacyimport.js';
 import type { IProtocolOffer } from '../protocol.js';
 import type {
   IServiceRuntimeAssignmentView,
@@ -324,6 +325,71 @@ extends plugins.typedrequestInterfaces.implementsTR<
   };
 }
 
+/**
+ * Captures durable evidence that a legacy `deployOnPush` service runs exactly the registry root its
+ * tag names: every required replica observed healthy on that one digest, with the root's platform
+ * manifests read from Cloudly's own registry. Administrators only, and only while the legacy
+ * runtime still runs — incomplete evidence is refused, never stored.
+ *
+ * `expectedRuntimeDigest`, when stated, is an assertion the observed digest must equal. Capturing
+ * again for an unchanged digest returns the attestation already stored.
+ */
+export interface IRequest_Any_Cloudly_CaptureLegacyServiceRuntimeAttestation
+extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_Any_Cloudly_CaptureLegacyServiceRuntimeAttestation
+> {
+  method: 'captureLegacyServiceRuntimeAttestation';
+  request: {
+    identity: IIdentityCredential;
+    legacyServiceId: string;
+    expectedRuntimeDigest?: TSha256Digest;
+  };
+  response: {
+    attestation: ILegacyServiceRuntimeAttestation;
+  };
+}
+
+/** Every attestation Cloudly holds for one legacy service, oldest first. Administrators only. */
+export interface IRequest_Any_Cloudly_GetLegacyServiceRuntimeAttestations
+extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_Any_Cloudly_GetLegacyServiceRuntimeAttestations
+> {
+  method: 'getLegacyServiceRuntimeAttestations';
+  request: {
+    identity: IIdentityCredential;
+    legacyServiceId: string;
+  };
+  response: {
+    attestations: ILegacyServiceRuntimeAttestation[];
+  };
+}
+
+/**
+ * Imports the attested legacy image of a reserved legacy-import operation into the operation's own
+ * repository and release tag. Cloudly does it from its own registry — nothing is pushed — and
+ * records release evidence of source `cloudly-legacy-import`; the operation then continues exactly
+ * like one whose image was pushed. Replaying it after the import returns the recorded release.
+ */
+export interface IRequest_Any_Cloudly_ImportServiceDeploymentLegacyImage
+extends plugins.typedrequestInterfaces.implementsTR<
+  plugins.typedrequestInterfaces.ITypedRequest,
+  IRequest_Any_Cloudly_ImportServiceDeploymentLegacyImage
+> {
+  method: 'importServiceDeploymentLegacyImage';
+  request: {
+    identity: IIdentityCredential;
+    serviceId: string;
+    operationId: string;
+    expectedOperationRevision: number;
+  };
+  response: {
+    operation: IServiceDeploymentOperation;
+    release: IImageRelease;
+  };
+}
+
 export interface IRequest_Any_Cloudly_CreateService
 extends plugins.typedrequestInterfaces.implementsTR<
   plugins.typedrequestInterfaces.ITypedRequest,