@treeseed/sdk 0.13.0-rc.113 → 0.13.0-rc.115

package/dist/capacity-provider/source/candidate.js

@@ -0,0 +1,72 @@
+import { z } from "zod";
+import { sourceWorkspaceKeySchema } from "../source-workspace.js";
+const sourceCandidateChunkBytes = 524288;
+const digest = z.string().regex(/^sha256:[a-f0-9]{64}$/u);
+const commit = z.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u);
+const id = z.string().min(1).max(256);
+const sourceCandidateAttestationSchema = z.object({
+  schemaVersion: z.literal("treeseed.source-candidate-attestation/v1"),
+  providerId: id,
+  assignmentId: id,
+  attempt: z.number().int().positive(),
+  leaseId: id,
+  source: sourceWorkspaceKeySchema,
+  commit,
+  parentCandidateId: id.nullable(),
+  bundle: z.object({
+    digest,
+    bytes: z.number().int().positive().max(sourceCandidateChunkBytes * 1024),
+    chunks: z.array(digest).min(1).max(1024)
+  }).strict(),
+  verification: z.object({
+    clean: z.literal(true),
+    objectClosure: z.literal(true),
+    ancestry: z.literal(true),
+    isolatedVerifier: z.literal(true),
+    executionStopped: z.literal(true),
+    verifierStopped: z.literal(true)
+  }).strict(),
+  verifiedAt: z.string().datetime()
+}).strict().superRefine((value, context) => {
+  if (value.bundle.chunks.length !== Math.ceil(value.bundle.bytes / sourceCandidateChunkBytes)) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["bundle", "chunks"], message: "Candidate chunk count must match its bounded size." });
+  }
+});
+const signedSourceCandidateSchema = z.object({
+  attestation: sourceCandidateAttestationSchema,
+  signature: z.object({
+    algorithm: z.literal("Ed25519"),
+    keyId: id,
+    value: z.string().regex(/^[A-Za-z0-9_-]{86}$/u)
+  }).strict()
+}).strict();
+const authority = { runnerId: id, leaseToken: z.string().min(1).max(4096), candidate: signedSourceCandidateSchema };
+const sourceCandidateRequestSchema = z.discriminatedUnion("action", [
+  z.object({
+    ...authority,
+    action: z.literal("chunk"),
+    index: z.number().int().min(0).max(1023),
+    content: z.string().min(4).max(Math.ceil(sourceCandidateChunkBytes / 3) * 4).regex(/^[A-Za-z0-9+/]+={0,2}$/u)
+  }).strict(),
+  z.object({ ...authority, action: z.literal("commit") }).strict()
+]);
+const sourceChunkRequestSchema = z.object({
+  runnerId: id,
+  leaseToken: z.string().min(1).max(4096),
+  artifactId: id,
+  index: z.number().int().min(0).max(1023)
+}).strict();
+const sourceChunkResponseSchema = z.object({
+  artifactId: id,
+  index: z.number().int().min(0).max(1023),
+  digest,
+  content: z.string().min(4).max(Math.ceil(sourceCandidateChunkBytes / 3) * 4).regex(/^[A-Za-z0-9+/]+={0,2}$/u)
+}).strict();
+export {
+  signedSourceCandidateSchema,
+  sourceCandidateAttestationSchema,
+  sourceCandidateChunkBytes,
+  sourceCandidateRequestSchema,
+  sourceChunkRequestSchema,
+  sourceChunkResponseSchema
+};

package/dist/capacity-provider/source-workspace.d.ts

@@ -183,7 +183,7 @@ export declare const sourceWorkspaceLeaseSchema: z.ZodObject<{
     expiresAt: z.ZodString;
 }, "strict", z.ZodTypeAny, {
     id: string;
-    state: "active" | "released" | "quarantined" | "exporting";
+    state: "active" | "released" | "exporting" | "quarantined";
     expiresAt: string;
     schemaVersion: "treeseed.source-workspace-lease/v1";
     createdAt: string;
@@ -205,7 +205,7 @@ export declare const sourceWorkspaceLeaseSchema: z.ZodObject<{
     workspaceDigest: string;
 }, {
     id: string;
-    state: "active" | "released" | "quarantined" | "exporting";
+    state: "active" | "released" | "exporting" | "quarantined";
     expiresAt: string;
     schemaVersion: "treeseed.source-workspace-lease/v1";
     createdAt: string;
@@ -505,6 +505,23 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         publication: "denied" | "candidate-only";
         credentialBindingId: string;
     }>;
+    /** Present only for an accepted predecessor candidate selected by the control plane. */
+    sourceBundle: z.ZodOptional<z.ZodObject<{
+        artifactId: z.ZodString;
+        digest: z.ZodString;
+        bytes: z.ZodNumber;
+        chunks: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        digest: string;
+        bytes: number;
+        artifactId: string;
+        chunks: string[];
+    }, {
+        digest: string;
+        bytes: number;
+        artifactId: string;
+        chunks: string[];
+    }>>;
     repository: z.ZodObject<{
         provider: z.ZodLiteral<"github">;
         owner: z.ZodString;
@@ -595,6 +612,12 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         authorizationId: string;
         ephemeralPublicKey: string;
     };
+    sourceBundle?: {
+        digest: string;
+        bytes: number;
+        artifactId: string;
+        chunks: string[];
+    } | undefined;
 }, {
     repository: {
         provider: "github";
@@ -635,6 +658,12 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         authorizationId: string;
         ephemeralPublicKey: string;
     };
+    sourceBundle?: {
+        digest: string;
+        bytes: number;
+        artifactId: string;
+        chunks: string[];
+    } | undefined;
 }>, {
     repository: {
         provider: "github";
@@ -675,6 +704,12 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         authorizationId: string;
         ephemeralPublicKey: string;
     };
+    sourceBundle?: {
+        digest: string;
+        bytes: number;
+        artifactId: string;
+        chunks: string[];
+    } | undefined;
 }, {
     repository: {
         provider: "github";
@@ -715,6 +750,12 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         authorizationId: string;
         ephemeralPublicKey: string;
     };
+    sourceBundle?: {
+        digest: string;
+        bytes: number;
+        artifactId: string;
+        chunks: string[];
+    } | undefined;
 }>;
 export type SourceCredentialDelivery = z.infer<typeof sourceCredentialDeliverySchema>;
 export type SourceWorkspaceRequest = z.infer<typeof sourceWorkspaceRequestSchema>;

package/dist/capacity-provider/source-workspace.js

@@ -75,6 +75,13 @@ const sourceCredentialDeliverySchema = z.object({
 }).strict();
 const sourceWorkspaceResponseSchema = z.object({
   authorization: sourceWorkspaceAuthorizationSchema,
+  /** Present only for an accepted predecessor candidate selected by the control plane. */
+  sourceBundle: z.object({
+    artifactId: id,
+    digest,
+    bytes: z.number().int().positive().max(536870912),
+    chunks: z.array(digest).min(1).max(1024)
+  }).strict().optional(),
   repository: z.object({
     provider: z.literal("github"),
     owner: z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9-]{0,99}$/u),
@@ -84,6 +91,9 @@ const sourceWorkspaceResponseSchema = z.object({
   }).strict(),
   credential: sourceCredentialDeliverySchema
 }).strict().superRefine((value, context) => {
+  if (value.sourceBundle && value.sourceBundle.chunks.length !== Math.ceil(value.sourceBundle.bytes / 524288)) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["sourceBundle"], message: "Source bundle chunks must match its bounded size." });
+  }
   if (value.repository.cloneUrl !== `https://github.com/${value.repository.owner}/${value.repository.name}.git`) {
     context.addIssue({ code: z.ZodIssueCode.custom, path: ["repository", "cloneUrl"], message: "Source transport must match its provider repository." });
   }

package/dist/operator-contracts/control-plane-operations.d.ts

@@ -2573,6 +2573,9 @@ export declare const CONTROL_PLANE_OPERATIONS: {
         readonly sourceCandidate: import("./control-plane-operation.js").ControlPlaneOperationBinding<{
             assignmentId: string;
         }, {}, Record<string, unknown> | undefined, Record<string, unknown>>;
+        readonly sourceChunk: import("./control-plane-operation.js").ControlPlaneOperationBinding<{
+            assignmentId: string;
+        }, {}, Record<string, unknown> | undefined, Record<string, unknown>>;
         readonly renewAssignment: import("./control-plane-operation.js").ControlPlaneOperationBinding<{
             assignmentId: string;
         }, {}, Record<string, unknown> | undefined, Record<string, unknown>>;

package/dist/operator-contracts/control-plane-operations.js

@@ -482,7 +482,8 @@ const CONTROL_PLANE_OPERATIONS = {
     assignment: providerPath("providers.assignments.show", "GET", "/v1/provider/assignments/{assignmentId}", { assignmentId: z.string().min(1) }, { read: true }),
     assignmentExplanation: providerPath("providers.assignments.explain", "GET", "/v1/provider/assignments/{assignmentId}/explanation", { assignmentId: z.string().min(1) }, { read: true }),
     sourceWorkspace: providerPath("providers.assignments.source.authorize", "POST", "/v1/provider/assignments/{assignmentId}/source-workspace", { assignmentId: z.string().min(1) }, { redactedPaths: ["body.leaseToken", "output.credential.ciphertext"] }),
-    sourceCandidate: providerPath("providers.assignments.source.candidate", "POST", "/v1/provider/assignments/{assignmentId}/source-candidates", { assignmentId: z.string().min(1) }, { redactedPaths: ["body.leaseToken"] }),
+    sourceCandidate: providerPath("providers.assignments.source.candidate", "POST", "/v1/provider/assignments/{assignmentId}/source-candidates", { assignmentId: z.string().min(1) }, { redactedPaths: ["body.leaseToken", "body.content"] }),
+    sourceChunk: providerPath("providers.assignments.source.chunk", "POST", "/v1/provider/assignments/{assignmentId}/source-workspace/chunks", { assignmentId: z.string().min(1) }, { redactedPaths: ["body.leaseToken", "output.content"] }),
     renewAssignment: providerPath("providers.assignments.renew", "POST", "/v1/provider/assignments/{assignmentId}/renew", { assignmentId: z.string().min(1) }),
     startExecution: providerPath("providers.assignments.execution.start", "POST", "/v1/provider/assignments/{assignmentId}/execution-start", { assignmentId: z.string().min(1) }),
     startCloseout: providerPath("providers.assignments.closeout.start", "POST", "/v1/provider/assignments/{assignmentId}/closeout-start", { assignmentId: z.string().min(1) }),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.13.0-rc.113",
+  "version": "0.13.0-rc.115",
   "description": "Portable TreeSeed contracts, standards, and typed remote control-plane clients.",
   "license": "Apache-2.0",
   "repository": {