@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/local-dev/control-contract.js

@@ -0,0 +1,180 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FleetControlUnauthorizedError = exports.FIXED_UNAUTHORIZED_CONTROL_RESPONSE = exports.FLEET_MUTATION_COMMANDS = exports.FLEET_CONTROL_ACTIONS = exports.FLEET_CONTROL_CAPABILITY_BYTES = exports.FLEET_CONTROL_REQUEST_MAX_BYTES = exports.FLEET_CONTROL_PROTOCOL_VERSION = void 0;
+exports.negotiateFleetControlProtocol = negotiateFleetControlProtocol;
+exports.validateFleetControlRequest = validateFleetControlRequest;
+exports.parseFleetControlLine = parseFleetControlLine;
+exports.createFleetControlCapability = createFleetControlCapability;
+exports.digestFleetControlCapability = digestFleetControlCapability;
+exports.authorizeFleetControlCapability = authorizeFleetControlCapability;
+const node_crypto_1 = require("node:crypto");
+const contract_validation_js_1 = require("./contract-validation.js");
+const errors_js_1 = require("./errors.js");
+const fleet_lock_js_1 = require("./fleet-lock.js");
+exports.FLEET_CONTROL_PROTOCOL_VERSION = 1;
+exports.FLEET_CONTROL_REQUEST_MAX_BYTES = 64 * 1024;
+exports.FLEET_CONTROL_CAPABILITY_BYTES = 32;
+exports.FLEET_CONTROL_ACTIONS = [
+    'ping',
+    'status',
+    'submit',
+    'operation-status',
+    'shutdown',
+];
+exports.FLEET_MUTATION_COMMANDS = ['up', 'down', 'restart'];
+exports.FIXED_UNAUTHORIZED_CONTROL_RESPONSE = Object.freeze({
+    error: 'unauthorized',
+    ok: false,
+    protocolVersion: exports.FLEET_CONTROL_PROTOCOL_VERSION,
+});
+class FleetControlUnauthorizedError extends Error {
+    response = exports.FIXED_UNAUTHORIZED_CONTROL_RESPONSE;
+    constructor() {
+        super('Fleet control capability was rejected.');
+        this.name = 'FleetControlUnauthorizedError';
+    }
+}
+exports.FleetControlUnauthorizedError = FleetControlUnauthorizedError;
+function requireProtocolRange(value) {
+    (0, contract_validation_js_1.assertRecord)(value, 'Fleet control protocol');
+    (0, contract_validation_js_1.assertExactProperties)(value, ['maximum', 'minimum'], [], 'Fleet control protocol');
+    const minimum = (0, contract_validation_js_1.requireInteger)(value.minimum, 'Fleet control protocol minimum', 1, 1024);
+    const maximum = (0, contract_validation_js_1.requireInteger)(value.maximum, 'Fleet control protocol maximum', 1, 1024);
+    if (minimum > maximum) {
+        throw new errors_js_1.LocalDevContractError('protocol-mismatch', 'Fleet control protocol minimum exceeds maximum.');
+    }
+    return { maximum, minimum };
+}
+function negotiateFleetControlProtocol(range) {
+    const validated = requireProtocolRange(range);
+    if (exports.FLEET_CONTROL_PROTOCOL_VERSION < validated.minimum ||
+        exports.FLEET_CONTROL_PROTOCOL_VERSION > validated.maximum) {
+        throw new errors_js_1.LocalDevContractError('protocol-mismatch', `Fleet control protocol range ${validated.minimum}-${validated.maximum} is incompatible with ${exports.FLEET_CONTROL_PROTOCOL_VERSION}.`);
+    }
+    return exports.FLEET_CONTROL_PROTOCOL_VERSION;
+}
+function requireCapability(value) {
+    return (0, contract_validation_js_1.requireBoundedString)(value, 'Fleet control capability', {
+        maximumLength: 128,
+        pattern: /^[A-Za-z0-9_-]{43}$/,
+    });
+}
+function requireControlToken(value, label) {
+    return (0, contract_validation_js_1.requireBoundedString)(value, label, {
+        maximumLength: 128,
+        pattern: contract_validation_js_1.LOCAL_DEV_TOKEN_PATTERN,
+    });
+}
+function validateSelector(value) {
+    (0, contract_validation_js_1.assertRecord)(value, 'Fleet control selector');
+    (0, contract_validation_js_1.assertExactProperties)(value, ['all', 'slices'], [], 'Fleet control selector');
+    if (typeof value.all !== 'boolean' || !Array.isArray(value.slices)) {
+        throw new errors_js_1.LocalDevContractError('invalid-input', 'Fleet control selector is invalid.');
+    }
+    const slices = value.slices.map((slice) => (0, fleet_lock_js_1.validateFleetIdentitySlug)(slice, 'Fleet control Slice'));
+    if ((value.all && slices.length > 0) ||
+        (!value.all && slices.length === 0) ||
+        new Set(slices).size !== slices.length) {
+        throw new errors_js_1.LocalDevContractError('invalid-input', 'Fleet control selector must choose unique Slices or explicit all, never both or neither.');
+    }
+    return { all: value.all, slices };
+}
+function validateBase(value) {
+    if (!exports.FLEET_CONTROL_ACTIONS.includes(value.action)) {
+        throw new errors_js_1.LocalDevContractError('invalid-input', 'Fleet control action is unsupported.');
+    }
+    const protocol = requireProtocolRange(value.protocol);
+    negotiateFleetControlProtocol(protocol);
+    return {
+        action: value.action,
+        capability: requireCapability(value.capability),
+        protocol,
+        requestId: requireControlToken(value.requestId, 'Fleet control requestId'),
+    };
+}
+function validateFleetControlRequest(value) {
+    (0, contract_validation_js_1.assertRecord)(value, 'Fleet control request');
+    const action = value.action;
+    const hasPayload = action === 'submit' ||
+        action === 'operation-status' ||
+        action === 'shutdown';
+    (0, contract_validation_js_1.assertExactProperties)(value, ['action', 'capability', 'protocol', 'requestId'], hasPayload ? ['payload'] : [], 'Fleet control request');
+    const base = validateBase(value);
+    if (base.action === 'ping' || base.action === 'status') {
+        return base;
+    }
+    (0, contract_validation_js_1.assertRecord)(value.payload, `Fleet control ${base.action} payload`);
+    if (base.action === 'submit') {
+        (0, contract_validation_js_1.assertExactProperties)(value.payload, ['command', 'idempotencyKey', 'selector'], [], 'Fleet control submit payload');
+        if (!exports.FLEET_MUTATION_COMMANDS.includes(value.payload.command)) {
+            throw new errors_js_1.LocalDevContractError('invalid-input', 'Fleet control mutation command is unsupported.');
+        }
+        return {
+            ...base,
+            action: 'submit',
+            payload: {
+                command: value.payload.command,
+                idempotencyKey: requireControlToken(value.payload.idempotencyKey, 'Fleet control idempotencyKey'),
+                selector: validateSelector(value.payload.selector),
+            },
+        };
+    }
+    if (base.action === 'operation-status') {
+        (0, contract_validation_js_1.assertExactProperties)(value.payload, ['operationId'], [], 'Fleet control operation-status payload');
+        return {
+            ...base,
+            action: 'operation-status',
+            payload: {
+                operationId: requireControlToken(value.payload.operationId, 'Fleet control operationId'),
+            },
+        };
+    }
+    (0, contract_validation_js_1.assertExactProperties)(value.payload, ['idempotencyKey'], [], 'Fleet control shutdown payload');
+    return {
+        ...base,
+        action: 'shutdown',
+        payload: {
+            idempotencyKey: requireControlToken(value.payload.idempotencyKey, 'Fleet control idempotencyKey'),
+        },
+    };
+}
+function parseFleetControlLine(line) {
+    const bytes = Buffer.byteLength(line);
+    if (bytes === 0 || bytes > exports.FLEET_CONTROL_REQUEST_MAX_BYTES) {
+        throw new errors_js_1.LocalDevContractError('invalid-input', `Fleet control request must contain 1-${exports.FLEET_CONTROL_REQUEST_MAX_BYTES} bytes.`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(line.toString());
+    }
+    catch {
+        throw new errors_js_1.LocalDevContractError('invalid-input', 'Fleet control request must be one valid JSON object.');
+    }
+    return validateFleetControlRequest(parsed);
+}
+function createFleetControlCapability() {
+    return (0, node_crypto_1.randomBytes)(exports.FLEET_CONTROL_CAPABILITY_BYTES).toString('base64url');
+}
+function digestFleetControlCapability(capability) {
+    return (0, node_crypto_1.createHash)('sha256')
+        .update(requireCapability(capability), 'utf8')
+        .digest('hex');
+}
+function authorizeFleetControlCapability(suppliedCapability, expectedDigest) {
+    let suppliedDigest;
+    let expected;
+    try {
+        suppliedDigest = Buffer.from(digestFleetControlCapability(suppliedCapability), 'hex');
+        expected = Buffer.from((0, contract_validation_js_1.requireBoundedString)(expectedDigest, 'Fleet control capability digest', {
+            pattern: /^[a-f0-9]{64}$/,
+        }), 'hex');
+    }
+    catch {
+        throw new FleetControlUnauthorizedError();
+    }
+    if (suppliedDigest.length !== expected.length ||
+        !(0, node_crypto_1.timingSafeEqual)(suppliedDigest, expected)) {
+        throw new FleetControlUnauthorizedError();
+    }
+}
+//# sourceMappingURL=control-contract.js.map

package/src/local-dev/control-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-contract.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/control-contract.ts"],"names":[],"mappings":";;;AAyHA,sEAcC;AA6DD,kEAoFC;AAED,sDAoBC;AAED,oEAEC;AAED,oEAIC;AAED,0EA0BC;AApVD,6CAAuE;AAEvE,qEAMkC;AAClC,2CAAoD;AACpD,mDAA4D;AAE/C,QAAA,8BAA8B,GAAG,CAAU,CAAC;AAC5C,QAAA,+BAA+B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5C,QAAA,8BAA8B,GAAG,EAAE,CAAC;AAEpC,QAAA,qBAAqB,GAAG;IACnC,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,kBAAkB;IAClB,UAAU;CACF,CAAC;AACE,QAAA,uBAAuB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;AAsD7D,QAAA,mCAAmC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/D,KAAK,EAAE,cAAc;IACrB,EAAE,EAAE,KAAK;IACT,eAAe,EAAE,sCAA8B;CAChD,CAAC,CAAC;AAEH,MAAa,6BAA8B,SAAQ,KAAK;IAC7C,QAAQ,GAAG,2CAAmC,CAAC;IAExD;QACE,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,+BAA+B,CAAC;IAC9C,CAAC;CACF;AAPD,sEAOC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAA,qCAAY,EAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAC9C,IAAA,8CAAqB,EACnB,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,EACtB,EAAE,EACF,wBAAwB,CACzB,CAAC;IACF,MAAM,OAAO,GAAG,IAAA,uCAAc,EAC5B,KAAK,CAAC,OAAO,EACb,gCAAgC,EAChC,CAAC,EACD,IAAI,CACL,CAAC;IACF,MAAM,OAAO,GAAG,IAAA,uCAAc,EAC5B,KAAK,CAAC,OAAO,EACb,gCAAgC,EAChC,CAAC,EACD,IAAI,CACL,CAAC;IACF,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,iCAAqB,CAC7B,mBAAmB,EACnB,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,SAAgB,6BAA6B,CAC3C,KAAgC;IAEhC,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,IACE,sCAA8B,GAAG,SAAS,CAAC,OAAO;QAClD,sCAA8B,GAAG,SAAS,CAAC,OAAO,EAClD,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,mBAAmB,EACnB,gCAAgC,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,OAAO,yBAAyB,sCAA8B,GAAG,CACjI,CAAC;IACJ,CAAC;IACD,OAAO,sCAA8B,CAAC;AACxC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,IAAA,6CAAoB,EAAC,KAAK,EAAE,0BAA0B,EAAE;QAC7D,aAAa,EAAE,GAAG;QAClB,OAAO,EAAE,qBAAqB;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAa;IACxD,OAAO,IAAA,6CAAoB,EAAC,KAAK,EAAE,KAAK,EAAE;QACxC,aAAa,EAAE,GAAG;QAClB,OAAO,EAAE,gDAAuB;KACjC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IAItC,IAAA,qCAAY,EAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;IAC9C,IAAA,8CAAqB,EAAC,KAAK,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAC9E,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,oCAAoC,CACrC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACxC,IAAA,yCAAyB,EAAC,KAAK,EAAE,qBAAqB,CAAC,CACxD,CAAC;IACF,IACE,CAAC,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAChC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QACnC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EACtC,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,IAAI,CAAC,6BAAqB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAA4B,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,6BAA6B,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAA4B;QAC1C,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC;QAC/C,QAAQ;QACR,SAAS,EAAE,mBAAmB,CAAC,KAAK,CAAC,SAAS,EAAE,yBAAyB,CAAC;KAC3E,CAAC;AACJ,CAAC;AAED,SAAgB,2BAA2B,CACzC,KAAc;IAEd,IAAA,qCAAY,EAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,UAAU,GACd,MAAM,KAAK,QAAQ;QACnB,MAAM,KAAK,kBAAkB;QAC7B,MAAM,KAAK,UAAU,CAAC;IACxB,IAAA,8CAAqB,EACnB,KAAK,EACL,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,CAAC,EACjD,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,EAC7B,uBAAuB,CACxB,CAAC;IACF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvD,OAAO,IAA2D,CAAC;IACrE,CAAC;IACD,IAAA,qCAAY,EAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAA,8CAAqB,EACnB,KAAK,CAAC,OAAO,EACb,CAAC,SAAS,EAAE,gBAAgB,EAAE,UAAU,CAAC,EACzC,EAAE,EACF,8BAA8B,CAC/B,CAAC;QACF,IACE,CAAC,+BAAuB,CAAC,QAAQ,CAC/B,KAAK,CAAC,OAAO,CAAC,OAA+B,CAC9C,EACD,CAAC;YACD,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE;gBACP,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAA+B;gBACtD,cAAc,EAAE,mBAAmB,CACjC,KAAK,CAAC,OAAO,CAAC,cAAc,EAC5B,8BAA8B,CAC/B;gBACD,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;aACnD;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACvC,IAAA,8CAAqB,EACnB,KAAK,CAAC,OAAO,EACb,CAAC,aAAa,CAAC,EACf,EAAE,EACF,wCAAwC,CACzC,CAAC;QACF,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE;gBACP,WAAW,EAAE,mBAAmB,CAC9B,KAAK,CAAC,OAAO,CAAC,WAAW,EACzB,2BAA2B,CAC5B;aACF;SACF,CAAC;IACJ,CAAC;IACD,IAAA,8CAAqB,EACnB,KAAK,CAAC,OAAO,EACb,CAAC,gBAAgB,CAAC,EAClB,EAAE,EACF,gCAAgC,CACjC,CAAC;IACF,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE;YACP,cAAc,EAAE,mBAAmB,CACjC,KAAK,CAAC,OAAO,CAAC,cAAc,EAC5B,8BAA8B,CAC/B;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,IAAqB;IAErB,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG,uCAA+B,EAAE,CAAC;QAC3D,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,wCAAwC,uCAA+B,SAAS,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iCAAqB,CAC7B,eAAe,EACf,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,2BAA2B,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,SAAgB,4BAA4B;IAC1C,OAAO,IAAA,yBAAW,EAAC,sCAA8B,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,SAAgB,4BAA4B,CAAC,UAAmB;IAC9D,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;SAC7C,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAgB,+BAA+B,CAC7C,kBAA2B,EAC3B,cAAsB;IAEtB,IAAI,cAAsB,CAAC;IAC3B,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,cAAc,GAAG,MAAM,CAAC,IAAI,CAC1B,4BAA4B,CAAC,kBAAkB,CAAC,EAChD,KAAK,CACN,CAAC;QACF,QAAQ,GAAG,MAAM,CAAC,IAAI,CACpB,IAAA,6CAAoB,EAAC,cAAc,EAAE,iCAAiC,EAAE;YACtE,OAAO,EAAE,gBAAgB;SAC1B,CAAC,EACF,KAAK,CACN,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,6BAA6B,EAAE,CAAC;IAC5C,CAAC;IACD,IACE,cAAc,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACzC,CAAC,IAAA,6BAAe,EAAC,cAAc,EAAE,QAAQ,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,6BAA6B,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC"}

package/src/local-dev/dev-command-core.d.ts

@@ -0,0 +1,60 @@
+import { inspectDevelopmentEnvironment } from './environment-inspector.js';
+import type { FleetOperationStateRecord, FleetStateRecord } from './fleet-state.js';
+import { type FleetLaunchInput } from './fleet-launcher.js';
+import type { LocalDevContext } from './local-context.js';
+import { type WorkspaceFleetPlan } from './nx-workspace.js';
+import type { PersonalStageResolution } from './personal-stage.js';
+import type { RunningFleetRuntime } from './fleet-runtime.js';
+export interface FleetUpCoreCommand {
+    foreground: boolean;
+    noWait: boolean;
+    selector: {
+        all: boolean;
+        slices: string[];
+    };
+    sstMode: 'mono' | 'multiplexer';
+    timeoutMs?: number;
+}
+export interface FleetUpCoreClient {
+    shutdown(idempotencyKey?: string): Promise<void>;
+    status(): Promise<FleetStateRecord>;
+    submit(command: 'down' | 'restart' | 'up', selector: FleetUpCoreCommand['selector'], idempotencyKey?: string): Promise<{
+        operationId: string;
+        state: 'accepted';
+    }>;
+    waitForOperation(operationId: string, options?: {
+        timeoutMs?: number;
+    }): Promise<FleetOperationStateRecord>;
+}
+export interface FleetUpCoreLaunchResult {
+    attached: boolean;
+    client: FleetUpCoreClient;
+    fleetId: string;
+    runtime?: RunningFleetRuntime;
+}
+export interface FleetUpCoreResult {
+    afterWrite?: Promise<void>;
+    attached: boolean;
+    fleetId: string;
+    operation: FleetOperationStateRecord | {
+        operationId: string;
+        state: 'accepted';
+    };
+    operationId: string;
+    slices?: FleetStateRecord['slices'];
+}
+export interface FleetUpCoreEffects {
+    idempotencyKey?: () => string;
+    inspectEnvironment?: typeof inspectDevelopmentEnvironment;
+    launchFleet?: (input: FleetLaunchInput) => Promise<FleetUpCoreLaunchResult>;
+    reportCleanupFailure?: (message: string) => void;
+}
+export declare function executeFleetUpCore(command: FleetUpCoreCommand, input: {
+    appData: string;
+    context: LocalDevContext;
+    frameworkVersion: string;
+    identity: PersonalStageResolution;
+    plan: WorkspaceFleetPlan;
+    signal: AbortSignal;
+    workspaceRoot: string;
+}, effects?: FleetUpCoreEffects): Promise<FleetUpCoreResult>;

package/src/local-dev/dev-command-core.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeFleetUpCore = executeFleetUpCore;
+const node_crypto_1 = require("node:crypto");
+const environment_inspector_js_1 = require("./environment-inspector.js");
+const errors_js_1 = require("./errors.js");
+const fleet_launcher_js_1 = require("./fleet-launcher.js");
+const nx_workspace_js_1 = require("./nx-workspace.js");
+function foregroundWait(launch, command, signal, idempotencyKey, reportCleanupFailure) {
+    if (!command.foreground || !launch.runtime)
+        return undefined;
+    const stop = async () => {
+        try {
+            const down = await launch.client.submit('down', { all: true, slices: [] }, idempotencyKey());
+            await launch.client.waitForOperation(down.operationId, {
+                timeoutMs: command.timeoutMs ?? 120_000,
+            });
+            await launch.client.shutdown(idempotencyKey());
+        }
+        catch (error) {
+            reportCleanupFailure(`Foreground Fleet cleanup failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    };
+    const onAbort = () => void stop();
+    signal.addEventListener('abort', onAbort, { once: true });
+    return launch.runtime.supervisor.waitUntilStopped().finally(() => {
+        signal.removeEventListener('abort', onAbort);
+    });
+}
+async function executeFleetUpCore(command, input, effects = {}) {
+    const slices = (0, nx_workspace_js_1.selectWorkspaceSlices)(input.plan, command.selector);
+    const inspect = effects.inspectEnvironment ?? environment_inspector_js_1.inspectDevelopmentEnvironment;
+    const assessment = await inspect({
+        adapters: slices.map((name) => input.plan.adapters.get(name)),
+        appData: input.appData,
+        command: 'up',
+        context: input.context,
+        frameworkVersion: input.frameworkVersion,
+        identity: input.identity,
+        workspaceRoot: input.workspaceRoot,
+    });
+    (0, environment_inspector_js_1.assertEnvironmentReady)(assessment);
+    const idempotencyKey = effects.idempotencyKey ?? node_crypto_1.randomUUID;
+    const launch = await (effects.launchFleet ?? fleet_launcher_js_1.launchOrAttachFleet)({
+        appData: input.appData,
+        context: input.context,
+        foreground: command.foreground,
+        frameworkVersion: input.frameworkVersion,
+        sstMode: command.sstMode,
+        workspaceRoot: input.workspaceRoot,
+    });
+    let submission;
+    try {
+        submission = await launch.client.submit('up', command.selector, idempotencyKey());
+    }
+    catch (error) {
+        if (!launch.attached) {
+            await launch.client.shutdown(idempotencyKey()).catch(() => undefined);
+        }
+        throw error;
+    }
+    const afterWrite = foregroundWait(launch, command, input.signal, idempotencyKey, effects.reportCleanupFailure ?? (() => undefined));
+    if (command.noWait) {
+        return {
+            ...(afterWrite ? { afterWrite } : {}),
+            attached: launch.attached,
+            fleetId: launch.fleetId,
+            operation: submission,
+            operationId: submission.operationId,
+        };
+    }
+    const operation = await launch.client.waitForOperation(submission.operationId, command.timeoutMs === undefined ? {} : { timeoutMs: command.timeoutMs });
+    if (operation.state === 'failed') {
+        if (!launch.attached) {
+            await launch.client.shutdown(idempotencyKey()).catch(() => undefined);
+        }
+        throw new errors_js_1.LocalDevContractError(operation.failureClassification ?? 'internal-error', `Fleet up failed after transactional rollback (${operation.failureClassification ?? 'internal-error'}).`);
+    }
+    const state = await launch.client.status();
+    return {
+        ...(afterWrite ? { afterWrite } : {}),
+        attached: launch.attached,
+        fleetId: launch.fleetId,
+        operation,
+        operationId: submission.operationId,
+        slices: state.slices,
+    };
+}
+//# sourceMappingURL=dev-command-core.js.map

package/src/local-dev/dev-command-core.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-command-core.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/dev-command-core.ts"],"names":[],"mappings":";;AA2GA,gDAuFC;AAlMD,6CAAyC;AAGzC,yEAGoC;AACpC,2CAAoD;AAKpD,2DAG6B;AAE7B,uDAG2B;AAqD3B,SAAS,cAAc,CACrB,MAA+B,EAC/B,OAA2B,EAC3B,MAAmB,EACnB,cAA4B,EAC5B,oBAA+C;IAE/C,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACrC,MAAM,EACN,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EACzB,cAAc,EAAE,CACjB,CAAC;YACF,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE;gBACrD,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO;aACxC,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oBAAoB,CAClB,oCACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QAC/D,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,OAA2B,EAC3B,KAQC,EACD,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,IAAA,uCAAqB,EAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,IAAI,wDAA6B,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,GAAG,CAClB,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAoB,CAC3D;QACD,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAC;IACH,IAAA,iDAAsB,EAAC,UAAU,CAAC,CAAC;IACnC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAU,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,uCAAmB,CAAC,CAAC;QAChE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAC;IACH,IAAI,UAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACrC,IAAI,EACJ,OAAO,CAAC,QAAQ,EAChB,cAAc,EAAE,CACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,UAAU,GAAG,cAAc,CAC/B,MAAM,EACN,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,cAAc,EACd,OAAO,CAAC,oBAAoB,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAClD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO;YACL,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,gBAAgB,CACpD,UAAU,CAAC,WAAW,EACtB,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACxE,CAAC;IACF,IAAI,SAAS,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,IAAI,iCAAqB,CAC7B,SAAS,CAAC,qBAAqB,IAAI,gBAAgB,EACnD,iDAAiD,SAAS,CAAC,qBAAqB,IAAI,gBAAgB,IAAI,CACzG,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAC3C,OAAO;QACL,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS;QACT,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;AACJ,CAAC"}

package/src/local-dev/effects.d.ts

@@ -0,0 +1,16 @@
+import { type SecureContextOptions } from 'node:tls';
+export interface TlsEndpointProbeOptions {
+    ca: SecureContextOptions['ca'];
+    host?: string;
+    hostname: string;
+    port: number;
+    timeoutMs?: number;
+}
+export declare function probeTlsEndpoint(options: TlsEndpointProbeOptions): Promise<void>;
+export declare function probeEphemeralTlsEndpoint(options: {
+    ca: SecureContextOptions['ca'];
+    certificate: string | Buffer;
+    hostname: string;
+    key: string | Buffer;
+    timeoutMs?: number;
+}): Promise<void>;

package/src/local-dev/effects.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.probeTlsEndpoint = probeTlsEndpoint;
+exports.probeEphemeralTlsEndpoint = probeEphemeralTlsEndpoint;
+const node_tls_1 = require("node:tls");
+async function probeTlsEndpoint(options) {
+    await new Promise((resolve, reject) => {
+        const socket = (0, node_tls_1.connect)({
+            ca: options.ca,
+            host: options.host ?? '127.0.0.1',
+            port: options.port,
+            rejectUnauthorized: true,
+            servername: options.hostname,
+        });
+        let settled = false;
+        const finish = (error) => {
+            if (settled)
+                return;
+            settled = true;
+            socket.destroy();
+            if (error)
+                reject(error);
+            else
+                resolve();
+        };
+        socket.setTimeout(options.timeoutMs ?? 2_000, () => finish(new Error('TLS endpoint probe timed out.')));
+        socket.once('secureConnect', () => finish());
+        socket.once('error', (error) => finish(error));
+    });
+}
+async function probeEphemeralTlsEndpoint(options) {
+    const sockets = new Set();
+    const server = (0, node_tls_1.createServer)({ cert: options.certificate, key: options.key }, (socket) => {
+        sockets.add(socket);
+        socket.once('close', () => sockets.delete(socket));
+        socket.end();
+    });
+    try {
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            server.listen(0, '127.0.0.1', resolve);
+        });
+        const address = server.address();
+        await probeTlsEndpoint({
+            ca: options.ca,
+            hostname: options.hostname,
+            port: address.port,
+            timeoutMs: options.timeoutMs,
+        });
+    }
+    finally {
+        for (const socket of sockets)
+            socket.destroy();
+        await new Promise((resolve) => {
+            if (!server.listening) {
+                resolve();
+                return;
+            }
+            server.close(() => resolve());
+        });
+    }
+}
+//# sourceMappingURL=effects.js.map

package/src/local-dev/effects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effects.js","sourceRoot":"","sources":["../../../../../packages/nx/src/local-dev/effects.ts"],"names":[],"mappings":";;AAgBA,4CAyBC;AAED,8DAsCC;AAhFD,uCAKkB;AAUX,KAAK,UAAU,gBAAgB,CACpC,OAAgC;IAEhC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,IAAA,kBAAO,EAAC;YACrB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,WAAW;YACjC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,kBAAkB,EAAE,IAAI;YACxB,UAAU,EAAE,OAAO,CAAC,QAAQ;SAC7B,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBACpB,OAAO,EAAE,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,EAAE,GAAG,EAAE,CACjD,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CACnD,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAAC,OAM/C;IACC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,MAAM,MAAM,GAAW,IAAA,uBAAY,EACjC,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAC/C,CAAC,MAAM,EAAE,EAAE;QACT,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC;IACf,CAAC,CACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;QAChD,MAAM,gBAAgB,CAAC;YACrB,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,OAAO,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/src/local-dev/environment-inspector.d.ts

@@ -0,0 +1,125 @@
+import type { LocalDevAdapter } from './contracts.js';
+import { type DevelopmentEnvironmentAssessment, type EnvironmentCheckResult } from './environment-state.js';
+import { LocalDevContractError } from './errors.js';
+import type { LocalDevContext } from './local-context.js';
+import { type PersonalStageResolution } from './personal-stage.js';
+import type { PrivateStateSecurity } from './private-state.js';
+export declare const AWS_ENVIRONMENT_PROBE_TIMEOUT_MS: 15000;
+export declare const ENVIRONMENT_INSPECTOR_CHECKS: readonly [{
+    readonly capabilities: readonly ["framework-bootstrap"];
+    readonly id: "platform";
+    readonly volatile: false;
+}, {
+    readonly capabilities: readonly ["framework-bootstrap"];
+    readonly id: "node-runtime";
+    readonly volatile: false;
+}, {
+    readonly capabilities: readonly ["framework-bootstrap"];
+    readonly id: "git";
+    readonly volatile: false;
+}, {
+    readonly capabilities: readonly ["framework-bootstrap"];
+    readonly id: "corepack";
+    readonly volatile: false;
+}, {
+    readonly capabilities: readonly ["framework-bootstrap"];
+    readonly id: "pnpm";
+    readonly volatile: false;
+}, {
+    readonly capabilities: readonly ["workspace"];
+    readonly id: "workspace-write";
+    readonly volatile: true;
+}, {
+    readonly capabilities: readonly ["workspace"];
+    readonly id: "workspace-nx";
+    readonly volatile: false;
+}, {
+    readonly capabilities: readonly ["fleet-identity"];
+    readonly id: "personal-stage";
+    readonly volatile: false;
+}, {
+    readonly capabilities: readonly ["fleet-control"];
+    readonly id: "private-state-location";
+    readonly volatile: true;
+}, {
+    readonly capabilities: readonly ["fleet-https"];
+    readonly id: "openssl";
+    readonly volatile: false;
+}, {
+    readonly capabilities: readonly ["fleet-https"];
+    readonly id: "tls-state";
+    readonly volatile: true;
+}, {
+    readonly capabilities: readonly ["containers"];
+    readonly id: "docker-cli";
+    readonly volatile: false;
+}, {
+    readonly capabilities: readonly ["containers"];
+    readonly id: "docker-engine";
+    readonly volatile: true;
+}, {
+    readonly capabilities: readonly ["containers"];
+    readonly id: "docker-compose-v2";
+    readonly volatile: true;
+}, {
+    readonly capabilities: readonly ["aws-foundation"];
+    readonly id: "aws-sdk-credentials";
+    readonly volatile: true;
+}, {
+    readonly capabilities: readonly ["aws-foundation"];
+    readonly id: "aws-foundation-access";
+    readonly volatile: true;
+}, {
+    readonly capabilities: readonly ["aws-remediation"];
+    readonly id: "aws-cli-remediation";
+    readonly volatile: false;
+}];
+export type EnvironmentInspectorCheckId = (typeof ENVIRONMENT_INSPECTOR_CHECKS)[number]['id'];
+export type EnvironmentCommand = 'configure' | 'doctor' | 'down' | 'logs' | 'prune' | 'ps' | 'restart' | 'secret' | 'setup' | 'status' | 'tail' | 'up';
+export interface EnvironmentProbeObservation {
+    detectedVersion?: string;
+    evidence?: string;
+    minimumVersion?: string;
+    remediation?: string;
+    status: 'incompatible' | 'missing' | 'ready' | 'unavailable';
+}
+export interface EnvironmentProbeContext {
+    accountId?: string;
+    accountResolutionFailure?: string;
+    appData: string;
+    context: LocalDevContext;
+    identity: PersonalStageResolution;
+    workspaceRoot: string;
+}
+export type EnvironmentProbe = (context: EnvironmentProbeContext, abortSignal: AbortSignal) => Promise<EnvironmentProbeObservation>;
+export interface EnvironmentInspectorDependencies {
+    awsProbeTimeoutMs?: number;
+    probes?: Partial<Record<EnvironmentInspectorCheckId, EnvironmentProbe>>;
+    resolveAccountId?: (context: LocalDevContext, abortSignal: AbortSignal) => Promise<string>;
+    security?: PrivateStateSecurity;
+}
+export interface InspectEnvironmentInput {
+    adapters?: readonly LocalDevAdapter[];
+    appData?: string;
+    command: EnvironmentCommand;
+    context: LocalDevContext;
+    force?: boolean;
+    frameworkVersion: string;
+    identity: PersonalStageResolution;
+    workspaceRoot: string;
+}
+export interface EnvironmentDeficiencyAssessment {
+    checks: Array<Pick<EnvironmentCheckResult, 'id' | 'requiredFor' | 'severity' | 'status'> & {
+        detectedVersion?: string;
+        minimumVersion?: string;
+        remediation?: string;
+    }>;
+    state: 'deficient';
+}
+export declare class EnvironmentDeficientError extends LocalDevContractError {
+    readonly environmentAssessment: EnvironmentDeficiencyAssessment;
+    constructor(environmentAssessment: EnvironmentDeficiencyAssessment);
+}
+export declare function evaluateDevelopmentFoundationAccount(accountId: string, eventBusArn: string): EnvironmentProbeObservation;
+export declare function inspectDevelopmentEnvironment(input: InspectEnvironmentInput, dependencies?: EnvironmentInspectorDependencies): Promise<DevelopmentEnvironmentAssessment>;
+export declare function assertEnvironmentReady(assessment: DevelopmentEnvironmentAssessment): void;