@fjall/deploy-core 2.21.0 → 2.22.0

package/dist/src/types/deployEvent.d.ts

@@ -0,0 +1,907 @@
+/**
+ * The unified deploy-event contract — `fjall.deploy/1.1`.
+ *
+ * One versioned discriminated union (`DeployEvent`) is the single wire shape for
+ * every progress signal the deployment engine emits, replacing the positional
+ * `DeployCallbacks`, the forked wire schemas, and the ad-hoc TOON/Ink/metadata
+ * representations. Consumers parse with {@link parseDeployEvent} and switch on
+ * `progressKind`; producers construct via `createDeployEmitter` (the single
+ * masking + sequencing boundary).
+ *
+ * Naming: this is `DeployEvent` / `DeployEventSchema` (`fjall.deploy/1.1`), NOT
+ * the legacy `DeploymentEvent` / `DeploymentEventSchema` (the flat wire schema in
+ * `deploymentEventSchema.ts`, superseded in a later phase). They coexist during
+ * the migration; do not conflate them.
+ *
+ * Browser-safe: this module imports only Zod, pure constant tuples, and
+ * `@fjall/util/config` — no Node-only modules.
+ */
+import { z } from "zod";
+/** The contract marker stamped on every event this build emits. */
+export declare const DEPLOY_EVENT_CONTRACT: "fjall.deploy/1.1";
+/** Major version — a bump means a breaking shape change (parser rejects skew). */
+export declare const DEPLOY_EVENT_CONTRACT_MAJOR = 1;
+/** Minor version — additive variants/fields; a higher minor is forward-tolerated. */
+export declare const DEPLOY_EVENT_CONTRACT_MINOR = 1;
+/**
+ * Every same-major contract marker this build can parse. The envelope accepts
+ * any listed minor, so a 1.1 reader still validates a persisted 1.0 event as
+ * `ok` (backward-compatible). A future minor (1.2+) is deliberately absent here,
+ * so `parseDeployEvent` classifies it `unknown` — render best-effort — never
+ * `invalid` (forward-compatible). Add the new marker here when bumping the minor.
+ */
+export declare const SUPPORTED_CONTRACT_MARKERS: readonly ["fjall.deploy/1.0", "fjall.deploy/1.1"];
+export declare const DEPLOY_EVENT_ID_MAX = 256;
+export declare const DEPLOY_EVENT_NAME_MAX = 256;
+export declare const DEPLOY_EVENT_MESSAGE_MAX = 2048;
+export declare const DEPLOY_EVENT_STATUS_REASON_MAX = 2048;
+export declare const DEPLOY_EVENT_ERROR_MESSAGE_MAX = 4096;
+export declare const DEPLOY_EVENT_TRAIL_DETAIL_MAX = 2048;
+export declare const DEPLOY_EVENT_OUTPUT_MAX = 8192;
+export declare const DEPLOY_EVENT_ARN_MAX = 2048;
+export declare const DEPLOY_EVENT_URL_MAX = 4096;
+/** Terminal status of a single deploy step. callbacks.ts `StepCompleteStatus` derives from this. */
+export declare const STEP_COMPLETE_STATUSES: readonly ["completed", "skipped", "error", "cancelled"];
+/** Log severity. callbacks.ts `LogLevel` (onLog) derives from this. */
+export declare const LOG_LEVELS: readonly ["info", "debug", "warn"];
+/**
+ * Failed-state stack-cleanup phases. callbacks.ts `StackCleanupPhase` derives
+ * from this. The "quarantine-suspected" and "retained-buckets" literals are
+ * consumed by `fjall unlock` and the detection rule — they must not be renamed.
+ */
+export declare const STACK_CLEANUP_PHASES: readonly ["emptying-bucket", "deleting-stack", "waiting", "complete", "error", "quarantine-suspected", "retained-buckets"];
+/** Per-account cascade phases. callbacks.ts `CascadeAccountPhase` derives from this. */
+export declare const CASCADE_ACCOUNT_PHASES: readonly ["bootstrap", "synth", "deploy", "destroy"];
+/**
+ * Granular terminal outcome of a deploy run (the `deploy.completed` event). One
+ * of the OTel-inspired two axes: `result` (this enum) sits beside a binary `ok`,
+ * with `errorType` present only when `!ok`.
+ */
+export declare const DEPLOY_RESULTS: readonly ["success", "failure", "cancelled", "no-changes", "rejected"];
+export type DeployRunResult = (typeof DEPLOY_RESULTS)[number];
+/** Detection-pipeline phase boundaries (the `detection.phase` event). */
+export declare const DETECTION_PHASES: readonly ["detect", "synth", "hash", "validate"];
+/** started/completed — reused across the phase-boundary events in this contract. */
+export declare const PHASE_STATUSES: readonly ["started", "completed"];
+/** Build-pipeline kinds carried by the `build.*` events. */
+export declare const BUILDERS: readonly ["docker", "buildpush", "opennext"];
+/**
+ * Cascade per-target outcome. Mirrors the engine-side `CascadeOutcomeResult`
+ * (orchestration/organisation/cascadeSummary.ts); the wire ledger owns its own
+ * tuple so the contract has no dependency on the orchestration layer.
+ */
+export declare const CASCADE_OUTCOME_RESULTS: readonly ["succeeded", "skipped", "failed"];
+/** CloudFormation plan actions (the `plan.available` event). */
+export declare const PLAN_ACTIONS: readonly ["create", "update", "replace", "delete", "read", "no-op"];
+export type PlanAction = (typeof PLAN_ACTIONS)[number];
+/**
+ * How CloudFormation will replace a resource — the replacement axis of
+ * `@aws-cdk/cloudformation-diff`'s `ResourceImpact` (1.1). `will` = WILL_REPLACE,
+ * `may` = MAY_REPLACE (a token whose value can't be evaluated until deploy),
+ * `conditional` = replacement depends on a condition, `none` = no replacement.
+ */
+export declare const REPLACEMENT_MODES: readonly ["will", "may", "conditional", "none"];
+export type ReplacementMode = (typeof REPLACEMENT_MODES)[number];
+/** Approval-gate kinds (the `approval.awaiting` event). */
+export declare const APPROVAL_KINDS: readonly ["destructive", "cost", "policy"];
+export type ApprovalKind = (typeof APPROVAL_KINDS)[number];
+/**
+ * Approval-gate decisions (the `approval.resolved` event). `expired` (the
+ * `expiresAt` window elapsed) and `superseded` (a re-plan invalidated a prior
+ * awaiting) are the 1.1 additions.
+ */
+export declare const APPROVAL_DECISIONS: readonly ["approved", "rejected", "expired", "superseded"];
+export type ApprovalDecision = (typeof APPROVAL_DECISIONS)[number];
+/**
+ * Per-action change tally on a plan. Every action is enumerated and required —
+ * never derived as `total − safe` (`.claude/rules/code-quality.md § "Derived
+ * aggregate buckets must enumerate, not subtract"`). The compile-time guard
+ * below keeps the keys in lockstep with {@link PLAN_ACTIONS}.
+ */
+export declare const ChangeCountsSchema: z.ZodObject<{
+    create: z.ZodNumber;
+    update: z.ZodNumber;
+    replace: z.ZodNumber;
+    delete: z.ZodNumber;
+    read: z.ZodNumber;
+    "no-op": z.ZodNumber;
+}, z.core.$strict>;
+export type ChangeCounts = z.infer<typeof ChangeCountsSchema>;
+/**
+ * Both-or-neither step counter. A step either carries no progress at all, or
+ * carries BOTH a non-negative index AND a positive total — making the `{0,0}`
+ * footgun (lone `{index:0}`, `{index:null}`, `total:0`) unrepresentable.
+ */
+export declare const StepProgressSchema: z.ZodObject<{
+    index: z.ZodNumber;
+    total: z.ZodNumber;
+}, z.core.$strict>;
+export type StepProgress = z.infer<typeof StepProgressSchema>;
+/** Serialisable CloudFormation resource event (the non-Date subset of `@fjall/util` ResourceEvent, plus category). */
+export declare const DeployResourceSchema: z.ZodObject<{
+    logicalId: z.ZodString;
+    resourceType: z.ZodString;
+    status: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+    category: z.ZodOptional<z.ZodEnum<{
+        security: "security";
+        network: "network";
+        compute: "compute";
+        database: "database";
+        storage: "storage";
+        monitoring: "monitoring";
+        dns: "dns";
+        identity: "identity";
+        bootstrap: "bootstrap";
+        events: "events";
+        registry: "registry";
+        backup: "backup";
+    }>>;
+    group: z.ZodOptional<z.ZodString>;
+    constructPath: z.ZodOptional<z.ZodString>;
+    statusReason: z.ZodOptional<z.ZodString>;
+    physicalId: z.ZodOptional<z.ZodString>;
+    expectedDurationSeconds: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type DeployResource = z.infer<typeof DeployResourceSchema>;
+/**
+ * A single changed CloudFormation property on a resource (1.1). Carries the
+ * property PATH and whether that change forces replacement — never the old/new
+ * VALUES, which can embed credentials (env vars, connection strings). The path
+ * is an identifier and discloses nothing exploitable, so it is not masked.
+ */
+export declare const PlanPropertyChangeSchema: z.ZodObject<{
+    path: z.ZodString;
+    forcesReplacement: z.ZodBoolean;
+}, z.core.$strict>;
+export type PlanPropertyChange = z.infer<typeof PlanPropertyChangeSchema>;
+/**
+ * A single planned CloudFormation change. `address` is the construct path /
+ * logicalId (Terraform's "address"). The 1.1 fields (`stack`, `replacementMode`,
+ * `dataLoss`, `propertyChanges`) are optional, so a 1.0 change still validates.
+ */
+export declare const PlanChangeSchema: z.ZodObject<{
+    address: z.ZodString;
+    resourceType: z.ZodString;
+    action: z.ZodEnum<{
+        replace: "replace";
+        create: "create";
+        update: "update";
+        delete: "delete";
+        read: "read";
+        "no-op": "no-op";
+    }>;
+    stack: z.ZodOptional<z.ZodString>;
+    replacementMode: z.ZodOptional<z.ZodEnum<{
+        will: "will";
+        may: "may";
+        conditional: "conditional";
+        none: "none";
+    }>>;
+    dataLoss: z.ZodOptional<z.ZodBoolean>;
+    propertyChanges: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        forcesReplacement: z.ZodBoolean;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type PlanChange = z.infer<typeof PlanChangeSchema>;
+export declare const DeployEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    progressKind: z.ZodLiteral<"step.started">;
+    step: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strict>;
+    progress: z.ZodOptional<z.ZodObject<{
+        index: z.ZodNumber;
+        total: z.ZodNumber;
+    }, z.core.$strict>>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"step.completed">;
+    step: z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+    }, z.core.$strict>;
+    status: z.ZodEnum<{
+        error: "error";
+        completed: "completed";
+        skipped: "skipped";
+        cancelled: "cancelled";
+    }>;
+    progress: z.ZodOptional<z.ZodObject<{
+        index: z.ZodNumber;
+        total: z.ZodNumber;
+    }, z.core.$strict>>;
+    errorMessage: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"log">;
+    level: z.ZodEnum<{
+        info: "info";
+        debug: "debug";
+        warn: "warn";
+    }>;
+    message: z.ZodString;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"output">;
+    chunk: z.ZodString;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"resource">;
+    resource: z.ZodObject<{
+        logicalId: z.ZodString;
+        resourceType: z.ZodString;
+        status: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+        category: z.ZodOptional<z.ZodEnum<{
+            security: "security";
+            network: "network";
+            compute: "compute";
+            database: "database";
+            storage: "storage";
+            monitoring: "monitoring";
+            dns: "dns";
+            identity: "identity";
+            bootstrap: "bootstrap";
+            events: "events";
+            registry: "registry";
+            backup: "backup";
+        }>>;
+        group: z.ZodOptional<z.ZodString>;
+        constructPath: z.ZodOptional<z.ZodString>;
+        statusReason: z.ZodOptional<z.ZodString>;
+        physicalId: z.ZodOptional<z.ZodString>;
+        expectedDurationSeconds: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>;
+    scope: z.ZodOptional<z.ZodObject<{
+        stack: z.ZodOptional<z.ZodString>;
+        operationKey: z.ZodOptional<z.ZodString>;
+        region: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"phase.parallel">;
+    status: z.ZodEnum<{
+        started: "started";
+        completed: "completed";
+    }>;
+    stacks: z.ZodArray<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    results: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        stack: z.ZodString;
+        success: z.ZodBoolean;
+        error: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"build.started">;
+    builder: z.ZodEnum<{
+        docker: "docker";
+        buildpush: "buildpush";
+        opennext: "opennext";
+    }>;
+    serviceName: z.ZodOptional<z.ZodString>;
+    imageTag: z.ZodOptional<z.ZodString>;
+    ecrRepositoryUri: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"build.progress">;
+    builder: z.ZodEnum<{
+        docker: "docker";
+        buildpush: "buildpush";
+        opennext: "opennext";
+    }>;
+    message: z.ZodString;
+    serviceName: z.ZodOptional<z.ZodString>;
+    percentage: z.ZodOptional<z.ZodNumber>;
+    layerId: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"build.completed">;
+    builder: z.ZodEnum<{
+        docker: "docker";
+        buildpush: "buildpush";
+        opennext: "opennext";
+    }>;
+    success: z.ZodBoolean;
+    serviceName: z.ZodOptional<z.ZodString>;
+    imageTag: z.ZodOptional<z.ZodString>;
+    imageDigest: z.ZodOptional<z.ZodString>;
+    imageUri: z.ZodOptional<z.ZodString>;
+    ecrRepositoryArn: z.ZodOptional<z.ZodString>;
+    durationMs: z.ZodOptional<z.ZodNumber>;
+    error: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"taskdef.registered">;
+    serviceName: z.ZodString;
+    taskDefinitionArn: z.ZodString;
+    previousTaskDefinitionArn: z.ZodString;
+    revision: z.ZodNumber;
+    family: z.ZodString;
+    imageDigest: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"ecs.update">;
+    status: z.ZodString;
+    service: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"ecs.progress">;
+    message: z.ZodString;
+    percentage: z.ZodOptional<z.ZodNumber>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"ecs.completed">;
+    serviceName: z.ZodString;
+    serviceArn: z.ZodString;
+    success: z.ZodBoolean;
+    taskDefinitionArn: z.ZodString;
+    durationMs: z.ZodNumber;
+    reason: z.ZodOptional<z.ZodString>;
+    finalRunningCount: z.ZodOptional<z.ZodNumber>;
+    finalDesiredCount: z.ZodOptional<z.ZodNumber>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"migrations.started">;
+    family: z.ZodString;
+    taskDefinitionArn: z.ZodString;
+    imageDigest: z.ZodString;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"migrations.completed">;
+    family: z.ZodString;
+    taskDefinitionArn: z.ZodString;
+    success: z.ZodBoolean;
+    durationMs: z.ZodNumber;
+    exitCode: z.ZodOptional<z.ZodNumber>;
+    reason: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cdk.bootstrap">;
+    status: z.ZodString;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cdk.output">;
+    outputType: z.ZodEnum<{
+        synth: "synth";
+        diff: "diff";
+    }>;
+    output: z.ZodString;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"detection.completed">;
+    detection: z.ZodObject<{
+        pattern: z.ZodNullable<z.ZodString>;
+        hasDockerfile: z.ZodBoolean;
+        hasDifferences: z.ZodBoolean;
+        resources: z.ZodObject<{
+            hasNetwork: z.ZodBoolean;
+            hasCompute: z.ZodBoolean;
+            hasDatabase: z.ZodBoolean;
+            hasStorage: z.ZodBoolean;
+            hasMessaging: z.ZodBoolean;
+            hasCdn: z.ZodBoolean;
+        }, z.core.$strict>;
+        requiredSecrets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"detection.phase">;
+    phase: z.ZodEnum<{
+        synth: "synth";
+        detect: "detect";
+        hash: "hash";
+        validate: "validate";
+    }>;
+    status: z.ZodEnum<{
+        started: "started";
+        completed: "completed";
+    }>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.started">;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.accountsReconciled">;
+    hasPlatformAccount: z.ZodBoolean;
+    hasMemberAccounts: z.ZodBoolean;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.orgChanges">;
+    hasOrgChanges: z.ZodBoolean;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.missingAccounts">;
+    accountNames: z.ZodArray<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.phase">;
+    phase: z.ZodEnum<{
+        platform: "platform";
+        domains: "domains";
+        accounts: "accounts";
+    }>;
+    status: z.ZodEnum<{
+        started: "started";
+        completed: "completed";
+    }>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.account.started">;
+    operationKey: z.ZodString;
+    accountId: z.ZodString;
+    region: z.ZodString;
+    deployType: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.account.phase">;
+    operationKey: z.ZodString;
+    phase: z.ZodEnum<{
+        bootstrap: "bootstrap";
+        synth: "synth";
+        deploy: "deploy";
+        destroy: "destroy";
+    }>;
+    region: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.account.completed">;
+    operationKey: z.ZodString;
+    success: z.ZodBoolean;
+    error: z.ZodOptional<z.ZodString>;
+    region: z.ZodOptional<z.ZodString>;
+    outputs: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    skipped: z.ZodOptional<z.ZodBoolean>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.completed">;
+    result: z.ZodObject<{
+        platformDeployed: z.ZodBoolean;
+        platformSkipped: z.ZodBoolean;
+        platformFailed: z.ZodBoolean;
+        domainsDeployed: z.ZodBoolean;
+        accountsDeployed: z.ZodNumber;
+        accountsSkipped: z.ZodNumber;
+        accountsFailed: z.ZodNumber;
+        errors: z.ZodArray<z.ZodObject<{
+            accountId: z.ZodString;
+            error: z.ZodString;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cascade.ledger">;
+    ledger: z.ZodObject<{
+        members: z.ZodArray<z.ZodObject<{
+            accountId: z.ZodString;
+            accountName: z.ZodString;
+            region: z.ZodString;
+            result: z.ZodEnum<{
+                failed: "failed";
+                succeeded: "succeeded";
+                skipped: "skipped";
+            }>;
+            durationMs: z.ZodNumber;
+            error: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        platform: z.ZodOptional<z.ZodObject<{
+            accountId: z.ZodString;
+            result: z.ZodEnum<{
+                failed: "failed";
+                succeeded: "succeeded";
+                skipped: "skipped";
+            }>;
+            durationMs: z.ZodNumber;
+            error: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        domainsDeployed: z.ZodBoolean;
+        errors: z.ZodArray<z.ZodObject<{
+            accountId: z.ZodString;
+            error: z.ZodString;
+        }, z.core.$strict>>;
+        totalDurationMs: z.ZodNumber;
+    }, z.core.$strict>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"trail.phase">;
+    accountId: z.ZodString;
+    accountName: z.ZodString;
+    phase: z.ZodEnum<{
+        "verify-delivery": "verify-delivery";
+        decommission: "decommission";
+    }>;
+    status: z.ZodEnum<{
+        started: "started";
+        completed: "completed";
+        blocked: "blocked";
+        failed: "failed";
+    }>;
+    detail: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"trail.lifecycle">;
+    accountId: z.ZodString;
+    to: z.ZodEnum<{
+        account: "account";
+        draining: "draining";
+        org: "org";
+    }>;
+    from: z.ZodOptional<z.ZodEnum<{
+        account: "account";
+        draining: "draining";
+        org: "org";
+    }>>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"cleanup.progress">;
+    stackName: z.ZodString;
+    phase: z.ZodEnum<{
+        error: "error";
+        complete: "complete";
+        "emptying-bucket": "emptying-bucket";
+        "deleting-stack": "deleting-stack";
+        waiting: "waiting";
+        "quarantine-suspected": "quarantine-suspected";
+        "retained-buckets": "retained-buckets";
+    }>;
+    detail: z.ZodOptional<z.ZodUnion<readonly [z.ZodObject<{
+        bucketName: z.ZodString;
+        accountId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        retainedBuckets: z.ZodArray<z.ZodString>;
+        message: z.ZodString;
+    }, z.core.$strict>]>>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"auth.ssoUrl">;
+    url: z.ZodNullable<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"auth.completed">;
+    result: z.ZodNullable<z.ZodObject<{
+        accountId: z.ZodString;
+        region: z.ZodString;
+        profileName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"error">;
+    message: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"deploy.completed">;
+    result: z.ZodEnum<{
+        success: "success";
+        cancelled: "cancelled";
+        failure: "failure";
+        "no-changes": "no-changes";
+        rejected: "rejected";
+    }>;
+    ok: z.ZodBoolean;
+    errorType: z.ZodOptional<z.ZodString>;
+    message: z.ZodString;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"plan.available">;
+    plan: z.ZodObject<{
+        summary: z.ZodString;
+        changeCount: z.ZodNumber;
+        hasDestructiveChanges: z.ZodBoolean;
+        changes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            address: z.ZodString;
+            resourceType: z.ZodString;
+            action: z.ZodEnum<{
+                replace: "replace";
+                create: "create";
+                update: "update";
+                delete: "delete";
+                read: "read";
+                "no-op": "no-op";
+            }>;
+            stack: z.ZodOptional<z.ZodString>;
+            replacementMode: z.ZodOptional<z.ZodEnum<{
+                will: "will";
+                may: "may";
+                conditional: "conditional";
+                none: "none";
+            }>>;
+            dataLoss: z.ZodOptional<z.ZodBoolean>;
+            propertyChanges: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                forcesReplacement: z.ZodBoolean;
+            }, z.core.$strict>>>;
+        }, z.core.$strict>>>;
+        diffRef: z.ZodOptional<z.ZodString>;
+        iamBroadening: z.ZodOptional<z.ZodBoolean>;
+        securityGroupBroadening: z.ZodOptional<z.ZodBoolean>;
+        changeCountsByAction: z.ZodOptional<z.ZodObject<{
+            create: z.ZodNumber;
+            update: z.ZodNumber;
+            replace: z.ZodNumber;
+            delete: z.ZodNumber;
+            read: z.ZodNumber;
+            "no-op": z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"approval.awaiting">;
+    approval: z.ZodObject<{
+        token: z.ZodString;
+        kind: z.ZodEnum<{
+            destructive: "destructive";
+            cost: "cost";
+            policy: "policy";
+        }>;
+        reason: z.ZodString;
+        expiresAt: z.ZodString;
+        assemblyDigest: z.ZodOptional<z.ZodString>;
+        changeCounts: z.ZodOptional<z.ZodObject<{
+            create: z.ZodNumber;
+            update: z.ZodNumber;
+            replace: z.ZodNumber;
+            delete: z.ZodNumber;
+            read: z.ZodNumber;
+            "no-op": z.ZodNumber;
+        }, z.core.$strict>>;
+        approvalClass: z.ZodOptional<z.ZodString>;
+        requiredApprovers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    progressKind: z.ZodLiteral<"approval.resolved">;
+    approval: z.ZodObject<{
+        token: z.ZodString;
+        decision: z.ZodEnum<{
+            rejected: "rejected";
+            approved: "approved";
+            expired: "expired";
+            superseded: "superseded";
+        }>;
+        actor: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    contract: z.ZodEnum<{
+        "fjall.deploy/1.1": "fjall.deploy/1.1";
+        "fjall.deploy/1.0": "fjall.deploy/1.0";
+    }>;
+    deploymentId: z.ZodString;
+    seq: z.ZodNumber;
+    time: z.ZodString;
+}, z.core.$strict>], "progressKind">;
+export type DeployEvent = z.infer<typeof DeployEventSchema>;
+/** The discriminant — every variant's `progressKind`. */
+export type ProgressKind = DeployEvent["progressKind"];
+/** Every {@link ProgressKind}, derived from the type-checked presence map. */
+export declare const ALL_PROGRESS_KINDS: ProgressKind[];