Add interactive client terminal transport

crates/lazaret-core/src/records/credentials.rs

@@ -229,6 +229,7 @@ pub enum ControlRequest {
     Enroll(ClientEnrollmentRequest),
     Register(SessionRegistrationRequest),
     Execute(NonInteractiveSessionRequest),
+    ExecuteInteractive(super::InteractiveSessionRequest),
 }
 
 #[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]

crates/lazaret-core/src/records/registry.rs

@@ -4,24 +4,26 @@ use super::{
     DefaultAction, DeniedDestinationObservation, DerivedNetworkPolicy, DeveloperDecision,
     DeveloperDecisionKind, DnsObservation, Domain, DomainStore, EnvironmentReference,
     EscalationOutcome, Generation, GenerationIdentity, GitRoutingOwnership, GuestProcessIdentity,
-    HelperOwnership, HostProcessIdentity, HostProcessOwnershipSlot, Mailbox, MailboxCancellation,
-    MailboxRequest, MailboxResult, MailboxResultAck, MailboxResultChunk, MountIdentity,
-    NamespaceIdentity, NetworkObservation, NetworkOwnership, NetworkReachabilityProbe,
-    NetworkReadinessAttestation, NetworkReadinessEvidence, NetworkReadinessIdentity,
-    NonInteractiveOutput, NonInteractiveSessionMessage, NonInteractiveSessionRequest, Participant,
-    ParticipantOwnership, ParticipantState, PermittedDestinationObservation,
-    PersistedHostProcessOwnership, PidfsProcessAuthorityV1, PidfsProcessIdentityV1, PolicyAction,
-    PolicyDelivery, PrefixRule, PrepareOperation, PrepareStageState, PreparedArtifact,
-    PreparedLowerOwnership, ProcessOwnershipCommitAck, ProcessOwnershipMessageVersion,
-    ProtocolCredential, ProtocolCredentialRole, ProtocolPublicationIdentity, PtyIdentity,
-    PublicationOwnership, ResolvedAutoApprovalRule, ResolvedNetworkReadinessV1, ResolvedVolume,
-    Resolver, ResultStream, SandboxCredentialBundle, SandboxOwnership, Session, SessionBinding,
-    SessionClose, SessionExit, SessionExitOutcome, SessionRegistrationRequest,
-    SessionRegistrationResponse, SessionRequestCapability, SessionTerminal, SessionTerminalEvent,
-    SessionTerminalMessage, SessionTerminalState, SignedProtocolRecord, StagedProcessOwnership,
-    StateAnchorOwnership, StateAnchorReleaseEvidence, StorageCatalog, StoreMetadata, TerminalInput,
-    TerminalOutput, TerminalResize, TerminalSignal, TerminalSignalKind, TlsCredential, TlsRole,
-    TrustManifest, TrustedHostConfigurationV1,
+    HelperOwnership, HostProcessIdentity, HostProcessOwnershipSlot, InteractiveSessionBatch,
+    InteractiveSessionEvent, InteractiveSessionMessage, InteractiveSessionRequest, Mailbox,
+    MailboxCancellation, MailboxRequest, MailboxResult, MailboxResultAck, MailboxResultChunk,
+    MountIdentity, NamespaceIdentity, NetworkObservation, NetworkOwnership,
+    NetworkReachabilityProbe, NetworkReadinessAttestation, NetworkReadinessEvidence,
+    NetworkReadinessIdentity, NonInteractiveOutput, NonInteractiveSessionMessage,
+    NonInteractiveSessionRequest, Participant, ParticipantOwnership, ParticipantState,
+    PermittedDestinationObservation, PersistedHostProcessOwnership, PidfsProcessAuthorityV1,
+    PidfsProcessIdentityV1, PolicyAction, PolicyDelivery, PrefixRule, PrepareOperation,
+    PrepareStageState, PreparedArtifact, PreparedLowerOwnership, ProcessOwnershipCommitAck,
+    ProcessOwnershipMessageVersion, ProtocolCredential, ProtocolCredentialRole,
+    ProtocolPublicationIdentity, PtyIdentity, PublicationOwnership, ResolvedAutoApprovalRule,
+    ResolvedNetworkReadinessV1, ResolvedVolume, Resolver, ResultStream, SandboxCredentialBundle,
+    SandboxOwnership, Session, SessionBinding, SessionClose, SessionExit, SessionExitOutcome,
+    SessionRegistrationRequest, SessionRegistrationResponse, SessionRequestCapability,
+    SessionTerminal, SessionTerminalEvent, SessionTerminalMessage, SessionTerminalState,
+    SignedProtocolRecord, StagedProcessOwnership, StateAnchorOwnership, StateAnchorReleaseEvidence,
+    StorageCatalog, StoreMetadata, TerminalInput, TerminalOutput, TerminalPrompt, TerminalResize,
+    TerminalSignal, TerminalSignalKind, TlsCredential, TlsRole, TrustManifest,
+    TrustedHostConfigurationV1,
 };
 
 pub trait SchemaType {
@@ -72,6 +74,11 @@ schema_types!(
     "TerminalSignalKind" => TerminalSignalKind,
     "SessionClose" => SessionClose,
     "SessionTerminalMessage" => SessionTerminalMessage,
+    "InteractiveSessionRequest" => InteractiveSessionRequest,
+    "InteractiveSessionEvent" => InteractiveSessionEvent,
+    "InteractiveSessionMessage" => InteractiveSessionMessage,
+    "InteractiveSessionBatch" => InteractiveSessionBatch,
+    "TerminalPrompt" => TerminalPrompt,
     "NonInteractiveSessionRequest" => NonInteractiveSessionRequest,
     "NonInteractiveOutput" => NonInteractiveOutput,
     "NonInteractiveSessionMessage" => NonInteractiveSessionMessage,

crates/lazaret-core/src/records/terminal.rs

@@ -1,4 +1,6 @@
-use super::{Deserialize, NonZeroU16, Serialize, SessionId};
+use crate::identity::{RequestDigest, RequestId};
+
+use super::{Deserialize, NonZeroU16, ProtocolVersion, Serialize, SessionId};
 
 #[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
 pub struct TerminalInput {
@@ -137,6 +139,48 @@ pub enum SessionTerminalMessage {
     Exit(SessionExit),
 }
 
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+pub struct InteractiveSessionRequest {
+    pub protocol_version: ProtocolVersion,
+    pub session_id: SessionId,
+    pub argv: Vec<Vec<u8>>,
+    pub initial_size: TerminalResize,
+}
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+pub struct TerminalPrompt {
+    pub session_id: SessionId,
+    pub request_id: RequestId,
+    pub request_sha256: RequestDigest,
+    pub agent_profile: String,
+    pub command_argv: Vec<Vec<u8>>,
+    pub justification: String,
+}
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+pub enum InteractiveSessionEvent {
+    Terminal(SessionTerminalEvent),
+    PromptDecision {
+        session_id: SessionId,
+        signed_decision: Vec<u8>,
+    },
+    Poll {
+        session_id: SessionId,
+    },
+}
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+pub enum InteractiveSessionMessage {
+    Terminal(SessionTerminalMessage),
+    Prompt(TerminalPrompt),
+}
+
+#[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
+pub struct InteractiveSessionBatch {
+    pub session_id: SessionId,
+    pub messages: Vec<InteractiveSessionMessage>,
+}
+
 #[derive(Clone, Debug, Deserialize, Eq, PartialEq, Serialize)]
 pub struct NonInteractiveSessionRequest {
     pub protocol_version: super::ProtocolVersion,

crates/lazaret-core/tests/schema_records/encoding.rs

@@ -208,6 +208,46 @@ fn every_schema_shape_round_trips_and_rejects_malformed_or_unknown_versions() {
         NonInteractiveSessionMessage::Exit(SessionExit::exited(session_id(), 4)),
         &mut seen,
     );
+    let interactive_resize = TerminalResize {
+        session_id: session_id(),
+        rows: NonZeroU16::new(24).unwrap(),
+        columns: NonZeroU16::new(80).unwrap(),
+        pixel_width: 0,
+        pixel_height: 0,
+    };
+    verify_shape(
+        InteractiveSessionRequest {
+            protocol_version: ProtocolVersion::V1,
+            session_id: session_id(),
+            argv: vec![b"tool".to_vec()],
+            initial_size: interactive_resize,
+        },
+        &mut seen,
+    );
+    verify_shape(
+        InteractiveSessionEvent::Poll {
+            session_id: session_id(),
+        },
+        &mut seen,
+    );
+    let prompt = TerminalPrompt {
+        session_id: session_id(),
+        request_id: RequestId::new(opaque(54)),
+        request_sha256: RequestDigest::new(opaque(55)),
+        agent_profile: "trusted".into(),
+        command_argv: vec![b"/usr/bin/tool".to_vec()],
+        justification: "host operation".into(),
+    };
+    verify_shape(prompt.clone(), &mut seen);
+    let interactive_message = InteractiveSessionMessage::Prompt(prompt);
+    verify_shape(interactive_message.clone(), &mut seen);
+    verify_shape(
+        InteractiveSessionBatch {
+            session_id: session_id(),
+            messages: vec![interactive_message],
+        },
+        &mut seen,
+    );
     verify_shape(generation_identity(), &mut seen);
     verify_shape(trust_manifest(), &mut seen);
     verify_shape(tls_credential.clone(), &mut seen);