@apexops/contracts 0.10.0-next.5 → 0.11.0-next.1

package/dist/index.d.ts

@@ -1,13 +1,246 @@
 export * from "./artifacts.js";
+export * from "./archetype-source.js";
 export * from "./common.js";
 export * from "./deployment.js";
 export * from "./evidence.js";
+export * from "./governance-observation.js";
 export * from "./improvement.js";
+export * from "./native-validation.js";
 export * from "./onboarding.js";
 export * from "./pricing.js";
+export * from "./policy-validation.js";
 export * from "./runtime.js";
 export * from "./targets.js";
 export declare const contractSchemas: readonly [import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    setup: import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        config: import("@sinclair/typebox").TObject<{
+            schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+            repository: import("@sinclair/typebox").TString;
+            tenantId: import("@sinclair/typebox").TString;
+            subscriptionId: import("@sinclair/typebox").TString;
+            managementGroupId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            identity: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+                mode: import("@sinclair/typebox").TLiteral<"reuse">;
+                clientId: import("@sinclair/typebox").TString;
+                principalId: import("@sinclair/typebox").TString;
+            }>, import("@sinclair/typebox").TObject<{
+                mode: import("@sinclair/typebox").TLiteral<"create">;
+                displayName: import("@sinclair/typebox").TString;
+            }>]>;
+        }>;
+        evidenceHash: import("@sinclair/typebox").TString;
+        status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pending">, import("@sinclair/typebox").TLiteral<"blocked">]>;
+        federation: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            issuer: import("@sinclair/typebox").TLiteral<"https://token.actions.githubusercontent.com">;
+            audience: import("@sinclair/typebox").TLiteral<"api://AzureADTokenExchange">;
+            subject: import("@sinclair/typebox").TString;
+        }>>;
+        environment: import("@sinclair/typebox").TLiteral<"governance">;
+        proposedRole: import("@sinclair/typebox").TObject<{
+            id: import("@sinclair/typebox").TLiteral<"acdd72a7-3385-48ef-bd42-f606fba81ae7">;
+            name: import("@sinclair/typebox").TLiteral<"Reader">;
+            scope: import("@sinclair/typebox").TString;
+        }>;
+        variables: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>;
+        blockers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        pendingActions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        filesModified: import("@sinclair/typebox").TLiteral<false>;
+        executionAuthorized: import("@sinclair/typebox").TLiteral<false>;
+        deploymentAuthorized: import("@sinclair/typebox").TLiteral<false>;
+        planHash: import("@sinclair/typebox").TString;
+    }>;
+    contextHash: import("@sinclair/typebox").TString;
+    evidenceHash: import("@sinclair/typebox").TString;
+    planHash: import("@sinclair/typebox").TString;
+    status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"ready">, import("@sinclair/typebox").TLiteral<"blocked">]>;
+    applicationObjectId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    federationName: import("@sinclair/typebox").TString;
+    actions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"create-federation">, import("@sinclair/typebox").TLiteral<"assign-reader">]>>;
+    blockers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    executionAuthorized: import("@sinclair/typebox").TLiteral<false>;
+    deploymentAuthorized: import("@sinclair/typebox").TLiteral<false>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    owner: import("@sinclair/typebox").TString;
+    name: import("@sinclair/typebox").TString;
+    visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"private">, import("@sinclair/typebox").TLiteral<"internal">, import("@sinclair/typebox").TLiteral<"public">]>;
+    branch: import("@sinclair/typebox").TString;
+    remote: import("@sinclair/typebox").TLiteral<"origin">;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    config: import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        owner: import("@sinclair/typebox").TString;
+        name: import("@sinclair/typebox").TString;
+        visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"private">, import("@sinclair/typebox").TLiteral<"internal">, import("@sinclair/typebox").TLiteral<"public">]>;
+        branch: import("@sinclair/typebox").TString;
+        remote: import("@sinclair/typebox").TLiteral<"origin">;
+    }>;
+    evidenceHash: import("@sinclair/typebox").TString;
+    planHash: import("@sinclair/typebox").TString;
+    status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"ready">, import("@sinclair/typebox").TLiteral<"pending">, import("@sinclair/typebox").TLiteral<"blocked">]>;
+    repository: import("@sinclair/typebox").TObject<{
+        fullName: import("@sinclair/typebox").TString;
+        owner: import("@sinclair/typebox").TString;
+        ownerType: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"user">, import("@sinclair/typebox").TLiteral<"organization">, import("@sinclair/typebox").TLiteral<"unknown">]>;
+        visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"private">, import("@sinclair/typebox").TLiteral<"internal">, import("@sinclair/typebox").TLiteral<"public">]>;
+        exists: import("@sinclair/typebox").TBoolean;
+    }>;
+    actions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"create-repository">, import("@sinclair/typebox").TLiteral<"add-remote">, import("@sinclair/typebox").TLiteral<"push-branch">]>>;
+    push: import("@sinclair/typebox").TObject<{
+        branch: import("@sinclair/typebox").TString;
+        commit: import("@sinclair/typebox").TString;
+        commitCount: import("@sinclair/typebox").TInteger;
+        files: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        filesTruncated: import("@sinclair/typebox").TBoolean;
+        uncommittedChanges: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        forcePush: import("@sinclair/typebox").TLiteral<false>;
+    }>;
+    blockers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    pendingActions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    filesModified: import("@sinclair/typebox").TLiteral<false>;
+    executionAuthorized: import("@sinclair/typebox").TLiteral<false>;
+    deploymentAuthorized: import("@sinclair/typebox").TLiteral<false>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    repository: import("@sinclair/typebox").TString;
+    revision: import("@sinclair/typebox").TString;
+    selections: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        selectedPath: import("@sinclair/typebox").TString;
+        destination: import("@sinclair/typebox").TString;
+    }>>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    config: import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        repository: import("@sinclair/typebox").TString;
+        revision: import("@sinclair/typebox").TString;
+        selections: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            selectedPath: import("@sinclair/typebox").TString;
+            destination: import("@sinclair/typebox").TString;
+        }>>;
+    }>;
+    entries: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        destination: import("@sinclair/typebox").TString;
+        proposal: import("@sinclair/typebox").TObject<{
+            schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+            repositoryPath: import("@sinclair/typebox").TString;
+            revision: import("@sinclair/typebox").TString;
+            selectedPath: import("@sinclair/typebox").TString;
+            authorityImported: import("@sinclair/typebox").TLiteral<false>;
+            requiresConsumerReview: import("@sinclair/typebox").TLiteral<true>;
+            files: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+                path: import("@sinclair/typebox").TString;
+                hash: import("@sinclair/typebox").TString;
+                bytes: import("@sinclair/typebox").TInteger;
+            }>>;
+            excluded: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+                path: import("@sinclair/typebox").TString;
+                reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"source-authority">, import("@sinclair/typebox").TLiteral<"unsupported-material">]>;
+            }>>;
+            contentHash: import("@sinclair/typebox").TString;
+        }>;
+        state: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pending">, import("@sinclair/typebox").TLiteral<"already-copied">]>;
+    }>>;
+    planHash: import("@sinclair/typebox").TString;
+    authorityImported: import("@sinclair/typebox").TLiteral<false>;
+    requiresConsumerReview: import("@sinclair/typebox").TLiteral<true>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    repository: import("@sinclair/typebox").TString;
+    tenantId: import("@sinclair/typebox").TString;
+    subscriptionId: import("@sinclair/typebox").TString;
+    managementGroupId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    identity: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+        mode: import("@sinclair/typebox").TLiteral<"reuse">;
+        clientId: import("@sinclair/typebox").TString;
+        principalId: import("@sinclair/typebox").TString;
+    }>, import("@sinclair/typebox").TObject<{
+        mode: import("@sinclair/typebox").TLiteral<"create">;
+        displayName: import("@sinclair/typebox").TString;
+    }>]>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    config: import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        repository: import("@sinclair/typebox").TString;
+        tenantId: import("@sinclair/typebox").TString;
+        subscriptionId: import("@sinclair/typebox").TString;
+        managementGroupId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        identity: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+            mode: import("@sinclair/typebox").TLiteral<"reuse">;
+            clientId: import("@sinclair/typebox").TString;
+            principalId: import("@sinclair/typebox").TString;
+        }>, import("@sinclair/typebox").TObject<{
+            mode: import("@sinclair/typebox").TLiteral<"create">;
+            displayName: import("@sinclair/typebox").TString;
+        }>]>;
+    }>;
+    evidenceHash: import("@sinclair/typebox").TString;
+    status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pending">, import("@sinclair/typebox").TLiteral<"blocked">]>;
+    federation: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        issuer: import("@sinclair/typebox").TLiteral<"https://token.actions.githubusercontent.com">;
+        audience: import("@sinclair/typebox").TLiteral<"api://AzureADTokenExchange">;
+        subject: import("@sinclair/typebox").TString;
+    }>>;
+    environment: import("@sinclair/typebox").TLiteral<"governance">;
+    proposedRole: import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TLiteral<"acdd72a7-3385-48ef-bd42-f606fba81ae7">;
+        name: import("@sinclair/typebox").TLiteral<"Reader">;
+        scope: import("@sinclair/typebox").TString;
+    }>;
+    variables: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TString>;
+    blockers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    pendingActions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    filesModified: import("@sinclair/typebox").TLiteral<false>;
+    executionAuthorized: import("@sinclair/typebox").TLiteral<false>;
+    deploymentAuthorized: import("@sinclair/typebox").TLiteral<false>;
+    planHash: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    config: import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        displayName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        client: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TLiteral<"github-copilot-cli">>;
+        environment: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        targetScope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        iacTool: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>>;
+        riskOwner: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"partner">, import("@sinclair/typebox").TLiteral<"customer">]>>;
+        createRepository: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+    }>;
+    configHash: import("@sinclair/typebox").TString;
+    runtimeVersion: import("@sinclair/typebox").TString;
+    scope: import("@sinclair/typebox").TLiteral<"local-bootstrap-preflight-v1">;
+    status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"ready">, import("@sinclair/typebox").TLiteral<"pending">, import("@sinclair/typebox").TLiteral<"blocked">]>;
+    checks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"repository">, import("@sinclair/typebox").TLiteral<"workspace-runtime">, import("@sinclair/typebox").TLiteral<"apex-state">]>;
+        status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"ready">, import("@sinclair/typebox").TLiteral<"pending">, import("@sinclair/typebox").TLiteral<"blocked">]>;
+        reason: import("@sinclair/typebox").TString;
+    }>>;
+    unassessed: import("@sinclair/typebox").TTuple<[import("@sinclair/typebox").TLiteral<"machine-prerequisites">, import("@sinclair/typebox").TLiteral<"client-health">, import("@sinclair/typebox").TLiteral<"remote-coe">, import("@sinclair/typebox").TLiteral<"github-repository">, import("@sinclair/typebox").TLiteral<"governance-oidc">, import("@sinclair/typebox").TLiteral<"reviewed-baseline">]>;
+    filesModified: import("@sinclair/typebox").TLiteral<false>;
+    executionAuthorized: import("@sinclair/typebox").TLiteral<false>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    repositoryPath: import("@sinclair/typebox").TString;
+    revision: import("@sinclair/typebox").TString;
+    selectedPath: import("@sinclair/typebox").TString;
+    authorityImported: import("@sinclair/typebox").TLiteral<false>;
+    requiresConsumerReview: import("@sinclair/typebox").TLiteral<true>;
+    files: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        path: import("@sinclair/typebox").TString;
+        hash: import("@sinclair/typebox").TString;
+        bytes: import("@sinclair/typebox").TInteger;
+    }>>;
+    excluded: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        path: import("@sinclair/typebox").TString;
+        reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"source-authority">, import("@sinclair/typebox").TLiteral<"unsupported-material">]>;
+    }>>;
+    contentHash: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
     cliVersion: import("@sinclair/typebox").TString;
     customizationVersion: import("@sinclair/typebox").TString;
@@ -23,6 +256,7 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     displayName: import("@sinclair/typebox").TString;
     createdAt: import("@sinclair/typebox").TString;
     defaultIacTool: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+    riskOwner: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"partner">, import("@sinclair/typebox").TLiteral<"customer">]>;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
     projectId: import("@sinclair/typebox").TString;
@@ -69,6 +303,7 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     questions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
         id: import("@sinclair/typebox").TString;
         prompt: import("@sinclair/typebox").TString;
+        optional: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
         options: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
         multiSelect: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
         recommendation: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
@@ -91,6 +326,7 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     questions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
         id: import("@sinclair/typebox").TString;
         prompt: import("@sinclair/typebox").TString;
+        optional: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
         options: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
         multiSelect: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
         recommendation: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
@@ -104,6 +340,33 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
         taskId: import("@sinclair/typebox").TString;
         id: import("@sinclair/typebox").TString;
     }>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    requestId: import("@sinclair/typebox").TString;
+    expectedHead: import("@sinclair/typebox").TString;
+    ownerEpoch: import("@sinclair/typebox").TInteger;
+    questions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TString;
+        prompt: import("@sinclair/typebox").TString;
+        optional: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+        options: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        multiSelect: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
+        recommendation: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+            value: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>]>;
+            source: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"default">, import("@sinclair/typebox").TLiteral<"derived">, import("@sinclair/typebox").TLiteral<"prior-answer">]>;
+            rationale: import("@sinclair/typebox").TString;
+        }>>;
+        valueType: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"budget">, import("@sinclair/typebox").TLiteral<"recovery">, import("@sinclair/typebox").TLiteral<"environment-set">, import("@sinclair/typebox").TLiteral<"data-classification">, import("@sinclair/typebox").TLiteral<"compliance">]>>;
+    }>>;
+    governance: import("@sinclair/typebox").TObject<{
+        candidatePath: import("@sinclair/typebox").TString;
+        candidateHash: import("@sinclair/typebox").TString;
+        observedAt: import("@sinclair/typebox").TString;
+        requestedAt: import("@sinclair/typebox").TString;
+        expiresAt: import("@sinclair/typebox").TString;
+        targetScope: import("@sinclair/typebox").TString;
+        refreshRequired: import("@sinclair/typebox").TBoolean;
+    }>;
 }>]>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
     requestId: import("@sinclair/typebox").TString;
@@ -146,6 +409,18 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     payloadHash: import("@sinclair/typebox").TString;
     payload: import("@sinclair/typebox").TUnknown;
     hash: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    records: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        fingerprint: import("@sinclair/typebox").TString;
+        callHash: import("@sinclair/typebox").TString;
+        operation: import("@sinclair/typebox").TString;
+        stateBefore: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+        stateAfter: import("@sinclair/typebox").TString;
+        recordedAt: import("@sinclair/typebox").TString;
+        expiresAt: import("@sinclair/typebox").TString;
+        result: import("@sinclair/typebox").TString;
+    }>>;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
     projectId: import("@sinclair/typebox").TString;
@@ -167,6 +442,59 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     budgetAndOperations: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     regionalConstraints: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     architectureHandoff: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    baseRequirementsHash: import("@sinclair/typebox").TString;
+    updates: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TString;
+        changes: import("@sinclair/typebox").TObject<{
+            statement: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            priority: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"must">, import("@sinclair/typebox").TLiteral<"should">, import("@sinclair/typebox").TLiteral<"could">]>>;
+            status: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"confirmed">, import("@sinclair/typebox").TLiteral<"unknown">, import("@sinclair/typebox").TLiteral<"deferred">]>>;
+            source: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        }>;
+    }>>;
+    additions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TString;
+        statement: import("@sinclair/typebox").TString;
+        priority: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"must">, import("@sinclair/typebox").TLiteral<"should">, import("@sinclair/typebox").TLiteral<"could">]>;
+        status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"confirmed">, import("@sinclair/typebox").TLiteral<"unknown">, import("@sinclair/typebox").TLiteral<"deferred">]>;
+        source: import("@sinclair/typebox").TString;
+    }>>;
+    removals: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    fields: import("@sinclair/typebox").TObject<{
+        workload: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        assumptions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        unknowns: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        businessContext: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        successCriteria: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        nonFunctionalRequirements: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        securityAndCompliance: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        budgetAndOperations: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        regionalConstraints: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        architectureHandoff: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    projectId: import("@sinclair/typebox").TString;
+    runId: import("@sinclair/typebox").TString;
+    expectedHead: import("@sinclair/typebox").TString;
+    ownerEpoch: import("@sinclair/typebox").TInteger;
+    sourceRequirementsHash: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+    mode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"adopt">, import("@sinclair/typebox").TLiteral<"revise">]>;
+    candidateHash: import("@sinclair/typebox").TString;
+    reason: import("@sinclair/typebox").TString;
+    addedRequirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    removedRequirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    changedRequirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    retainedRequirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    changedFields: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    invalidatedNodes: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    invalidatedGates: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TInteger>;
+    requiresReassessment: import("@sinclair/typebox").TTuple<[import("@sinclair/typebox").TLiteral<"cost">, import("@sinclair/typebox").TLiteral<"policy">, import("@sinclair/typebox").TLiteral<"security">, import("@sinclair/typebox").TLiteral<"dependencies">, import("@sinclair/typebox").TLiteral<"code">, import("@sinclair/typebox").TLiteral<"documents">]>;
+    filesModified: import("@sinclair/typebox").TLiteral<false>;
+    deploymentAuthorized: import("@sinclair/typebox").TLiteral<false>;
+    proposalHash: import("@sinclair/typebox").TString;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
     projectId: import("@sinclair/typebox").TString;
@@ -190,6 +518,13 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
         implementation: import("@sinclair/typebox").TString;
         version: import("@sinclair/typebox").TString;
         parameters: import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TUnknown>;
+        scopeLogicalId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        physicalResources: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            resourceId: import("@sinclair/typebox").TString;
+            type: import("@sinclair/typebox").TString;
+            ownership: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"managed">, import("@sinclair/typebox").TLiteral<"existing">]>;
+            role: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"primary">, import("@sinclair/typebox").TLiteral<"ancillary">]>;
+        }>>>;
     }>>;
 }>, import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
@@ -570,12 +905,13 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     contextInjection: import("@sinclair/typebox").TLiteral<false>;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
-    projectId: import("@sinclair/typebox").TString;
+    projectId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     displayName: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
-    client: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"github-copilot-vscode">, import("@sinclair/typebox").TLiteral<"github-copilot-cli">]>>;
+    client: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TLiteral<"github-copilot-cli">>;
     environment: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     targetScope: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     iacTool: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>>;
+    riskOwner: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"partner">, import("@sinclair/typebox").TLiteral<"customer">]>>;
     createRepository: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TBoolean>;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
@@ -761,18 +1097,57 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     components: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
         id: import("@sinclair/typebox").TString;
         service: import("@sinclair/typebox").TString;
+        resourceTypes: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
         purpose: import("@sinclair/typebox").TString;
         requirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
         dependsOn: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
     }>>;
     decisions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    decisionRecords: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TString;
+        title: import("@sinclair/typebox").TString;
+        context: import("@sinclair/typebox").TString;
+        decision: import("@sinclair/typebox").TString;
+        requirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        alternatives: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            option: import("@sinclair/typebox").TString;
+            benefits: import("@sinclair/typebox").TString;
+            drawbacks: import("@sinclair/typebox").TString;
+            rejectionReason: import("@sinclair/typebox").TString;
+        }>>;
+        positiveConsequences: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        negativeConsequences: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        wafImpacts: import("@sinclair/typebox").TObject<{
+            security: import("@sinclair/typebox").TString;
+            reliability: import("@sinclair/typebox").TString;
+            "performance-efficiency": import("@sinclair/typebox").TString;
+            "cost-optimization": import("@sinclair/typebox").TString;
+            "operational-excellence": import("@sinclair/typebox").TString;
+        }>;
+        complianceConsiderations: import("@sinclair/typebox").TString;
+        implementationNotes: import("@sinclair/typebox").TString;
+    }>>>;
     risks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    wellArchitectedAssessment: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        framework: import("@sinclair/typebox").TLiteral<"azure-well-architected-framework">;
+        assessmentType: import("@sinclair/typebox").TLiteral<"qualitative">;
+        pillars: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            pillar: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"security">, import("@sinclair/typebox").TLiteral<"reliability">, import("@sinclair/typebox").TLiteral<"performance-efficiency">, import("@sinclair/typebox").TLiteral<"cost-optimization">, import("@sinclair/typebox").TLiteral<"operational-excellence">]>;
+            status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"aligned">, import("@sinclair/typebox").TLiteral<"concern">, import("@sinclair/typebox").TLiteral<"blocker">, import("@sinclair/typebox").TLiteral<"not-applicable">]>;
+            assessment: import("@sinclair/typebox").TString;
+            requirementIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            evidenceRefs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            recommendations: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            tradeoffs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        }>>;
+    }>>;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
     projectId: import("@sinclair/typebox").TString;
     runId: import("@sinclair/typebox").TString;
     currency: import("@sinclair/typebox").TString;
     pricingDate: import("@sinclair/typebox").TString;
+    pricingStatus: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"complete">, import("@sinclair/typebox").TLiteral<"partial">]>>;
     lineItems: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
         id: import("@sinclair/typebox").TString;
         service: import("@sinclair/typebox").TString;
@@ -794,8 +1169,46 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
             basis: import("@sinclair/typebox").TString;
         }>;
     }>>;
+    unpricedItems: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        id: import("@sinclair/typebox").TString;
+        service: import("@sinclair/typebox").TString;
+        sku: import("@sinclair/typebox").TString;
+        quantity: import("@sinclair/typebox").TNumber;
+        attemptedAt: import("@sinclair/typebox").TString;
+        reason: import("@sinclair/typebox").TString;
+    }>>>;
     totalMonthlyCost: import("@sinclair/typebox").TNumber;
     assumptions: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+}>, import("@sinclair/typebox").TObject<{
+    schema: import("@sinclair/typebox").TLiteral<"apex-review-capture-v1">;
+    nonce: import("@sinclair/typebox").TString;
+    sessionId: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TString, import("@sinclair/typebox").TNull]>;
+    toolName: import("@sinclair/typebox").TString;
+    agentType: import("@sinclair/typebox").TString;
+    prompt: import("@sinclair/typebox").TString;
+    requestSha256: import("@sinclair/typebox").TString;
+    response: import("@sinclair/typebox").TString;
+    responseSha256: import("@sinclair/typebox").TString;
+    capturedAt: import("@sinclair/typebox").TString;
+    signature: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    nonce: import("@sinclair/typebox").TString;
+    agentType: import("@sinclair/typebox").TLiteral<"rubber-duck">;
+    mode: import("@sinclair/typebox").TLiteral<"sync">;
+    gate: import("@sinclair/typebox").TInteger;
+    subjectKind: import("@sinclair/typebox").TString;
+    subjectHash: import("@sinclair/typebox").TString;
+    attempt: import("@sinclair/typebox").TInteger;
+    maxAttempts: import("@sinclair/typebox").TInteger;
+    prompt: import("@sinclair/typebox").TString;
+    promptSha256: import("@sinclair/typebox").TString;
+    files: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        label: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"instructions">, import("@sinclair/typebox").TLiteral<"subject">, import("@sinclair/typebox").TLiteral<"input">]>;
+        kind: import("@sinclair/typebox").TString;
+        path: import("@sinclair/typebox").TString;
+        sha256: import("@sinclair/typebox").TString;
+    }>>;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
     projectId: import("@sinclair/typebox").TString;
@@ -803,6 +1216,13 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     subjectKind: import("@sinclair/typebox").TString;
     subjectHash: import("@sinclair/typebox").TString;
     reviewedAt: import("@sinclair/typebox").TString;
+    capture: import("@sinclair/typebox").TObject<{
+        reviewer: import("@sinclair/typebox").TLiteral<"rubber-duck">;
+        nonce: import("@sinclair/typebox").TString;
+        captureHash: import("@sinclair/typebox").TString;
+        promptSha256: import("@sinclair/typebox").TString;
+        responseSha256: import("@sinclair/typebox").TString;
+    }>;
     findings: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
         id: import("@sinclair/typebox").TString;
         severity: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"critical">, import("@sinclair/typebox").TLiteral<"high">, import("@sinclair/typebox").TLiteral<"medium">, import("@sinclair/typebox").TLiteral<"low">, import("@sinclair/typebox").TLiteral<"info">]>;
@@ -812,11 +1232,18 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
         evidenceRefs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
         resolution: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     }>>;
+    criteria: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        criterionId: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"security">, import("@sinclair/typebox").TLiteral<"reliability">, import("@sinclair/typebox").TLiteral<"performance-efficiency">, import("@sinclair/typebox").TLiteral<"cost-optimization">, import("@sinclair/typebox").TLiteral<"operational-excellence">]>;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"finding">, import("@sinclair/typebox").TLiteral<"not-applicable">]>;
+        rationale: import("@sinclair/typebox").TString;
+        findingIds: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    }>>>;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
     projectId: import("@sinclair/typebox").TString;
     runId: import("@sinclair/typebox").TString;
     targetScope: import("@sinclair/typebox").TString;
+    source: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"collected">, import("@sinclair/typebox").TLiteral<"reference">]>;
     discoveredAt: import("@sinclair/typebox").TString;
     expiresAt: import("@sinclair/typebox").TString;
     summary: import("@sinclair/typebox").TObject<{
@@ -839,11 +1266,14 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     governanceHash: import("@sinclair/typebox").TString;
     mappings: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
         policyAssignmentId: import("@sinclair/typebox").TString;
+        policyDefinitionId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        policyDefinitionReferenceId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
         effect: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"deny">, import("@sinclair/typebox").TLiteral<"modify">, import("@sinclair/typebox").TLiteral<"append">, import("@sinclair/typebox").TLiteral<"audit">, import("@sinclair/typebox").TLiteral<"deployIfNotExists">, import("@sinclair/typebox").TLiteral<"disabled">]>;
         logicalResourceId: import("@sinclair/typebox").TString;
         propertyPath: import("@sinclair/typebox").TString;
         expectedValue: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnknown>;
-        disposition: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"satisfied">, import("@sinclair/typebox").TLiteral<"planned">, import("@sinclair/typebox").TLiteral<"exempt">, import("@sinclair/typebox").TLiteral<"blocked">]>;
+        disposition: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"satisfied">, import("@sinclair/typebox").TLiteral<"planned">, import("@sinclair/typebox").TLiteral<"exempt">, import("@sinclair/typebox").TLiteral<"blocked">, import("@sinclair/typebox").TLiteral<"not-applicable">]>;
+        reason: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     }>>;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
@@ -859,6 +1289,137 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
         reference: import("@sinclair/typebox").TString;
         version: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
     }>]>>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    projectId: import("@sinclair/typebox").TString;
+    runId: import("@sinclair/typebox").TString;
+    targetScope: import("@sinclair/typebox").TString;
+    governanceHash: import("@sinclair/typebox").TString;
+    snapshotDigest: import("@sinclair/typebox").TString;
+    contentHash: import("@sinclair/typebox").TString;
+    observedAt: import("@sinclair/typebox").TString;
+    expiresAt: import("@sinclair/typebox").TString;
+    rawSourceDigest: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    projectId: import("@sinclair/typebox").TString;
+    runId: import("@sinclair/typebox").TString;
+    track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+    sourceHash: import("@sinclair/typebox").TString;
+    policyMapHash: import("@sinclair/typebox").TString;
+    policyMapContentHash: import("@sinclair/typebox").TString;
+    logicalResourceManifestHash: import("@sinclair/typebox").TString;
+    inputHash: import("@sinclair/typebox").TString;
+    outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+    results: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        mappingIndex: import("@sinclair/typebox").TInteger;
+        mappingHash: import("@sinclair/typebox").TString;
+        policyAssignmentId: import("@sinclair/typebox").TString;
+        policyDefinitionId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        policyDefinitionReferenceId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        effect: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"deny">, import("@sinclair/typebox").TLiteral<"modify">, import("@sinclair/typebox").TLiteral<"append">, import("@sinclair/typebox").TLiteral<"audit">, import("@sinclair/typebox").TLiteral<"deployIfNotExists">, import("@sinclair/typebox").TLiteral<"disabled">]>;
+        disposition: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"satisfied">, import("@sinclair/typebox").TLiteral<"planned">, import("@sinclair/typebox").TLiteral<"exempt">, import("@sinclair/typebox").TLiteral<"blocked">, import("@sinclair/typebox").TLiteral<"not-applicable">]>;
+        logicalResourceId: import("@sinclair/typebox").TString;
+        propertyPath: import("@sinclair/typebox").TString;
+        expectedValueDigest: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        observedValueDigest: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"matched">, import("@sinclair/typebox").TLiteral<"value-mismatch">, import("@sinclair/typebox").TLiteral<"missing-property">, import("@sinclair/typebox").TLiteral<"blocked">, import("@sinclair/typebox").TLiteral<"missing-expected-value">, import("@sinclair/typebox").TLiteral<"unverified-exemption">, import("@sinclair/typebox").TLiteral<"unsupported-effect">, import("@sinclair/typebox").TLiteral<"unsupported-path">, import("@sinclair/typebox").TLiteral<"unsupported-expression">, import("@sinclair/typebox").TLiteral<"resource-not-bound">, import("@sinclair/typebox").TLiteral<"resource-not-found">, import("@sinclair/typebox").TLiteral<"ambiguous-resource">, import("@sinclair/typebox").TLiteral<"unsupported-resource">, import("@sinclair/typebox").TLiteral<"invalid-source">, import("@sinclair/typebox").TLiteral<"not-applicable">, import("@sinclair/typebox").TLiteral<"platform-remediated">]>;
+    }>>;
+    receiptHash: import("@sinclair/typebox").TString;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+    projectId: import("@sinclair/typebox").TString;
+    runId: import("@sinclair/typebox").TString;
+    track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+    sourceHash: import("@sinclair/typebox").TString;
+    treeHash: import("@sinclair/typebox").TString;
+    policyHash: import("@sinclair/typebox").TString;
+    inputHash: import("@sinclair/typebox").TString;
+    policyValidation: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
+        projectId: import("@sinclair/typebox").TString;
+        runId: import("@sinclair/typebox").TString;
+        track: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep">, import("@sinclair/typebox").TLiteral<"terraform">]>;
+        sourceHash: import("@sinclair/typebox").TString;
+        policyMapHash: import("@sinclair/typebox").TString;
+        policyMapContentHash: import("@sinclair/typebox").TString;
+        logicalResourceManifestHash: import("@sinclair/typebox").TString;
+        inputHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        results: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            mappingIndex: import("@sinclair/typebox").TInteger;
+            mappingHash: import("@sinclair/typebox").TString;
+            policyAssignmentId: import("@sinclair/typebox").TString;
+            policyDefinitionId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            policyDefinitionReferenceId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            effect: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"deny">, import("@sinclair/typebox").TLiteral<"modify">, import("@sinclair/typebox").TLiteral<"append">, import("@sinclair/typebox").TLiteral<"audit">, import("@sinclair/typebox").TLiteral<"deployIfNotExists">, import("@sinclair/typebox").TLiteral<"disabled">]>;
+            disposition: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"satisfied">, import("@sinclair/typebox").TLiteral<"planned">, import("@sinclair/typebox").TLiteral<"exempt">, import("@sinclair/typebox").TLiteral<"blocked">, import("@sinclair/typebox").TLiteral<"not-applicable">]>;
+            logicalResourceId: import("@sinclair/typebox").TString;
+            propertyPath: import("@sinclair/typebox").TString;
+            expectedValueDigest: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            observedValueDigest: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+            reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"matched">, import("@sinclair/typebox").TLiteral<"value-mismatch">, import("@sinclair/typebox").TLiteral<"missing-property">, import("@sinclair/typebox").TLiteral<"blocked">, import("@sinclair/typebox").TLiteral<"missing-expected-value">, import("@sinclair/typebox").TLiteral<"unverified-exemption">, import("@sinclair/typebox").TLiteral<"unsupported-effect">, import("@sinclair/typebox").TLiteral<"unsupported-path">, import("@sinclair/typebox").TLiteral<"unsupported-expression">, import("@sinclair/typebox").TLiteral<"resource-not-bound">, import("@sinclair/typebox").TLiteral<"resource-not-found">, import("@sinclair/typebox").TLiteral<"ambiguous-resource">, import("@sinclair/typebox").TLiteral<"unsupported-resource">, import("@sinclair/typebox").TLiteral<"invalid-source">, import("@sinclair/typebox").TLiteral<"not-applicable">, import("@sinclair/typebox").TLiteral<"platform-remediated">]>;
+        }>>;
+        receiptHash: import("@sinclair/typebox").TString;
+    }>>;
+    securityBaseline: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        coverage: import("@sinclair/typebox").TLiteral<"bicep-storage-only-baseline-v1">;
+        sourceHash: import("@sinclair/typebox").TString;
+        inputHash: import("@sinclair/typebox").TString;
+        manifestHash: import("@sinclair/typebox").TString;
+        bindingHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        reason: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<string>[]>;
+    }>>;
+    resourceParity: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        coverage: import("@sinclair/typebox").TLiteral<"bicep-symbolic-resource-parity-v1">;
+        sourceHash: import("@sinclair/typebox").TString;
+        manifestHash: import("@sinclair/typebox").TString;
+        bindingHash: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        inputHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"matched">, import("@sinclair/typebox").TLiteral<"coverage-mismatch">, import("@sinclair/typebox").TLiteral<"type-mismatch">, import("@sinclair/typebox").TLiteral<"dependency-mismatch">, import("@sinclair/typebox").TLiteral<"unsupported-resource">, import("@sinclair/typebox").TLiteral<"invalid-source">]>;
+    }>>;
+    policyApplicability: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        status: import("@sinclair/typebox").TLiteral<"no-actionable-mappings">;
+        policyMapContentHash: import("@sinclair/typebox").TString;
+    }>>;
+    storageSecurity: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
+        coverage: import("@sinclair/typebox").TLiteral<"storage-account-property-hardening-v1">;
+        fullBaselineEvaluated: import("@sinclair/typebox").TLiteral<false>;
+        sourceHash: import("@sinclair/typebox").TString;
+        inputHash: import("@sinclair/typebox").TString;
+        bindingHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        results: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            propertyPath: import("@sinclair/typebox").TString;
+            expectedValueDigest: import("@sinclair/typebox").TString;
+            observedValueDigest: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+            outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+            reason: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"matched">, import("@sinclair/typebox").TLiteral<"value-mismatch">, import("@sinclair/typebox").TLiteral<"missing-property">, import("@sinclair/typebox").TLiteral<"blocked">, import("@sinclair/typebox").TLiteral<"missing-expected-value">, import("@sinclair/typebox").TLiteral<"unverified-exemption">, import("@sinclair/typebox").TLiteral<"unsupported-effect">, import("@sinclair/typebox").TLiteral<"unsupported-path">, import("@sinclair/typebox").TLiteral<"unsupported-expression">, import("@sinclair/typebox").TLiteral<"resource-not-bound">, import("@sinclair/typebox").TLiteral<"resource-not-found">, import("@sinclair/typebox").TLiteral<"ambiguous-resource">, import("@sinclair/typebox").TLiteral<"unsupported-resource">, import("@sinclair/typebox").TLiteral<"invalid-source">, import("@sinclair/typebox").TLiteral<"not-applicable">, import("@sinclair/typebox").TLiteral<"platform-remediated">]>;
+        }>>;
+    }>>>;
+    storageDiagnostics: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
+        coverage: import("@sinclair/typebox").TLiteral<"bicep-storage-service-diagnostics-v1">;
+        fullBaselineEvaluated: import("@sinclair/typebox").TLiteral<false>;
+        sourceHash: import("@sinclair/typebox").TString;
+        inputHash: import("@sinclair/typebox").TString;
+        bindingHash: import("@sinclair/typebox").TString;
+        outcome: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"pass">, import("@sinclair/typebox").TLiteral<"fail">, import("@sinclair/typebox").TLiteral<"unsupported">]>;
+        reason: import("@sinclair/typebox").TUnion<import("@sinclair/typebox").TLiteral<string>[]>;
+    }>>>;
+    outcome: import("@sinclair/typebox").TLiteral<"pass">;
+    commands: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        validatorId: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"bicep:format">, import("@sinclair/typebox").TLiteral<"bicep:build">, import("@sinclair/typebox").TLiteral<"bicep:lint">, import("@sinclair/typebox").TLiteral<"terraform:init-backend-false">, import("@sinclair/typebox").TLiteral<"terraform:format">, import("@sinclair/typebox").TLiteral<"terraform:validate">]>;
+        commandHash: import("@sinclair/typebox").TString;
+        exitCode: import("@sinclair/typebox").TLiteral<0>;
+        signal: import("@sinclair/typebox").TNull;
+        timedOut: import("@sinclair/typebox").TLiteral<false>;
+        outputTruncated: import("@sinclair/typebox").TLiteral<false>;
+    }>>;
+    receiptHash: import("@sinclair/typebox").TString;
 }>, import("@sinclair/typebox").TObject<{
     schemaVersion: import("@sinclair/typebox").TLiteral<"1.0.0">;
     projectId: import("@sinclair/typebox").TString;
@@ -868,6 +1429,7 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
         logicalId: import("@sinclair/typebox").TString;
         type: import("@sinclair/typebox").TString;
         implementationAddress: import("@sinclair/typebox").TString;
+        executionAddress: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
         implementationKind: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"resource">, import("@sinclair/typebox").TLiteral<"module">, import("@sinclair/typebox").TLiteral<"data">, import("@sinclair/typebox").TLiteral<"existing">]>;
         ownership: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"existing">, import("@sinclair/typebox").TLiteral<"managed">]>;
         dependsOn: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
@@ -960,6 +1522,57 @@ export declare const contractSchemas: readonly [import("@sinclair/typebox").TObj
     diagnosedAt: import("@sinclair/typebox").TString;
     status: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"healthy">, import("@sinclair/typebox").TLiteral<"degraded">, import("@sinclair/typebox").TLiteral<"failed">, import("@sinclair/typebox").TLiteral<"unknown">]>;
     observations: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    operationalHandoff: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        owner: import("@sinclair/typebox").TString;
+        escalation: import("@sinclair/typebox").TString;
+        maintenanceWindow: import("@sinclair/typebox").TString;
+        accessPrerequisites: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        configurationReferences: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            name: import("@sinclair/typebox").TString;
+            source: import("@sinclair/typebox").TString;
+        }>>;
+        healthChecks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            resourceId: import("@sinclair/typebox").TString;
+            check: import("@sinclair/typebox").TString;
+            expectedOutcome: import("@sinclair/typebox").TString;
+            evidenceRefs: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        }>>;
+        monitoring: import("@sinclair/typebox").TString;
+        incidentResponse: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+            applicability: import("@sinclair/typebox").TLiteral<"applicable">;
+            owner: import("@sinclair/typebox").TString;
+            prerequisites: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            steps: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            verification: import("@sinclair/typebox").TString;
+            executionStatus: import("@sinclair/typebox").TLiteral<"untested">;
+        }>, import("@sinclair/typebox").TObject<{
+            applicability: import("@sinclair/typebox").TLiteral<"not-applicable">;
+            rationale: import("@sinclair/typebox").TString;
+        }>]>;
+        rollback: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+            applicability: import("@sinclair/typebox").TLiteral<"applicable">;
+            owner: import("@sinclair/typebox").TString;
+            prerequisites: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            steps: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            verification: import("@sinclair/typebox").TString;
+            executionStatus: import("@sinclair/typebox").TLiteral<"untested">;
+        }>, import("@sinclair/typebox").TObject<{
+            applicability: import("@sinclair/typebox").TLiteral<"not-applicable">;
+            rationale: import("@sinclair/typebox").TString;
+        }>]>;
+        recovery: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+            applicability: import("@sinclair/typebox").TLiteral<"applicable">;
+            owner: import("@sinclair/typebox").TString;
+            prerequisites: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            steps: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+            verification: import("@sinclair/typebox").TString;
+            executionStatus: import("@sinclair/typebox").TLiteral<"untested">;
+        }>, import("@sinclair/typebox").TObject<{
+            applicability: import("@sinclair/typebox").TLiteral<"not-applicable">;
+            rationale: import("@sinclair/typebox").TString;
+        }>]>;
+        limitations: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    }>>;
     causes: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
         id: import("@sinclair/typebox").TString;
         summary: import("@sinclair/typebox").TString;