@apexops/cli 0.10.0-next.0

package/dist/service.d.ts

@@ -0,0 +1,806 @@
+import { type ApprovalEvidenceV1, type ArchitectureAvailabilityV1, type DeploymentPreviewV1, type InputRequestV1, type InputValueV1, type InputSubmissionV1, type ImprovementCategory, type ImprovementDecisionV1, type ImprovementObservationV1, type ImprovementPolicyV1, type ImprovementProposalV1, type ImprovementSource, type Operation, type ProjectId, type ResourceInventoryV1, type RunConfigV1, type RunId, type TaskEnvelopeV1 } from "@apexops/contracts";
+import { type CapabilityPackInstallOptions, type IacProvider, type ProcessRunnerLike } from "@apexops/capabilities";
+import { type JsonValue } from "@apexops/kernel";
+import { type BundledClientProjection } from "./assets.js";
+interface Selection {
+    projectId: ProjectId;
+    runId: RunId;
+}
+export interface GateDecisionOptions {
+    recipientIdentity?: string;
+}
+export interface TaskOutput {
+    kind: ArtifactKind;
+    value: unknown;
+    summary?: string;
+}
+export interface StagedArtifact {
+    taskId: string;
+    kind: TaskOutput["kind"];
+    path: string;
+    bytes: number;
+    hash: string;
+}
+export interface StagedFile {
+    taskId: string;
+    path: string;
+    bytes: number;
+    hash: string;
+    idempotent: boolean;
+}
+export interface GenerateIacOptions {
+    existingResources?: string[];
+    azurermProviderConstraint?: string;
+    azapiProviderConstraint?: string;
+    lockFileContent?: string;
+    requiredToolVersions?: Record<string, string>;
+}
+interface PreviewOptions {
+    operation: Operation;
+    provider: "fake" | "bicep" | "terraform";
+    expiresInMs?: number;
+    recipientIdentity?: string;
+}
+export interface ReviewResolution {
+    findingId: string;
+    reviewHash: string;
+    subjectHash: string;
+    disposition: "fixed" | "accepted-risk";
+    actor: string;
+    rationale: string;
+    evidenceRefs: string[];
+    expiresAt?: string;
+    dependencyHash: string;
+}
+export interface ServiceOptions {
+    clock?: () => Date;
+    idSource?: () => string;
+    providers?: Partial<Record<"fake" | "bicep" | "terraform", IacProvider>>;
+    architectureAvailabilityAdapter?: (evidence: ArchitectureAvailabilityV1) => Promise<void>;
+    executableChecker?: (executable: string) => Promise<boolean>;
+    azureAuthStatus?: (live: boolean) => Promise<{
+        authenticated: boolean;
+        detail: string;
+    }>;
+    customizationFailureInjector?: (index: number, destination: string) => void | Promise<void>;
+    processRunner?: ProcessRunnerLike;
+    profileRoot?: string;
+    improvementPolicy?: ImprovementPolicyV1;
+}
+interface DoctorCheck {
+    id: string;
+    ok: boolean;
+    value: string;
+    remedy?: string;
+}
+declare const ARTIFACTS: {
+    readonly requirements: readonly ["requirements", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        workload: import("@sinclair/typebox").TString;
+        environment: import("@sinclair/typebox").TString;
+        requirements: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TString;
+            statement: import("@sinclair/typebox").TString;
+            priority: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"must">, import("@sinclair/typebox").TLiteral<"should">, import("@sinclair/typebox").TLiteral<"could">]>;
+            status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"confirmed">, import("@sinclair/typebox").TLiteral<"unknown">, import("@sinclair/typebox").TLiteral<"deferred">]>;
+            source: import("@sinclair/typebox").TString;
+        }>>;
+        assumptions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        unknowns: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    }>];
+    readonly "workload-decision-manifest": readonly ["workload-decision-manifest", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        environment: import("@sinclair/typebox").TString;
+        sourceRequirementsHash: import("@sinclair/typebox").TString;
+        architectureHash: import("@sinclair/typebox").TString;
+        costEstimateHash: import("@sinclair/typebox").TString;
+        environments: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        requirementTraceability: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            requirementId: import("@sinclair/typebox").TString;
+            skuDecisionIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            sloDecisionIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        }>>;
+        skuDecisions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TString;
+            logicalId: import("@sinclair/typebox").TString;
+            service: import("@sinclair/typebox").TString;
+            sku: import("@sinclair/typebox").TString;
+            quantity: import("@sinclair/typebox").TNumber;
+            rationale: import("@sinclair/typebox").TString;
+            requirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            environmentOverrides: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+                environment: import("@sinclair/typebox").TString;
+                sku: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                quantity: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+            }>>;
+        }>>;
+        sloDecisions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TString;
+            logicalId: import("@sinclair/typebox").TString;
+            availabilityPercent: import("@sinclair/typebox").TNumber;
+            rtoMinutes: import("@sinclair/typebox").TInteger;
+            rpoMinutes: import("@sinclair/typebox").TInteger;
+            supportWindow: import("@sinclair/typebox").TString;
+            complianceScopes: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            requirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            environmentOverrides: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+                environment: import("@sinclair/typebox").TString;
+                patch: import("@sinclair/typebox").TObject<{
+                    availabilityPercent: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+                    rtoMinutes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+                    rpoMinutes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+                    supportWindow: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+                    complianceScopes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+                }>;
+            }>>;
+        }>>;
+        revisions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            number: import("@sinclair/typebox").TInteger;
+            createdAt: import("@sinclair/typebox").TString;
+            sourceHash: import("@sinclair/typebox").TString;
+            reason: import("@sinclair/typebox").TString;
+        }>>;
+    }>];
+    readonly architecture: readonly ["architecture", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        title: import("@sinclair/typebox").TString;
+        summary: import("@sinclair/typebox").TString;
+        sourceHashes: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>;
+        components: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TString;
+            service: import("@sinclair/typebox").TString;
+            purpose: import("@sinclair/typebox").TString;
+            requirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            dependsOn: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        }>>;
+        decisions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        risks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    }>];
+    readonly "cost-estimate": readonly ["cost-estimate", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        currency: import("@sinclair/typebox").TString;
+        pricingDate: import("@sinclair/typebox").TString;
+        lineItems: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TString;
+            service: import("@sinclair/typebox").TString;
+            sku: import("@sinclair/typebox").TString;
+            quantity: import("@sinclair/typebox").TNumber;
+            unitPrice: import("@sinclair/typebox").TNumber;
+            unitsPerMonth: import("@sinclair/typebox").TNumber;
+            monthlyCost: import("@sinclair/typebox").TNumber;
+            source: import("@sinclair/typebox").TObject<{
+                provider: import("@sinclair/typebox").TString;
+                uri: import("@sinclair/typebox").TString;
+                retrievedAt: import("@sinclair/typebox").TString;
+                priceId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            }>;
+            uncertainty: import("@sinclair/typebox").TObject<{
+                lowerMonthlyCost: import("@sinclair/typebox").TNumber;
+                upperMonthlyCost: import("@sinclair/typebox").TNumber;
+                confidence: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"high">]>;
+                basis: import("@sinclair/typebox").TString;
+            }>;
+        }>>;
+        totalMonthlyCost: import("@sinclair/typebox").TNumber;
+        assumptions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    }>];
+    readonly "review-findings": readonly ["review-findings", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        subjectKind: import("@sinclair/typebox").TString;
+        subjectHash: import("@sinclair/typebox").TString;
+        reviewedAt: import("@sinclair/typebox").TString;
+        findings: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TString;
+            severity: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"critical">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"info">]>;
+            disposition: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"open">, import("@sinclair/typebox").TLiteral<"accepted">, import("@sinclair/typebox").TLiteral<"remediated">, import("@sinclair/typebox").TLiteral<"dismissed">]>;
+            title: import("@sinclair/typebox").TString;
+            detail: import("@sinclair/typebox").TString;
+            evidenceRefs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            resolution: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>>;
+    }>];
+    readonly "governance-constraints": readonly ["governance-constraints", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        targetScope: import("@sinclair/typebox").TString;
+        discoveredAt: import("@sinclair/typebox").TString;
+        expiresAt: import("@sinclair/typebox").TString;
+        summary: import("@sinclair/typebox").TObject<{
+            assignmentCount: import("@sinclair/typebox").TInteger;
+            denyCount: import("@sinclair/typebox").TInteger;
+            modifyCount: import("@sinclair/typebox").TInteger;
+            auditCount: import("@sinclair/typebox").TInteger;
+            exemptionCount: import("@sinclair/typebox").TInteger;
+        }>;
+        constraintsRef: import("@sinclair/typebox").TObject<{
+            mediaType: import("@sinclair/typebox").TLiteral<"application/json">;
+            uri: import("@sinclair/typebox").TString;
+            digest: import("@sinclair/typebox").TString;
+            bytes: import("@sinclair/typebox").TInteger;
+        }>;
+    }>];
+    readonly "policy-property-map": readonly ["policy-property-map", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        governanceHash: import("@sinclair/typebox").TString;
+        mappings: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            policyAssignmentId: import("@sinclair/typebox").TString;
+            effect: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"deny">, import("@sinclair/typebox").TLiteral<"modify">, import("@sinclair/typebox").TLiteral<"append">, import("@sinclair/typebox").TLiteral<"audit">, import("@sinclair/typebox").TLiteral<"deployIfNotExists">, import("@sinclair/typebox").TLiteral<"disabled">]>;
+            logicalResourceId: import("@sinclair/typebox").TString;
+            propertyPath: import("@sinclair/typebox").TString;
+            expectedValue: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnknown>;
+            disposition: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"satisfied">, import("@sinclair/typebox").TLiteral<"planned">, import("@sinclair/typebox").TLiteral<"exempt">, import("@sinclair/typebox").TLiteral<"blocked">]>;
+        }>>;
+    }>];
+    readonly "implementation-intent": readonly ["implementation-intent", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        sourceHashes: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>;
+        resources: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TString;
+            type: import("@sinclair/typebox").TString;
+            purpose: import("@sinclair/typebox").TString;
+            dependsOn: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            controls: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        }>>;
+        outputs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    }>];
+    readonly "iac-binding": readonly ["iac-binding", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+        intentHash: import("@sinclair/typebox").TString;
+        resourceBindings: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
+            implementation: import("@sinclair/typebox").TString;
+            version: import("@sinclair/typebox").TString;
+            parameters: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>;
+        }>>;
+    }>];
+    readonly "environment-inputs": readonly ["environment-inputs", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        environment: import("@sinclair/typebox").TString;
+        inputs: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+            kind: import("@sinclair/typebox").TLiteral<"value">;
+            value: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNumber, import("@sinclair/typebox").TBoolean]>;
+        }>, import("@sinclair/typebox").TObject<{
+            kind: import("@sinclair/typebox").TLiteral<"secret-reference">;
+            provider: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"environment">, import("@sinclair/typebox").TLiteral<"azure-key-vault">, import("@sinclair/typebox").TLiteral<"github-actions">]>;
+            reference: import("@sinclair/typebox").TString;
+            version: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>]>>;
+    }>];
+    readonly "logical-resource-manifest": readonly ["logical-resource-manifest", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+        resources: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            logicalId: import("@sinclair/typebox").TString;
+            type: import("@sinclair/typebox").TString;
+            implementationAddress: import("@sinclair/typebox").TString;
+            implementationKind: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"resource">, import("@sinclair/typebox").TLiteral<"module">, import("@sinclair/typebox").TLiteral<"data">, import("@sinclair/typebox").TLiteral<"existing">]>;
+            ownership: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"existing">, import("@sinclair/typebox").TLiteral<"managed">]>;
+            dependsOn: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            generatedDependencies: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            sourcePath: import("@sinclair/typebox").TString;
+        }>>;
+    }>];
+    readonly "iac-handoff": readonly ["iac-handoff", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+        rootPath: import("@sinclair/typebox").TString;
+        treeHash: import("@sinclair/typebox").TString;
+        intentHash: import("@sinclair/typebox").TString;
+        bindingHash: import("@sinclair/typebox").TString;
+        environmentInputsHash: import("@sinclair/typebox").TString;
+        logicalResourceManifestHash: import("@sinclair/typebox").TString;
+        requiredToolVersions: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>;
+        generatedAt: import("@sinclair/typebox").TString;
+    }>];
+    readonly "validation-evidence": readonly ["validation-evidence", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        createdAt: import("@sinclair/typebox").TString;
+        entries: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            kind: import("@sinclair/typebox").TString;
+            hash: import("@sinclair/typebox").TString;
+            bytes: import("@sinclair/typebox").TInteger;
+            required: import("@sinclair/typebox").TBoolean;
+            retention: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"immutable">, import("@sinclair/typebox").TLiteral<"project">, import("@sinclair/typebox").TLiteral<"optional">]>;
+        }>>;
+        clientQualification: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            kind: import("@sinclair/typebox").TLiteral<"client-qualification">;
+            hash: import("@sinclair/typebox").TString;
+            bytes: import("@sinclair/typebox").TInteger;
+            required: import("@sinclair/typebox").TLiteral<true>;
+            retention: import("@sinclair/typebox").TLiteral<"immutable">;
+        }>>;
+    }>];
+    readonly "deployment-preview": readonly ["preview", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        environment: import("@sinclair/typebox").TString;
+        track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+        operation: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"apply">, import("@sinclair/typebox").TLiteral<"destroy">]>;
+        target: import("@sinclair/typebox").TString;
+        commit: import("@sinclair/typebox").TString;
+        dependencyRevision: import("@sinclair/typebox").TString;
+        ownerEpoch: import("@sinclair/typebox").TInteger;
+        inputHash: import("@sinclair/typebox").TString;
+        iacHash: import("@sinclair/typebox").TString;
+        policyHash: import("@sinclair/typebox").TString;
+        artifactHash: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        stateLineage: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        stateSerial: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        changes: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            resourceId: import("@sinclair/typebox").TString;
+            action: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"create">, import("@sinclair/typebox").TLiteral<"update">, import("@sinclair/typebox").TLiteral<"delete">, import("@sinclair/typebox").TLiteral<"replace">, import("@sinclair/typebox").TLiteral<"no-op">, import("@sinclair/typebox").TLiteral<"unknown">]>;
+            material: import("@sinclair/typebox").TBoolean;
+            details: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>>;
+        blockers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        createdAt: import("@sinclair/typebox").TString;
+        expiresAt: import("@sinclair/typebox").TString;
+        previewHash: import("@sinclair/typebox").TString;
+    }>];
+    readonly "execution-plan-attestation": readonly ["execution-plan-attestation", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+        previewHash: import("@sinclair/typebox").TString;
+        inputHash: import("@sinclair/typebox").TString;
+        iacHash: import("@sinclair/typebox").TString;
+        policyHash: import("@sinclair/typebox").TString;
+        configHash: import("@sinclair/typebox").TString;
+        lockfileHash: import("@sinclair/typebox").TString;
+        recipient: import("@sinclair/typebox").TString;
+        planDigest: import("@sinclair/typebox").TString;
+        artifactRef: import("@sinclair/typebox").TString;
+        stateLineage: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        stateSerial: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        transport: import("@sinclair/typebox").TObject<{
+            encrypted: import("@sinclair/typebox").TLiteral<true>;
+            implementation: import("@sinclair/typebox").TLiteral<"local-reference">;
+            algorithm: import("@sinclair/typebox").TLiteral<"aes-256-gcm">;
+            recipient: import("@sinclair/typebox").TString;
+            mediaType: import("@sinclair/typebox").TString;
+            iv: import("@sinclair/typebox").TString;
+            authTag: import("@sinclair/typebox").TString;
+        }>;
+        createdAt: import("@sinclair/typebox").TString;
+        expiresAt: import("@sinclair/typebox").TString;
+    }>];
+    readonly "operation-record": readonly ["operation", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        operationId: import("@sinclair/typebox").TString;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        providerOperationId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        operation: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"apply">, import("@sinclair/typebox").TLiteral<"destroy">]>;
+        state: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"requested">, import("@sinclair/typebox").TLiteral<"authorized">, import("@sinclair/typebox").TLiteral<"started">, import("@sinclair/typebox").TLiteral<"observed">, import("@sinclair/typebox").TLiteral<"succeeded">, import("@sinclair/typebox").TLiteral<"failed">, import("@sinclair/typebox").TLiteral<"indeterminate">, import("@sinclair/typebox").TLiteral<"reconciled">, import("@sinclair/typebox").TLiteral<"compensated">]>;
+        previewHash: import("@sinclair/typebox").TString;
+        approvalHash: import("@sinclair/typebox").TString;
+        ownerEpoch: import("@sinclair/typebox").TInteger;
+        updatedAt: import("@sinclair/typebox").TString;
+        errorCode: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>];
+    readonly "resource-inventory": readonly ["inventory", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        deploymentHash: import("@sinclair/typebox").TString;
+        collectedAt: import("@sinclair/typebox").TString;
+        resources: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            logicalId: import("@sinclair/typebox").TString;
+            resourceId: import("@sinclair/typebox").TString;
+            type: import("@sinclair/typebox").TString;
+            location: import("@sinclair/typebox").TString;
+            properties: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>;
+        }>>;
+    }>];
+    readonly diagnosis: readonly ["diagnosis", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        diagnosedAt: import("@sinclair/typebox").TString;
+        status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"healthy">, import("@sinclair/typebox").TLiteral<"degraded">, import("@sinclair/typebox").TLiteral<"failed">, import("@sinclair/typebox").TLiteral<"unknown">]>;
+        observations: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        causes: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TString;
+            summary: import("@sinclair/typebox").TString;
+            confidence: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"high">]>;
+            evidenceRefs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            remediation: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>>;
+    }>];
+    readonly "quality-report": readonly ["quality-report", import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        evaluatedAt: import("@sinclair/typebox").TString;
+        scorecardHash: import("@sinclair/typebox").TString;
+        measurementsHash: import("@sinclair/typebox").TString;
+        status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">]>;
+        checks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TString;
+            scenario: import("@sinclair/typebox").TString;
+            status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"omitted">]>;
+            value: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNumber>;
+            samples: import("@sinclair/typebox").TInteger;
+            evidenceRefs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            detail: import("@sinclair/typebox").TString;
+        }>>;
+    }>];
+};
+export type ArtifactKind = keyof typeof ARTIFACTS;
+export declare const SUPPORTED_ARTIFACT_KINDS: ArtifactKind[];
+export declare class ApexService {
+    readonly root: string;
+    private readonly clock;
+    private readonly idSource;
+    private readonly projects;
+    private readonly objects;
+    private readonly cache;
+    private readonly validators;
+    private readonly providers;
+    private readonly architectureAvailabilityAdapter?;
+    private readonly executableChecker;
+    private readonly azureAuthStatus;
+    private readonly customizationFailureInjector?;
+    private readonly processRunner;
+    private readonly profileRoot;
+    private readonly improvementPolicy;
+    private improvementRuntime?;
+    private requirementsDocumentTemplate?;
+    constructor(root: string, options?: ServiceOptions);
+    improvementObserve(input: {
+        taskId?: string;
+        observedAt?: string;
+        source: ImprovementSource;
+        category: ImprovementCategory;
+        severity: ImprovementObservationV1["severity"];
+        statement: string;
+        evidenceRefs: string[];
+    }): Promise<{
+        observation: ImprovementObservationV1;
+        deduplicated: boolean;
+    }>;
+    improvementObservations(): Promise<ImprovementObservationV1[]>;
+    improvementScan(): Promise<unknown>;
+    improvementProposals(): Promise<ImprovementProposalV1[]>;
+    improvementDecide(input: {
+        proposalId: string;
+        actor: string;
+        decision: ImprovementDecisionV1["decision"];
+        rationale: string;
+        externalRef?: string;
+    }): Promise<ImprovementDecisionV1>;
+    improvementDeleteObservation(observationId: string): Promise<{
+        deleted: string;
+    }>;
+    improvementPrune(): Promise<{
+        observations: number;
+        decisions: number;
+    }>;
+    capabilityList(manifestPath?: string): Promise<unknown>;
+    capabilityStatus(id: string, manifestPath?: string): Promise<unknown>;
+    capabilityInstall(id: string, manifestPath?: string, options?: CapabilityPackInstallOptions): Promise<unknown>;
+    capabilityUpdate(id: string, manifestPath?: string, options?: CapabilityPackInstallOptions): Promise<unknown>;
+    capabilityRollback(id: string, manifestPath?: string): Promise<unknown>;
+    capabilityVerify(id: string, manifestPath?: string): Promise<unknown>;
+    capabilityUninstall(id: string, manifestPath?: string): Promise<unknown>;
+    init(input: {
+        projectId: ProjectId;
+        displayName?: string;
+        environment?: string;
+        targetScope?: string;
+        iacTool?: "bicep" | "terraform";
+        customizationsSource?: string;
+        clientId?: BundledClientProjection["id"];
+    }): Promise<{
+        projectId: ProjectId;
+        runId: RunId;
+    }>;
+    bootstrap(input: {
+        projectId: ProjectId;
+        displayName?: string;
+        environment?: string;
+        targetScope?: string;
+        iacTool?: "bicep" | "terraform";
+        clientId?: BundledClientProjection["id"];
+        createRepository?: boolean;
+    }): Promise<{
+        projectId: ProjectId;
+        runId: RunId;
+        runtimeInstalled: boolean;
+    }>;
+    profileStatus(): Promise<{
+        installed: boolean;
+        modified: boolean;
+        version?: string;
+    }>;
+    profileInstall(): Promise<{
+        installed: boolean;
+        version: string;
+    }>;
+    profileUpdate(): Promise<{
+        updated: boolean;
+        version: string;
+    }>;
+    profileUninstall(): Promise<{
+        removed: boolean;
+    }>;
+    createProject(input: {
+        projectId: ProjectId;
+        displayName?: string;
+        environment?: string;
+        targetScope?: string;
+        iacTool?: "bicep" | "terraform";
+    }): Promise<{
+        projectId: ProjectId;
+        runId: RunId;
+    }>;
+    update(customizationsSource?: string): Promise<{
+        updated: string[];
+    }>;
+    rollbackCustomizations(): Promise<{
+        restored: string[];
+        conflicts: string[];
+    }>;
+    uninstallCustomizations(): Promise<{
+        removed: string[];
+        conflicts: string[];
+    }>;
+    reinstallCustomizations(customizationsSource?: string): Promise<{
+        installed: string[];
+        clientId: BundledClientProjection["id"];
+    }>;
+    listProjects(): Promise<Array<{
+        projectId: string;
+        displayName: string;
+    }>>;
+    use(projectId: ProjectId, runId?: RunId): Promise<Selection>;
+    show(projectId?: ProjectId): Promise<unknown>;
+    search(term: string, limit?: number): Promise<Array<{
+        projectId: string;
+        displayName: string;
+        matches?: Array<{
+            runId: string;
+            type: string;
+            sequence: number;
+        }>;
+    }>>;
+    history(limit?: number): Promise<Array<{
+        sequence: number;
+        type: string;
+        timestamp: string;
+        artifactKinds: string[];
+        payload: JsonValue;
+    }>>;
+    status(): Promise<{
+        run: RunConfigV1;
+        head: string | null;
+        events: number;
+        task: string | null;
+        blockers: string[];
+    }>;
+    nextTask(): Promise<{
+        status: "needs_input";
+        request: InputRequestV1;
+    } | {
+        status: "task";
+        task: TaskEnvelopeV1;
+    }>;
+    recordInput(input: InputSubmissionV1): Promise<{
+        recorded: true;
+        requestId: string;
+    }>;
+    recordRequirementsInput(value: unknown): Promise<void>;
+    taskContext(taskId: string): Promise<{
+        task: TaskEnvelopeV1;
+        inputs: unknown[];
+        artifactHashes: Record<string, string>;
+        recordedInput: Record<string, InputValueV1> | null;
+        decisions: Record<string, InputValueV1>;
+        outputTemplates: Partial<Record<ArtifactKind, unknown>>;
+        outputRoot: string;
+        status: string;
+        blockers: string[];
+    }>;
+    stageArtifact(taskId: string, output: TaskOutput): Promise<StagedArtifact>;
+    stageFile(taskId: string, relativePath: string, content: string | Uint8Array, expectedSha?: string): Promise<StagedFile>;
+    generateIac(taskId: string, options?: GenerateIacOptions): Promise<{
+        files: StagedFile[];
+        outputHashes: Partial<Record<ArtifactKind, string>>;
+        treeHash: string;
+    }>;
+    validateTask(taskId: string, output?: TaskOutput | TaskOutput[]): Promise<{
+        valid: true;
+        taskId: string;
+        staged?: StagedArtifact | StagedArtifact[];
+    }>;
+    completeTask(taskId: string, output: TaskOutput): Promise<{
+        outputHash: string;
+        summary: string;
+    }>;
+    completeTaskOutputs(taskId: string, outputs: TaskOutput[]): Promise<{
+        outputHashes: Partial<Record<ArtifactKind, string>>;
+        summary: string;
+    }>;
+    private acceptTaskOutputs;
+    private renderRequirementsDocument;
+    private requirementsDocumentMarkdown;
+    private requirementsDocumentTemplateContent;
+    cancelTask(taskId: string): Promise<void>;
+    resolveReview(resolution: ReviewResolution): Promise<void>;
+    private assertReviewResolution;
+    decideGateNumber(gateNumber: number, decision: "approved" | "rejected", actor: string, options?: GateDecisionOptions): Promise<ApprovalEvidenceV1>;
+    preview(options: PreviewOptions): Promise<DeploymentPreviewV1>;
+    currentPreview(): Promise<string>;
+    currentApproval(): Promise<ApprovalEvidenceV1>;
+    deploy(expectedPreviewHash?: string): Promise<{
+        operation: unknown;
+        inventory: ResourceInventoryV1;
+    }>;
+    private completeNativeDeployment;
+    inventory(): Promise<ResourceInventoryV1>;
+    promote(environment: string, targetScope: string): Promise<RunConfigV1>;
+    doctor(fix?: boolean, yes?: boolean, live?: boolean): Promise<{
+        healthy: boolean;
+        checks: DoctorCheck[];
+        remedies: string[];
+        nextAction: string;
+    }>;
+    validate(): Promise<{
+        valid: boolean;
+        events: number;
+    }>;
+    cacheStatus(): Promise<{
+        entries: number;
+    }>;
+    clearCache(): Promise<{
+        cleared: number;
+    }>;
+    createWriterTransfer(input: {
+        repository: string;
+        branch: string;
+        commit: string;
+        workflowId: string;
+        sender: string;
+        recipient: string;
+        approvalEnvironment?: string;
+        currentHead: string;
+        ttlMs: number;
+    }): Promise<unknown>;
+    acceptWriterTransfer(claimHash: string, recipient: string, currentHead: string): Promise<unknown>;
+    currentWriter(): Promise<unknown>;
+    private currentRecipientIdentity;
+    private assertCurrentWriterAuthority;
+    acceptEvidence(input: {
+        kind: string;
+        contentType: string;
+        value?: JsonValue;
+        file?: string;
+        required: boolean;
+    }): Promise<unknown>;
+    setTelemetryConsent(consent: boolean): Promise<{
+        consent: boolean;
+    }>;
+    exportTelemetry(): Promise<JsonValue | null>;
+    deleteTelemetry(): Promise<{
+        deleted: true;
+    }>;
+    render(kind: "status" | "requirements" | "preview" | "approval" | "inventory"): Promise<string>;
+    diagnose(): Promise<unknown>;
+    reconcile(): Promise<unknown>;
+    setup(live?: boolean): Promise<unknown>;
+    private issueTask;
+    private openRunGate;
+    private mutateRun;
+    private inputRequest;
+    private architectureDecisionRequest;
+    private architectureDecisionState;
+    private architectureDecisionValues;
+    private issueArchitectureDecision;
+    private nextRequirementsIntakeRound;
+    private issueRequirementsInput;
+    private requirementsIntakeQuestions;
+    private append;
+    private journal;
+    private runPath;
+    private currentRun;
+    private run;
+    private assertRequirementsIntakeAdmitted;
+    private runRepository;
+    private selection;
+    private writeSelection;
+    private latestPayloadHash;
+    private artifactHash;
+    private acceptedArtifactHashes;
+    private inputRefs;
+    private recordedRequirementsInput;
+    private outputTemplate;
+    private requirementsTemplateFromIntake;
+    private renderInputValue;
+    private completedNodeIds;
+    private lockedWorkflowEngine;
+    private route;
+    private gateApproved;
+    private reviewBlockers;
+    private dependencyRevision;
+    private assertPreviewReady;
+    private openReviewFindings;
+    private validateOutput;
+    private validateBundle;
+    private validateTaskValidators;
+    private qualityValidatorContext;
+    private validateGateValidators;
+    private validatePreviewValidators;
+    private validateDeployValidators;
+    private deployValidatorIds;
+    private validateInventoryValidators;
+    private ensureTerminalCompletion;
+    private legacyPlanOutputs;
+    private readTask;
+    private refreshTaskHead;
+    private assertNoSymlinkPath;
+    private directoryBytes;
+    private looksLikeIntent;
+    private looksLikeBinding;
+    private looksLikeEnvironmentInputs;
+    private assertValid;
+    private invalidDateTimes;
+    private improvements;
+    private latestRun;
+    private customizationSelection;
+    private assertCleanInitialization;
+    private createRuntimeLock;
+    private capabilityPacks;
+    private runtimeLockChecks;
+    private ensureLocalGitBoundary;
+    private ensureWorkspaceRuntime;
+    private ensureWorkspaceGitRepository;
+    private profilePaths;
+    private ensureProfileRoot;
+    private readProfileReceipt;
+    private readProfileOptional;
+    private localGitBoundaryCheck;
+    private managedFileChecks;
+    private evidenceStore;
+    private pathExecutableExists;
+    private installCustomizations;
+    private installCapabilityAssets;
+    private recoverCustomizationTransaction;
+    private rollbackCustomizationTransaction;
+    private safeManagedRelativePath;
+    private readManagedBase;
+    private mergeText;
+    private assertSafeDestination;
+    private assertSafeExistingPath;
+    private pathExistsLstat;
+    private readOptional;
+    private walkFiles;
+    private exists;
+}
+export {};
+//# sourceMappingURL=service.d.ts.map