@serve.zone/interfaces 32.68.0 → 32.69.0

package/dist_ts/data/nodeaction.js

@@ -0,0 +1,434 @@
+import { canonicalizeStrictJson, compareWireTokens, createCanonicalJsonSha256Hex } from '../private/canonicaljson.js';
+import { readDataElements, readDataProperties, readExactDataRecord } from '../private/dataproperties.js';
+import { isClusterNodeId } from '../private/nodeidentifier.js';
+import { isCanonicalTokenList } from '../private/tokenlist.js';
+import { protocolRefusalHttpStatus, readProtocolOffer } from '../protocol.js';
+import { isReleaseVersion } from './releaseversion.js';
+/**
+ * Every node action, in canonical token order, so a list of them (a Spark's `actionExecutors`)
+ * is compared byte for byte.
+ */
+export const nodeActionNames = Object.freeze([
+    'reboot',
+    'serveZoneServiceUpdate',
+    'systemUpgrade',
+]);
+const nodeActionNamesComplete = true;
+void nodeActionNamesComplete;
+export const isNodeActionName = (valueArg) => (nodeActionNames.some((nameArg) => nameArg === valueArg));
+/**
+ * Whether each action state is still open or ended.
+ *
+ * The four values the Swarm-era carrier shipped keep their meaning: `pending` is the requested
+ * state of every action, `running` is a Swarm-era action its daemon started, and `succeeded` and
+ * `failed` end one. The node runtime's lifecycle (`INodeActionLifecycle`) adds the rest:
+ *
+ * - `claimed`: the node's Spark took the action (`claim`), stating the boot it took it in.
+ * - `executing`, `draining`, `rebooting`: the phase Spark reports, only ever forward
+ *   (`sparkNodeActionPhaseOrder`).
+ * - `verifying`: Cloudly saw the evidence the action changed the node (`nodeActionVerification`)
+ *   and waits for the node's runtime to come back.
+ * - `expired`: never claimed in its claim window, or a Swarm-era record no carrier can deliver
+ *   (`TNodeActionExpiryReason`).
+ * - `cancelled`: an operator withdrew it while it was still `pending`.
+ * - `unverified`: its deadline passed before Cloudly could verify it. An operator judges the node;
+ *   Cloudly never retries it.
+ */
+export const nodeActionStatusKinds = Object.freeze({
+    pending: 'open',
+    running: 'open',
+    claimed: 'open',
+    executing: 'open',
+    draining: 'open',
+    rebooting: 'open',
+    verifying: 'open',
+    succeeded: 'terminal',
+    failed: 'terminal',
+    expired: 'terminal',
+    cancelled: 'terminal',
+    unverified: 'terminal',
+});
+/** Every open state, the ones the one-open-action-per-node rule counts. */
+export const nodeActionOpenStatuses = Object.freeze(Object.keys(nodeActionStatusKinds)
+    .filter((statusArg) => nodeActionStatusKinds[statusArg] === 'open'));
+export const isNodeActionOpen = (statusArg) => (nodeActionStatusKinds[statusArg] === 'open');
+/**
+ * The phases Spark reports while it executes a claimed action, in the only order it may report
+ * them. A phase may be skipped, never repeated or reported after a later one.
+ */
+export const sparkNodeActionPhaseOrder = Object.freeze(['claimed', 'executing', 'draining', 'rebooting']);
+/**
+ * Time budgets of the node runtime's action lifecycle, in milliseconds.
+ *
+ * A requested action waits `claimWindowMs` for its node's Spark to claim it, then expires. A claimed
+ * action must be verified within its completion budget (`nodeActionCompletionBudgetMs`), measured
+ * from the claim, or it ends `unverified`. Each budget is the sum of the steps the action takes. One
+ * budget is read from Spark's code; every other one is chosen here, and each member says which.
+ */
+export const nodeActionContract = Object.freeze({
+    /** Chosen: how long a requested action waits for its node's Spark to claim it (10 min). */
+    claimWindowMs: 600_000,
+    /**
+     * Spark code: `sparkNodeStopTimeoutSeconds`, the node unit's `TimeoutStopSec=` (522 s), in which
+     * Pallet stops every workload it runs.
+     */
+    drainMs: 522_000,
+    /** Chosen: a host's reboot until Spark reports from the new boot (10 min). */
+    bootMs: 600_000,
+    /**
+     * Chosen: how long Pallet takes to start and register again after the node runtime starts
+     * (712 s, from the 2026-11-05 survey; Spark states no start budget of its own).
+     */
+    startMs: 712_000,
+    /** Chosen: downloading and checking the target's node bundle before anything stops (10 min). */
+    downloadMs: 600_000,
+    /** Chosen: the host's package upgrade (30 min). */
+    hostUpgradeMs: 1_800_000,
+    /** Entries an action's timeline keeps; each state is entered at most once. */
+    maximumTimelineEntries: 16,
+    /** Characters of operator text one timeline entry or failure carries. */
+    maximumDetailLength: 512,
+    /** Services one impact names; a node holding more is answered `impact-unreadable`. */
+    maximumImpactServices: 1024,
+    /** Characters of one service name an impact carries. */
+    maximumServiceNameLength: 256,
+});
+/**
+ * How long a claimed action has until Cloudly must have verified it, from the claim.
+ *
+ * A reboot drains, boots and starts the node. An update downloads the target, then restarts the
+ * node runtime on it: a drain and a start, no boot. A host upgrade runs the package upgrade and,
+ * with `reboot`, the reboot after it.
+ */
+export const nodeActionCompletionBudgetMs = (actionNameArg, rebootArg) => {
+    const c = nodeActionContract;
+    switch (actionNameArg) {
+        case 'reboot':
+            return c.drainMs + c.bootMs + c.startMs;
+        case 'serveZoneServiceUpdate':
+            return c.downloadMs + c.drainMs + c.startMs;
+        case 'systemUpgrade':
+            return c.hostUpgradeMs + (rebootArg ? c.drainMs + c.bootMs + c.startMs : 0);
+    }
+};
+/** Whether an action reboots the host, which is how Cloudly verifies it (`nodeActionVerification`). */
+export const nodeActionReboots = (actionNameArg, rebootArg) => (actionNameArg === 'reboot' || (actionNameArg === 'systemUpgrade' && rebootArg));
+export const nodeActionVerification = (actionNameArg, rebootArg) => nodeActionReboots(actionNameArg, rebootArg) ? 'new-boot'
+    : actionNameArg === 'serveZoneServiceUpdate' ? 'target-version' : 'upgrade-complete';
+/** Whether the action restarts the node runtime and is verified by its return (see `nodeActionVerification`). */
+export const nodeActionRestartsRuntime = (actionNameArg, rebootArg) => (nodeActionVerification(actionNameArg, rebootArg) !== 'upgrade-complete');
+/**
+ * Why an action ended `failed`, each with the remedy an operator is told.
+ *
+ * The first group is stated by Spark (`TSparkNodeActionFailureCode`), the second by Cloudly.
+ */
+export const nodeActionFailureRemedies = Object.freeze({
+    'download-failed': 'Spark could not download the target release. Check that the node reaches '
+        + 'code.foss.global, then request the update again.',
+    'installer-mismatch': 'The downloaded install.sh does not have the SHA-256 the target states. '
+        + 'Nothing was installed; set the fleet Spark target again, then request the update again.',
+    'install-failed': 'The node bundle installer failed and left the installed release in place. '
+        + 'Read the node\'s Spark journal, then request the update again.',
+    'drain-failed': 'Pallet did not stop its workloads within the stop budget. Read the node\'s '
+        + 'Pallet journal before requesting the action again.',
+    'reboot-failed': 'The host did not accept the reboot. Read the node\'s Spark journal.',
+    'host-upgrade-failed': 'The host package upgrade failed. Read the node\'s Spark journal, repair '
+        + 'the package state on the host, then request the upgrade again.',
+    'executor-failed': 'Spark could not run the action. Read the node\'s Spark journal.',
+    'reboot-required': 'The host upgrade finished and applying it needs a reboot. Request a system '
+        + 'upgrade with reboot, or a reboot, when the node may go down.',
+    'target-below-node': 'The node runs a newer Spark than the action\'s target, so the update '
+        + 'would downgrade it. Set the fleet Spark target to the release the node should run.',
+});
+/** The failure codes Spark may state with a `fail` transition. */
+export const sparkNodeActionFailureCodes = Object.freeze([
+    'download-failed',
+    'drain-failed',
+    'executor-failed',
+    'host-upgrade-failed',
+    'install-failed',
+    'installer-mismatch',
+    'reboot-failed',
+]);
+/** The SHA-256 (lowercase hex) of one impact's canonical JSON, which a confirmation names. */
+export const computeNodeActionImpactDigest = async (impactArg) => {
+    const fail = (reasonArg) => { throw new Error(`Node action impact rejected: ${reasonArg}`); };
+    return createCanonicalJsonSha256Hex(canonicalizeStrictJson(impactArg, fail, 'node action impact'), fail);
+};
+/**
+ * Every reason Cloudly answers instead of admitting, previewing or cancelling a node action. Each
+ * travels by name as a `TypedResponseError`, and a refused request changes nothing.
+ */
+export const nodeActionRefusals = Object.freeze([
+    /** No node of that id exists. */
+    'node-missing',
+    /** The node reported through no Spark that carries actions: it never reported at all. */
+    'node-action-undeliverable',
+    /** The node's Spark does not state that it executes this action (`ISparkNodeReport.actionExecutors`). */
+    'node-action-unsupported',
+    /**
+     * System upgrade on a node runtime node: its Spark does not state the `systemUpgrade` executor,
+     * which Spark states only once its host-upgrade executor passed the lab qualification.
+     */
+    'system-upgrade-unqualified',
+    /** The node already has an open action. */
+    'node-action-open',
+    /** Another node of the cluster has an open action; a cluster runs one disruptive action at a time. */
+    'cluster-action-open',
+    /** An update without a fleet Spark target. */
+    'spark-target-unset',
+    /** An update whose target is below the Spark bundle version the node reports. */
+    'spark-target-below-node',
+    /** An update of a node that is held at its release (`ISparkNodeTargetHold`). */
+    'spark-target-held',
+    /** The request states no confirmation, or one that is not well-formed for this action. */
+    'confirmation-invalid',
+    /** The typed hostname is not the hostname the node reports. */
+    'confirmation-hostname-mismatch',
+    /** What the action interrupts changed since the preview the confirmation names. */
+    'impact-changed',
+    /** An update whose confirmation names another fleet Spark target revision than the one Cloudly would freeze. */
+    'target-changed',
+    /** The impact names a Corestore on the node and the confirmation does not consent to restarting it. */
+    'corestore-consent-required',
+    /** Cloudly could not read what the action interrupts. */
+    'impact-unreadable',
+    /** No action of that id on that node. */
+    'node-action-missing',
+    /** Only a `pending` action is cancelled. */
+    'node-action-not-cancellable',
+    /** The action moved since the revision the request names. */
+    'node-action-revision-stale',
+]);
+const maximumHostnameLength = 253;
+const hostnamePattern = /^[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$/;
+const sha256HexPattern = /^[a-f0-9]{64}$/;
+/**
+ * Validates one confirmation for one action and names every reason it is refused.
+ *
+ * Shape only: an update must state `targetRevision`, every other action must not. Whether it
+ * matches the node, the impact and the fleet target Cloudly reads now is Cloudly's decision
+ * (`confirmation-hostname-mismatch`, `impact-changed`, `target-changed`, `corestore-consent-required`).
+ */
+export const validateNodeActionConfirmation = (valueArg, actionNameArg, pathArg = 'node action confirmation') => {
+    // An update names the target revision it confirmed; no other action does.
+    const update = actionNameArg === 'serveZoneServiceUpdate';
+    const value = readExactDataRecord(valueArg, ['confirmedHostname', 'impactDigest', 'corestoreRestart', 'reboot',
+        ...(update ? ['targetRevision'] : [])]);
+    if (value === null) {
+        return [update
+                ? `${pathArg} must use its exact schema, with the targetRevision the preview showed`
+                : `${pathArg} must use its exact schema, without a targetRevision`];
+    }
+    const errors = [];
+    if (update && (!Number.isSafeInteger(value.targetRevision) || value.targetRevision < 1)) {
+        errors.push(`${pathArg} targetRevision must be a positive integer`);
+    }
+    if (typeof value.confirmedHostname !== 'string' || value.confirmedHostname.length > maximumHostnameLength
+        || !hostnamePattern.test(value.confirmedHostname)) {
+        errors.push(`${pathArg} confirmedHostname must be a lowercase hostname`);
+    }
+    if (typeof value.impactDigest !== 'string' || !sha256HexPattern.test(value.impactDigest)) {
+        errors.push(`${pathArg} impactDigest must be a lowercase SHA-256 hex digest`);
+    }
+    if (typeof value.corestoreRestart !== 'boolean')
+        errors.push(`${pathArg} corestoreRestart must be a boolean`);
+    if (typeof value.reboot !== 'boolean') {
+        errors.push(`${pathArg} reboot must be a boolean`);
+    }
+    else if (value.reboot && actionNameArg !== 'systemUpgrade') {
+        errors.push(`${pathArg} reboot is stated for systemUpgrade only`);
+    }
+    return errors;
+};
+/**
+ * The node runtime's action routes.
+ *
+ * Spark asks the offer route after each accepted heartbeat and states every step on the transition
+ * route. Both are authenticated with the node's Spark credential exactly like
+ * `sparkNodeHeartbeatContract` and judged in the same server order: the offer first, within
+ * `maxRequestBytes`, answered with `protocolRefusalStatus` and an `IProtocolRefusal` body on
+ * refusal, before the node is authenticated. The server's offer on these routes names, as its
+ * minimum, the release that introduced them, so a Spark below it is refused by name and is never
+ * handed an action.
+ */
+export const sparkNodeActionContracts = Object.freeze({
+    offer: Object.freeze({
+        endpoint: '/spark/nodes/action',
+        maxRequestBytes: 1024,
+        maxResponseBytes: 4096,
+    }),
+    transition: Object.freeze({
+        endpoint: '/spark/nodes/action/transition',
+        maxRequestBytes: 2048,
+        maxResponseBytes: 4096,
+    }),
+    protocolRefusalStatus: protocolRefusalHttpStatus,
+});
+const fail = () => { throw new Error('Spark node action contract rejected.'); };
+function requireValue(valueArg) {
+    if (!valueArg)
+        fail();
+}
+const record = (valueArg, keysArg) => {
+    const result = readExactDataRecord(valueArg, keysArg);
+    requireValue(result !== null);
+    return result;
+};
+const nodeId = (valueArg) => (isClusterNodeId(valueArg) ? valueArg : fail());
+const nodeToken = (valueArg) => {
+    requireValue(typeof valueArg === 'string' && /^secureToken[a-f0-9]{64}$/.test(valueArg));
+    return valueArg;
+};
+const integer = (valueArg, minimumArg) => {
+    requireValue(Number.isSafeInteger(valueArg) && !Object.is(valueArg, -0) && valueArg >= minimumArg);
+    return valueArg;
+};
+/** An action id as Cloudly mints them: a short URL-safe token. */
+const actionId = (valueArg) => {
+    requireValue(typeof valueArg === 'string' && /^[A-Za-z0-9_-]{1,64}$/.test(valueArg));
+    return valueArg;
+};
+/** The kernel's `boot_id`: one lowercase UUID. */
+export const isHostBootId = (valueArg) => (typeof valueArg === 'string'
+    && /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(valueArg));
+const bootId = (valueArg) => (isHostBootId(valueArg) ? valueArg : fail());
+const operatorText = (valueArg) => {
+    requireValue(typeof valueArg === 'string' && valueArg.length <= nodeActionContract.maximumDetailLength
+        && /^[\x20-\x7e]*$/.test(valueArg));
+    return valueArg;
+};
+const snapshotTarget = (valueArg) => {
+    const value = record(valueArg, ['version', 'installerSha256', 'targetRevision']);
+    requireValue(isReleaseVersion(value.version));
+    requireValue(typeof value.installerSha256 === 'string' && sha256HexPattern.test(value.installerSha256));
+    return Object.freeze({
+        version: value.version, installerSha256: value.installerSha256,
+        targetRevision: integer(value.targetRevision, 1),
+    });
+};
+const assignmentStatuses = ['pending', 'claimed', 'executing', 'draining', 'rebooting', 'verifying'];
+/** One assignment, exactly its keys; detached and frozen. */
+export const snapshotSparkNodeActionAssignment = (valueArg) => {
+    const value = record(valueArg, ['id', 'actionName', 'status', 'revision', 'deadlineAt', 'reboot', 'target', 'claim']);
+    requireValue(isNodeActionName(value.actionName));
+    const status = assignmentStatuses.find((statusArg) => statusArg === value.status) ?? fail();
+    requireValue(typeof value.reboot === 'boolean' && (!value.reboot || value.actionName === 'systemUpgrade'));
+    const target = value.target === null ? null : snapshotTarget(value.target);
+    requireValue((target !== null) === (value.actionName === 'serveZoneServiceUpdate'));
+    const claim = value.claim === null ? null : Object.freeze({ bootId: bootId(record(value.claim, ['bootId']).bootId) });
+    requireValue((claim === null) === (status === 'pending'));
+    return Object.freeze({
+        id: actionId(value.id), actionName: value.actionName, status,
+        revision: integer(value.revision, 1), deadlineAt: integer(value.deadlineAt, 1),
+        reboot: value.reboot, target, claim,
+    });
+};
+export const snapshotSparkNodeActionOfferRequest = (valueArg) => {
+    const value = record(valueArg, ['nodeId', 'nodeToken', 'protocol']);
+    return Object.freeze({
+        nodeId: nodeId(value.nodeId), nodeToken: nodeToken(value.nodeToken), protocol: readProtocolOffer(value),
+    });
+};
+export const snapshotSparkNodeActionOffer = (valueArg) => {
+    const value = record(valueArg, ['nodeId', 'action', 'protocol']);
+    return Object.freeze({
+        nodeId: nodeId(value.nodeId),
+        action: value.action === null ? null : snapshotSparkNodeActionAssignment(value.action),
+        protocol: readProtocolOffer(value),
+    });
+};
+const snapshotTransition = (valueArg) => {
+    const properties = readDataProperties(valueArg);
+    requireValue(properties !== null);
+    switch (properties.kind) {
+        case 'claim':
+            return Object.freeze({ kind: 'claim', bootId: bootId(record(valueArg, ['kind', 'bootId']).bootId) });
+        case 'phase': {
+            const phase = record(valueArg, ['kind', 'phase']).phase;
+            const known = sparkNodeActionPhaseOrder.find((phaseArg) => phaseArg !== 'claimed' && phaseArg === phase);
+            return Object.freeze({ kind: 'phase', phase: (known ?? fail()) });
+        }
+        case 'complete':
+            record(valueArg, ['kind']);
+            return Object.freeze({ kind: 'complete' });
+        case 'fail': {
+            const value = record(valueArg, ['kind', 'code', 'detail']);
+            const code = sparkNodeActionFailureCodes.find((codeArg) => codeArg === value.code) ?? fail();
+            return Object.freeze({ kind: 'fail', code, detail: operatorText(value.detail) });
+        }
+        default:
+            return fail();
+    }
+};
+export const snapshotSparkNodeActionTransitionRequest = (valueArg) => {
+    const value = record(valueArg, ['nodeId', 'nodeToken', 'protocol', 'actionId', 'expectedRevision', 'transition']);
+    return Object.freeze({
+        nodeId: nodeId(value.nodeId), nodeToken: nodeToken(value.nodeToken), protocol: readProtocolOffer(value),
+        actionId: actionId(value.actionId), expectedRevision: integer(value.expectedRevision, 1),
+        transition: snapshotTransition(value.transition),
+    });
+};
+const transitionRefusals = [
+    'action-unknown', 'action-closed', 'revision-stale', 'transition-invalid',
+];
+export const snapshotSparkNodeActionTransitionAnswer = (valueArg) => {
+    const properties = readDataProperties(valueArg);
+    requireValue(properties !== null);
+    if (properties.outcome === 'refused') {
+        const value = record(valueArg, ['outcome', 'reason', 'action', 'protocol']);
+        const reason = transitionRefusals.find((reasonArg) => reasonArg === value.reason) ?? fail();
+        return Object.freeze({
+            outcome: 'refused', reason,
+            action: value.action === null ? null : snapshotSparkNodeActionAssignment(value.action),
+            protocol: readProtocolOffer(value),
+        });
+    }
+    const value = record(valueArg, ['outcome', 'action', 'protocol']);
+    requireValue(value.outcome === 'applied' || value.outcome === 'replayed');
+    return Object.freeze({
+        outcome: value.outcome,
+        action: value.action === null ? null : snapshotSparkNodeActionAssignment(value.action),
+        protocol: readProtocolOffer(value),
+    });
+};
+/**
+ * Whether an open action admits one transition from Spark, judged from its state alone.
+ *
+ * `claim` takes a `pending` action. A `phase` moves strictly forward in `sparkNodeActionPhaseOrder`
+ * from `claimed` or an earlier phase, and only into a phase the action has: `rebooting` only for
+ * an action that reboots, `draining` for every action but a host upgrade without a reboot.
+ * `complete` ends the execution of a host upgrade without a reboot. `fail` ends any claimed action
+ * that Cloudly is not yet verifying.
+ */
+export const admitsSparkNodeActionTransition = (actionArg, transitionArg) => {
+    const executing = sparkNodeActionPhaseOrder.indexOf(actionArg.status);
+    switch (transitionArg.kind) {
+        case 'claim':
+            return actionArg.status === 'pending';
+        case 'phase': {
+            if (executing < 0)
+                return false;
+            const next = sparkNodeActionPhaseOrder.indexOf(transitionArg.phase);
+            if (next <= executing)
+                return false;
+            if (transitionArg.phase === 'rebooting')
+                return nodeActionReboots(actionArg.actionName, actionArg.reboot);
+            if (transitionArg.phase === 'draining')
+                return nodeActionRestartsRuntime(actionArg.actionName, actionArg.reboot);
+            return actionArg.actionName !== 'reboot';
+        }
+        case 'complete':
+            return executing >= 1 && nodeActionVerification(actionArg.actionName, actionArg.reboot) === 'upgrade-complete';
+        case 'fail':
+            return executing >= 0;
+    }
+};
+/** True when a value is a canonical list of action names: known names, strictly increasing, at least one. */
+export const isNodeActionNameList = (valueArg) => {
+    const elements = readDataElements(valueArg, nodeActionNames.length);
+    return elements !== null && elements.length > 0 && isCanonicalTokenList(elements, nodeActionNames);
+};
+/** Sorts action names into canonical order, so a list built from a set compares byte for byte. */
+export const sortNodeActionNames = (namesArg) => ([...new Set(namesArg)].sort(compareWireTokens));
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/data/sparkfleettarget.d.ts

@@ -0,0 +1,80 @@
+/**
+ * The Spark release every node of the fleet should run: one row in Cloudly's database, the only
+ * source of the release a fresh node's bootstrap installs and an update moves a node to.
+ *
+ * An administrator names the version and the revision they read; Cloudly reads the SHA-256 of the
+ * release's `install.sh` from the release's published `SHA256SUMS.txt`, checks it against the
+ * `install.sh` it downloads, and stores the pair. Nobody types a hash. A database without the row
+ * holds no target, and every reader refuses by name (`spark-target-unset`) rather than falling
+ * back to a release of its own.
+ *
+ * A target below the release a node runs is admitted: that node reads `ahead` of it, and an update
+ * that would move it down is refused (`spark-target-below-node`).
+ */
+export interface ISparkFleetTarget {
+    /** `MAJOR.MINOR.PATCH`, without `v`. */
+    version: string;
+    /** The SHA-256 the release's `SHA256SUMS.txt` states for `install.sh`, lowercase hex. */
+    installerSha256: string;
+    /** Advances by one with every change; the first target is revision 1. */
+    revision: number;
+    /** Who set it: `admin:<userId>`, or `migration:<step>` for the target a data step seeded. */
+    setBy: string;
+    setAt: number;
+}
+/**
+ * One change of the fleet target, kept in an append-only history: the target as it was set, and
+ * the version it replaced (`null` for the first). The history is the audit; nothing else records
+ * why a target moved.
+ */
+export interface ISparkFleetTargetChange extends ISparkFleetTarget {
+    previousVersion: string | null;
+}
+/**
+ * One node held at the release it runs: it reads `held` rather than behind or ahead, and an update
+ * of it is refused (`spark-target-held`) until the hold is released. There is no per-node or
+ * per-cluster target; a hold is the only exception to the one fleet target.
+ */
+export interface ISparkNodeTargetHold {
+    nodeId: string;
+    /** Operator text naming why the node is held. */
+    reason: string;
+    heldBy: string;
+    heldAt: number;
+}
+export declare const sparkFleetTargetContract: Readonly<{
+    /** Changes one `getSparkFleetTarget` answers, newest first. */
+    readonly historyLimit: 50;
+    /** Characters of one hold's reason. */
+    readonly maximumHoldReasonLength: 256;
+}>;
+/**
+ * Every reason Cloudly answers instead of reading or changing the fleet target or a hold. Each
+ * travels by name as a `TypedResponseError`, and a refused request changes nothing.
+ */
+export declare const sparkFleetTargetRefusals: readonly ["spark-target-request-invalid", "spark-target-revision-stale", "spark-release-unavailable", "spark-release-checksum-missing", "spark-release-checksum-mismatch", "node-missing"];
+export type TSparkFleetTargetRefusalCode = typeof sparkFleetTargetRefusals[number];
+/**
+ * Where one node stands against the fleet target.
+ *
+ * - `at-target`, `behind`, `ahead`: the Spark bundle version it reports, compared to the target.
+ * - `held`: the node is held (`ISparkNodeTargetHold`), whatever it runs.
+ * - `unreported`: the node reports no Spark bundle version (it never reported through the node
+ *   runtime).
+ * - `untargeted`: there is no fleet target.
+ */
+export type TSparkNodeTargetStanding = 'at-target' | 'behind' | 'ahead' | 'held' | 'unreported' | 'untargeted';
+export declare const readSparkNodeTargetStanding: (argsArg: {
+    bundleVersion: string | null;
+    target: Pick<ISparkFleetTarget, 'version'> | null;
+    held: boolean;
+}) => TSparkNodeTargetStanding;
+/**
+ * Validates one `setSparkFleetTarget` input and names every reason it is refused: a release version
+ * and the revision of the target the administrator read, `0` while there is none.
+ */
+export declare const validateSetSparkFleetTargetInput: (valueArg: unknown, pathArg?: string) => string[];
+/**
+ * Validates one hold a request states: `{ reason }` to hold the node, `null` to release it.
+ */
+export declare const validateSparkNodeTargetHoldInput: (valueArg: unknown, pathArg?: string) => string[];

package/dist_ts/data/sparkfleettarget.js

@@ -0,0 +1,71 @@
+import { readExactDataRecord } from '../private/dataproperties.js';
+import { compareReleaseVersions, isReleaseVersion, parseReleaseVersion } from './releaseversion.js';
+export const sparkFleetTargetContract = Object.freeze({
+    /** Changes one `getSparkFleetTarget` answers, newest first. */
+    historyLimit: 50,
+    /** Characters of one hold's reason. */
+    maximumHoldReasonLength: 256,
+});
+/**
+ * Every reason Cloudly answers instead of reading or changing the fleet target or a hold. Each
+ * travels by name as a `TypedResponseError`, and a refused request changes nothing.
+ */
+export const sparkFleetTargetRefusals = Object.freeze([
+    /** The request is not well-formed (`validateSetSparkFleetTargetInput`, `validateSparkNodeTargetHoldInput`). */
+    'spark-target-request-invalid',
+    /** The target moved since the revision the request names (`0` while there is none). */
+    'spark-target-revision-stale',
+    /** The release, its `SHA256SUMS.txt` or its `install.sh` could not be downloaded. */
+    'spark-release-unavailable',
+    /** The release's `SHA256SUMS.txt` states no SHA-256 for `install.sh`. */
+    'spark-release-checksum-missing',
+    /** The downloaded `install.sh` does not have the SHA-256 its `SHA256SUMS.txt` states. */
+    'spark-release-checksum-mismatch',
+    /** No node of that id exists. */
+    'node-missing',
+]);
+export const readSparkNodeTargetStanding = (argsArg) => {
+    if (argsArg.held)
+        return 'held';
+    if (argsArg.target === null)
+        return 'untargeted';
+    const running = parseReleaseVersion(argsArg.bundleVersion);
+    const target = parseReleaseVersion(argsArg.target.version);
+    if (running === null || target === null)
+        return 'unreported';
+    const order = compareReleaseVersions(running, target);
+    return order === 0 ? 'at-target' : order < 0 ? 'behind' : 'ahead';
+};
+/**
+ * Validates one `setSparkFleetTarget` input and names every reason it is refused: a release version
+ * and the revision of the target the administrator read, `0` while there is none.
+ */
+export const validateSetSparkFleetTargetInput = (valueArg, pathArg = 'spark fleet target input') => {
+    const value = readExactDataRecord(valueArg, ['version', 'expectedRevision']);
+    if (value === null)
+        return [`${pathArg} must use its exact schema`];
+    const errors = [];
+    if (!isReleaseVersion(value.version))
+        errors.push(`${pathArg} version must be a MAJOR.MINOR.PATCH release version`);
+    if (!Number.isSafeInteger(value.expectedRevision) || Object.is(value.expectedRevision, -0)
+        || value.expectedRevision < 0) {
+        errors.push(`${pathArg} expectedRevision must be a non-negative integer`);
+    }
+    return errors;
+};
+/**
+ * Validates one hold a request states: `{ reason }` to hold the node, `null` to release it.
+ */
+export const validateSparkNodeTargetHoldInput = (valueArg, pathArg = 'spark node target hold') => {
+    if (valueArg === null)
+        return [];
+    const value = readExactDataRecord(valueArg, ['reason']);
+    if (value === null)
+        return [`${pathArg} must be null or use its exact schema`];
+    return typeof value.reason === 'string' && value.reason.length > 0
+        && value.reason.length <= sparkFleetTargetContract.maximumHoldReasonLength
+        && /^[\x20-\x7e]+$/.test(value.reason)
+        ? []
+        : [`${pathArg} reason must be printable text of 1 to ${sparkFleetTargetContract.maximumHoldReasonLength} characters`];
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic3BhcmtmbGVldHRhcmdldC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3RzL2RhdGEvc3BhcmtmbGVldHRhcmdldC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEVBQUUsbUJBQW1CLEVBQUUsTUFBTSw4QkFBOEIsQ0FBQztBQUNuRSxPQUFPLEVBQUUsc0JBQXNCLEVBQUUsZ0JBQWdCLEVBQUUsbUJBQW1CLEVBQUUsTUFBTSxxQkFBcUIsQ0FBQztBQWlEcEcsTUFBTSxDQUFDLE1BQU0sd0JBQXdCLEdBQUcsTUFBTSxDQUFDLE1BQU0sQ0FBQztJQUNwRCwrREFBK0Q7SUFDL0QsWUFBWSxFQUFFLEVBQUU7SUFDaEIsdUNBQXVDO0lBQ3ZDLHVCQUF1QixFQUFFLEdBQUc7Q0FDcEIsQ0FBQyxDQUFDO0FBRVo7OztHQUdHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sd0JBQXdCLEdBQUcsTUFBTSxDQUFDLE1BQU0sQ0FBQztJQUNwRCwrR0FBK0c7SUFDL0csOEJBQThCO0lBQzlCLHVGQUF1RjtJQUN2Riw2QkFBNkI7SUFDN0IscUZBQXFGO0lBQ3JGLDJCQUEyQjtJQUMzQix5RUFBeUU7SUFDekUsZ0NBQWdDO0lBQ2hDLHlGQUF5RjtJQUN6RixpQ0FBaUM7SUFDakMsaUNBQWlDO0lBQ2pDLGNBQWM7Q0FDTixDQUFDLENBQUM7QUFlWixNQUFNLENBQUMsTUFBTSwyQkFBMkIsR0FBRyxDQUFDLE9BSTNDLEVBQTRCLEVBQUU7SUFDN0IsSUFBSSxPQUFPLENBQUMsSUFBSTtRQUFFLE9BQU8sTUFBTSxDQUFDO0lBQ2hDLElBQUksT0FBTyxDQUFDLE1BQU0sS0FBSyxJQUFJO1FBQUUsT0FBTyxZQUFZLENBQUM7SUFDakQsTUFBTSxPQUFPLEdBQUcsbUJBQW1CLENBQUMsT0FBTyxDQUFDLGFBQWEsQ0FBQyxDQUFDO0lBQzNELE1BQU0sTUFBTSxHQUFHLG1CQUFtQixDQUFDLE9BQU8sQ0FBQyxNQUFNLENBQUMsT0FBTyxDQUFDLENBQUM7SUFDM0QsSUFBSSxPQUFPLEtBQUssSUFBSSxJQUFJLE1BQU0sS0FBSyxJQUFJO1FBQUUsT0FBTyxZQUFZLENBQUM7SUFDN0QsTUFBTSxLQUFLLEdBQUcsc0JBQXNCLENBQUMsT0FBTyxFQUFFLE1BQU0sQ0FBQyxDQUFDO0lBQ3RELE9BQU8sS0FBSyxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsV0FBVyxDQUFDLENBQUMsQ0FBQyxLQUFLLEdBQUcsQ0FBQyxDQUFDLENBQUMsQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFDLE9BQU8sQ0FBQztBQUNwRSxDQUFDLENBQUM7QUFFRjs7O0dBR0c7QUFDSCxNQUFNLENBQUMsTUFBTSxnQ0FBZ0MsR0FBRyxDQUM5QyxRQUFpQixFQUNqQixPQUFPLEdBQUcsMEJBQTBCLEVBQzFCLEVBQUU7SUFDWixNQUFNLEtBQUssR0FBRyxtQkFBbUIsQ0FBQyxRQUFRLEVBQUUsQ0FBQyxTQUFTLEVBQUUsa0JBQWtCLENBQUMsQ0FBQyxDQUFDO0lBQzdFLElBQUksS0FBSyxLQUFLLElBQUk7UUFBRSxPQUFPLENBQUMsR0FBRyxPQUFPLDRCQUE0QixDQUFDLENBQUM7SUFDcEUsTUFBTSxNQUFNLEdBQWEsRUFBRSxDQUFDO0lBQzVCLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDO1FBQUUsTUFBTSxDQUFDLElBQUksQ0FBQyxHQUFHLE9BQU8sc0RBQXNELENBQUMsQ0FBQztJQUNwSCxJQUFJLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxLQUFLLENBQUMsZ0JBQWdCLENBQUMsSUFBSSxNQUFNLENBQUMsRUFBRSxDQUFDLEtBQUssQ0FBQyxnQkFBZ0IsRUFBRSxDQUFDLENBQUMsQ0FBQztXQUNwRixLQUFLLENBQUMsZ0JBQTJCLEdBQUcsQ0FBQyxFQUFFLENBQUM7UUFDNUMsTUFBTSxDQUFDLElBQUksQ0FBQyxHQUFHLE9BQU8sa0RBQWtELENBQUMsQ0FBQztJQUM1RSxDQUFDO0lBQ0QsT0FBTyxNQUFNLENBQUM7QUFDaEIsQ0FBQyxDQUFDO0FBRUY7O0dBRUc7QUFDSCxNQUFNLENBQUMsTUFBTSxnQ0FBZ0MsR0FBRyxDQUM5QyxRQUFpQixFQUNqQixPQUFPLEdBQUcsd0JBQXdCLEVBQ3hCLEVBQUU7SUFDWixJQUFJLFFBQVEsS0FBSyxJQUFJO1FBQUUsT0FBTyxFQUFFLENBQUM7SUFDakMsTUFBTSxLQUFLLEdBQUcsbUJBQW1CLENBQUMsUUFBUSxFQUFFLENBQUMsUUFBUSxDQUFDLENBQUMsQ0FBQztJQUN4RCxJQUFJLEtBQUssS0FBSyxJQUFJO1FBQUUsT0FBTyxDQUFDLEdBQUcsT0FBTyx1Q0FBdUMsQ0FBQyxDQUFDO0lBQy9FLE9BQU8sT0FBTyxLQUFLLENBQUMsTUFBTSxLQUFLLFFBQVEsSUFBSSxLQUFLLENBQUMsTUFBTSxDQUFDLE1BQU0sR0FBRyxDQUFDO1dBQzdELEtBQUssQ0FBQyxNQUFNLENBQUMsTUFBTSxJQUFJLHdCQUF3QixDQUFDLHVCQUF1QjtXQUN2RSxnQkFBZ0IsQ0FBQyxJQUFJLENBQUMsS0FBSyxDQUFDLE1BQU0sQ0FBQztRQUN0QyxDQUFDLENBQUMsRUFBRTtRQUNKLENBQUMsQ0FBQyxDQUFDLEdBQUcsT0FBTywwQ0FBMEMsd0JBQXdCLENBQUMsdUJBQXVCLGFBQWEsQ0FBQyxDQUFDO0FBQzFILENBQUMsQ0FBQyJ9