@lssm/lib.infra-ops-spec 2.0.1

package/dist/index.js

@@ -0,0 +1,2 @@
+// @bun
+var b={id:"owner_platform_ops",kind:"companyos_owner"},Ve={id:"policy_gate_production_release",kind:"companyos_policy_gate"},zt={id:"infra_ops_deployment_release_loop",version:"1.0.0",environments:[{id:"env_production",name:"Production",tier:"production",ownerRef:b}],runtimeTargets:[{id:"runtime_web_edge",type:"web",capabilityRefs:[{id:"capability_static_web_runtime",kind:"integration_capability"}]}],services:[{id:"service_customer_portal",name:"Customer portal",runtimeTargetId:"runtime_web_edge",ownerRef:b}],pipelines:[{id:"pipeline_customer_portal_release",jobScheduleRef:{id:"job_release_pipeline",kind:"job_schedule"},capabilityRefs:[{id:"capability_release_artifact",kind:"integration_capability"}],ownerRef:b}],migrationWindows:[{id:"migration_customer_portal_content",serviceId:"service_customer_portal",windowRef:"window:2026-05-09T20:00:00Z/PT1H",rollbackRef:{id:"rollback_customer_portal",kind:"progressive_delivery_rollback"},ownerRef:b,evidenceReceiptIds:["evidence_migration_plan"]}],deployments:[{id:"deployment_customer_portal_v2",environmentId:"env_production",serviceId:"service_customer_portal",pipelineId:"pipeline_customer_portal_release",rolloutRef:{id:"rollout_customer_portal_canary",kind:"progressive_delivery_rollout"},rollbackRef:{id:"rollback_customer_portal",kind:"progressive_delivery_rollback"},approvalRequirementId:"approval_customer_portal_release",healthCheckIds:["health_customer_portal","ready_customer_portal","live_customer_portal"],sloIds:["slo_customer_portal_availability"],evidenceReceiptIds:["evidence_release_plan","evidence_release_approval","evidence_rollout_started","evidence_health_passed"],highRisk:!0}],releases:[{id:"release_customer_portal_v2",deploymentId:"deployment_customer_portal_v2",version:"2.0.0",orchestrationRef:{id:"orchestration_release_customer_portal",kind:"orchestration_workflow"}}],rollbacks:[{id:"rollback_customer_portal_v2",deploymentId:"deployment_customer_portal_v2",rollbackRef:{id:"rollback_customer_portal",kind:"progressive_delivery_rollback"},priorEvidenceReceiptId:"evidence_rollout_started"}],healthChecks:[{id:"health_customer_portal",serviceId:"service_customer_portal",kind:"health",metricRef:{id:"metric_http_200",kind:"observability_metric"}},{id:"ready_customer_portal",serviceId:"service_customer_portal",kind:"readiness",metricRef:{id:"metric_ready",kind:"observability_metric"}},{id:"live_customer_portal",serviceId:"service_customer_portal",kind:"liveness",metricRef:{id:"metric_live",kind:"observability_metric"}}],slos:[{id:"slo_customer_portal_availability",serviceId:"service_customer_portal",objective:"monthly availability",threshold:"99.9%",metricRefs:[{id:"metric_http_200",kind:"observability_metric"}],ownerRef:b}],monitors:[{id:"monitor_customer_portal",serviceId:"service_customer_portal",metricRefs:[{id:"metric_http_200",kind:"observability_metric"}],traceRefs:[{id:"trace_checkout",kind:"observability_trace"}],logRefs:[{id:"log_edge_errors",kind:"observability_log"}]}],alerts:[],onCall:[],escalations:[],incidents:[],postmortems:[],capacityPlans:[{id:"capacity_customer_portal_peak",serviceId:"service_customer_portal",expectedLoad:"1000 rpm",thresholds:["cpu < 70%","p95 < 250ms"],ownerRef:b,evidenceReceiptIds:["evidence_capacity_review"]}],costBudgets:[{id:"cost_customer_portal_monthly",serviceId:"service_customer_portal",budgetRef:{id:"budget_customer_portal",kind:"cost_budget"},usageRef:{id:"usage_customer_portal",kind:"metering_usage"},thresholds:["warn at 80%","block at 120%"],ownerRef:b}],secretRefs:[{id:"secret_customer_portal_runtime",purpose:"runtime configuration",ref:"secretref:customer-portal-runtime",ownerRef:b}],operationalRisks:[{id:"risk_customer_portal_release",serviceId:"service_customer_portal",level:"high",mitigationRef:"rollback_customer_portal_v2",ownerRef:b}],approvalRequirements:[{id:"approval_customer_portal_release",policyGateRef:Ve,ownerRef:b,requiredFor:["deployment_customer_portal_v2"]}],evidenceReceipts:[{id:"evidence_migration_plan",sourceRef:"migration_customer_portal_content",action:"plan_migration",actorRef:b,targetRef:"service_customer_portal",outcome:"planned",observedAt:"2026-05-09T10:00:00Z"},{id:"evidence_release_plan",sourceRef:"release_customer_portal_v2",action:"plan_release",actorRef:b,targetRef:"deployment_customer_portal_v2",outcome:"planned",observedAt:"2026-05-09T10:05:00Z"},{id:"evidence_release_approval",sourceRef:"approval_customer_portal_release",action:"approve_release",actorRef:b,targetRef:"deployment_customer_portal_v2",outcome:"approved",observedAt:"2026-05-09T10:10:00Z"},{id:"evidence_rollout_started",sourceRef:"rollout_customer_portal_canary",action:"record_rollout",actorRef:b,targetRef:"deployment_customer_portal_v2",outcome:"succeeded",observedAt:"2026-05-09T10:15:00Z"},{id:"evidence_health_passed",sourceRef:"health_customer_portal",action:"verify_health",actorRef:b,targetRef:"deployment_customer_portal_v2",outcome:"succeeded",observedAt:"2026-05-09T10:20:00Z"},{id:"evidence_capacity_review",sourceRef:"capacity_customer_portal_peak",action:"review_capacity",actorRef:b,targetRef:"service_customer_portal",outcome:"succeeded",observedAt:"2026-05-09T10:25:00Z"}]};var R={id:"owner_reliability_ops",kind:"companyos_owner"},$t={id:"infra_ops_incident_loop",version:"1.0.0",environments:[{id:"env_production",name:"Production",tier:"production",ownerRef:R}],runtimeTargets:[{id:"runtime_api_worker",type:"api",capabilityRefs:[{id:"capability_api_runtime",kind:"integration_capability"}]}],services:[{id:"service_billing_api",name:"Billing API",runtimeTargetId:"runtime_api_worker",ownerRef:R}],pipelines:[],migrationWindows:[],deployments:[],releases:[],rollbacks:[],healthChecks:[{id:"health_billing_api",serviceId:"service_billing_api",kind:"health",metricRef:{id:"metric_billing_http_200",kind:"observability_metric"}}],slos:[{id:"slo_billing_latency",serviceId:"service_billing_api",objective:"p95 latency",threshold:"< 300ms",metricRefs:[{id:"metric_billing_latency",kind:"observability_metric"}],ownerRef:R}],monitors:[{id:"monitor_billing_latency",serviceId:"service_billing_api",metricRefs:[{id:"metric_billing_latency",kind:"observability_metric"}],traceRefs:[{id:"trace_billing_api",kind:"observability_trace"}],logRefs:[{id:"log_billing_errors",kind:"observability_log"}]}],alerts:[{id:"alert_billing_latency",serviceId:"service_billing_api",severity:"high",monitorId:"monitor_billing_latency",sloId:"slo_billing_latency"}],onCall:[{id:"oncall_billing_api",serviceId:"service_billing_api",ownerRef:R,scheduleRef:{id:"job_oncall_rotation",kind:"job_schedule"}}],escalations:[{id:"escalation_billing_latency",incidentId:"incident_billing_latency",onCallId:"oncall_billing_api",ownerRef:R}],incidents:[{id:"incident_billing_latency",alertId:"alert_billing_latency",environmentId:"env_production",serviceId:"service_billing_api",severity:"high",escalationId:"escalation_billing_latency",mitigationOwnerRef:R,postmortemId:"postmortem_billing_latency",evidenceReceiptIds:["evidence_alert_triggered","evidence_incident_triaged","evidence_mitigation_applied"]}],postmortems:[{id:"postmortem_billing_latency",incidentId:"incident_billing_latency",ownerRef:R,evidenceReceiptIds:["evidence_postmortem_written"],followUpRefs:["work_followup_billing_cache_guardrail"]}],capacityPlans:[{id:"capacity_billing_api_peak",serviceId:"service_billing_api",expectedLoad:"500 rpm",thresholds:["p95 < 300ms"],ownerRef:R,evidenceReceiptIds:["evidence_capacity_review"]}],costBudgets:[{id:"cost_billing_api_monthly",serviceId:"service_billing_api",budgetRef:{id:"budget_billing_api",kind:"cost_budget"},usageRef:{id:"usage_billing_api",kind:"metering_usage"},thresholds:["warn at 80%","block at 120%"],ownerRef:R}],secretRefs:[{id:"secret_billing_runtime",purpose:"runtime configuration",ref:"secretref:billing-runtime",ownerRef:R}],operationalRisks:[{id:"risk_billing_latency",serviceId:"service_billing_api",level:"high",mitigationRef:"work_followup_billing_cache_guardrail",ownerRef:R}],approvalRequirements:[],evidenceReceipts:[{id:"evidence_alert_triggered",sourceRef:"alert_billing_latency",action:"record_alert",actorRef:R,targetRef:"incident_billing_latency",outcome:"failed",observedAt:"2026-05-09T11:00:00Z"},{id:"evidence_incident_triaged",sourceRef:"incident_billing_latency",action:"triage_incident",actorRef:R,targetRef:"service_billing_api",outcome:"planned",observedAt:"2026-05-09T11:05:00Z"},{id:"evidence_mitigation_applied",sourceRef:"incident_billing_latency",action:"apply_mitigation",actorRef:R,targetRef:"service_billing_api",outcome:"mitigated",observedAt:"2026-05-09T11:20:00Z"},{id:"evidence_postmortem_written",sourceRef:"postmortem_billing_latency",action:"write_postmortem",actorRef:R,targetRef:"incident_billing_latency",outcome:"succeeded",observedAt:"2026-05-09T12:00:00Z"},{id:"evidence_capacity_review",sourceRef:"capacity_billing_api_peak",action:"review_capacity",actorRef:R,targetRef:"service_billing_api",outcome:"succeeded",observedAt:"2026-05-09T12:10:00Z"}]};import{createHash as je}from"crypto";function ze(e){return JSON.stringify(z(e))}function Bt(e){let i=ze(e);return`sha256:${je("sha256").update(i).digest("hex")}`}function z(e){if(e===null||typeof e==="string"||typeof e==="boolean")return e;if(typeof e==="number"){if(!Number.isFinite(e))throw TypeError("Cannot canonicalize number");return e}if(Array.isArray(e))return e.map(z);if(typeof e==="object")return Object.fromEntries(Object.entries(e).filter(([,i])=>i!==void 0).sort(([i],[n])=>i.localeCompare(n)).map(([i,n])=>[i,z(n)]));throw TypeError(`Cannot canonicalize ${typeof e}`)}var B=["cost","complexity","migrationRisk"],G=["reliability","performance","scalability","portability"];function L(e){let i=[...e].sort((o,c)=>o.id.localeCompare(c.id)),n=i.filter((o)=>o.hardViolationIds.length),r=i.filter((o)=>!o.hardViolationIds.length),s=r.filter((o)=>!r.some((c)=>c.id!==o.id&&Ee(c,o)));return{eligibleCandidateIds:r.map(({id:o})=>o),rejectedCandidateIds:n.map(({id:o})=>o),paretoCandidateIds:s.map(({id:o})=>o)}}function Ee(e,i){let n=B.every((c)=>e.scores[c]<=i.scores[c]),r=G.every((c)=>e.scores[c]>=i.scores[c]),s=B.some((c)=>e.scores[c]<i.scores[c]),o=G.some((c)=>e.scores[c]>i.scores[c]);return n&&r&&(s||o)}var O=["compute","database","cache","queue","object_storage","email","network","secrets","ci","observability"].map((e)=>`binding-${e}`),H=`sha256:${"a".repeat(64)}`,F={candidates:[{id:"candidate-a",architectureId:"architecture-primary",bindingIds:O,satisfiedRequirementIds:["req-availability","req-portability"],hardViolationIds:[],scores:{cost:50,reliability:90,performance:85,scalability:90,portability:80,complexity:40,migrationRisk:30},assumptions:["Qualified capacity remains available."]},{id:"candidate-b",architectureId:"architecture-primary",bindingIds:O,satisfiedRequirementIds:["req-availability"],hardViolationIds:[],scores:{cost:60,reliability:80,performance:75,scalability:80,portability:70,complexity:50,migrationRisk:40},assumptions:["Manual scaling is acceptable."]},{id:"candidate-invalid",architectureId:"architecture-primary",bindingIds:O,satisfiedRequirementIds:["req-portability"],hardViolationIds:["req-availability"],scores:{cost:10,reliability:100,performance:100,scalability:100,portability:100,complexity:10,migrationRisk:10},assumptions:["Hard requirement is knowingly unmet."]}],comparisons:[{id:"comparison-primary",candidateIds:["candidate-a","candidate-b","candidate-invalid"],rejectedCandidateIds:["candidate-invalid"],paretoCandidateIds:["candidate-a"],selectedCandidateId:"candidate-a",rationale:"Candidate A dominates B after hard-violation rejection."}],adrs:[{id:"adr-primary",title:"Adopt portable regional service",status:"accepted",comparisonId:"comparison-primary",selectedCandidateId:"candidate-a",requirementIds:["req-availability","req-portability"],consequenceStatements:["Operate two regional failure domains."],decidedAt:"2026-08-03T00:00:00Z"}],infrastructurePlans:[{id:"plan-primary",adrId:"adr-primary",architectureId:"architecture-primary",candidateId:"candidate-a",steps:[{id:"step-bind",sequence:1,action:"Realize approved logical bindings.",bindingIds:O,prerequisiteStepIds:[],evidenceRefs:["evidence-plan-review"]}],rollbackPlanRef:"rollback:plan-primary",approvalRequirementIds:["approval-architecture-owner"]}],evolutionPlans:[],handoffPackets:[{id:"handoff-primary",infrastructurePlanId:"plan-primary",recipientRef:"workflow:infra-implementation",contractDigest:H,artifactRefs:["artifact:plan-primary"],requiredEvidenceRefs:["evidence:implementation-receipt"],issuedAt:"2026-08-03T01:00:00Z",expiresAt:"2026-08-10T01:00:00Z",containsCredentials:!1}],handoffReceipts:[{id:"receipt-primary",packetId:"handoff-primary",recipientRef:"workflow:infra-implementation",status:"accepted",receivedDigest:H,evidenceRefs:["evidence:receipt-primary"],receivedAt:"2026-08-03T01:05:00Z"}],unsatisfiableReports:[]};var V=["compute","database","cache","queue","object_storage","email","network","secrets","ci","observability"],E=V.map((e)=>`cap-${e}`),$e=V.map((e)=>`binding-${e}`),Ut={id:"intent-customer-api-v2",version:"2.0.0",goals:[{id:"goal-resilience",statement:"Keep the customer API available through regional faults.",priority:"critical",requirementIds:["req-availability","req-portability"]}],requirements:[{id:"req-availability",goalId:"goal-resilience",category:"availability",description:"Monthly service availability",criticality:"hard",measure:"availability_percent",target:99.95,unit:"percent"},{id:"req-portability",goalId:"goal-resilience",category:"portability",description:"Retain replaceable infrastructure boundaries",criticality:"soft"}],workloadEnvelopes:[{id:"workload-primary",concurrentUsers:2000,requestsPerSecond:800,burstMultiplier:3,latencyP95Ms:250,availabilityPercent:99.95,dataVolumeGb:500,monthlyDataGrowthPercent:8,storageGb:750,monthlyEgressGb:2000,backgroundJobsPerHour:5000,rpoMinutes:5,rtoMinutes:30,regions:["eu-west","eu-central"],forecastMonths:24,annualTrafficGrowthPercent:40}],restrictions:[{id:"restriction-residency",requirementId:"req-availability",scopeIds:["architecture-primary"],kind:"residency",rule:"Customer data remains in approved EU regions.",severity:"hard",rationale:"Regulatory boundary"},{id:"restriction-cache",scopeIds:["architecture-primary"],kind:"technology",rule:"Cache may be temporarily omitted in preview.",severity:"soft",rationale:"Preview cost control"}],providerPolicies:[{id:"policy-neutral",allowedProviderClasses:["qualified-cloud"],deniedProviderClasses:["unqualified-cloud"],residencyRegions:["eu-west","eu-central"],portabilityMinimum:70,managedServicePosture:"prefer_managed",requiredCapabilities:["encryption-at-rest"],deniedCapabilities:["public-database"],nonWaivableRestrictionIds:["restriction-residency"]}],capabilities:V.map((e,i)=>({id:E[i],kind:e,purpose:`Provide ${e.replace("_"," ")} capability.`,requirementIds:["req-availability"],dependsOnCapabilityIds:i===0?[]:["cap-compute"]})),architectures:[{id:"architecture-primary",name:"Portable regional service",workloadEnvelopeId:"workload-primary",capabilityIds:E,restrictionIds:["restriction-residency","restriction-cache"]}],bindings:V.map((e,i)=>({id:$e[i],architectureId:"architecture-primary",capabilityId:E[i],environmentId:"production-eu",targetClass:`managed-${e}`,providerClass:"qualified-cloud",region:"eu-west",evidenceRefs:[`evidence-${e}`]})),evolutionTriggers:[{id:"trigger-load",metric:"requests_per_second",operator:"gte",threshold:700,observationWindowMinutes:15,action:"replan"}],evolutionPolicies:[{id:"evolution-primary",architectureId:"architecture-primary",triggerIds:["trigger-load"],minimumReviewIntervalDays:30,allowedChangeKinds:["scale","rebind"],approvalRequirementIds:["approval-architecture-owner"]}],waivers:[{id:"waiver-preview",restrictionId:"restriction-cache",scope:{architectureIds:["architecture-primary"],environmentIds:["preview","development"]},reason:"Validate traffic assumptions before provisioning cache.",issuedAt:"2026-08-01T00:00:00Z",expiresAt:"2026-09-01T00:00:00Z",approvedByRef:"owner:platform"},{id:"waiver-development",restrictionId:"restriction-cache",scope:{architectureIds:["architecture-primary"],environmentIds:["development"]},reason:"Tightened child waiver for development only.",issuedAt:"2026-08-02T00:00:00Z",expiresAt:"2026-08-15T00:00:00Z",approvedByRef:"owner:platform",inheritedFromWaiverId:"waiver-preview"}],...F};import{z as I}from"zod";import{z as l}from"zod";var d=l.string().min(1),Te=l.enum(["compute","database","cache","queue","object_storage","email","network","secrets","ci","observability"]),U=l.object({id:d,kind:Te,purpose:d,requirementIds:l.array(d),dependsOnCapabilityIds:l.array(d)}).strict(),N=l.object({id:d,name:d,workloadEnvelopeId:d,capabilityIds:l.array(d).min(1),restrictionIds:l.array(d)}).strict(),J=l.object({id:d,architectureId:d,capabilityId:d,environmentId:d,targetClass:d,providerClass:d.optional(),region:d,evidenceRefs:l.array(d)}).strict(),K=l.object({id:d,metric:d,operator:l.enum(["gt","gte","lt","lte","eq"]),threshold:l.number().finite(),observationWindowMinutes:l.number().int().positive(),action:l.enum(["review","replan","migrate"])}).strict(),Q=l.object({id:d,architectureId:d,triggerIds:l.array(d).min(1),minimumReviewIntervalDays:l.number().int().nonnegative(),allowedChangeKinds:l.array(l.enum(["scale","rebind","replace","retire"])).min(1),approvalRequirementIds:l.array(d)}).strict(),X=l.object({id:d,restrictionId:d,scope:l.object({architectureIds:l.array(d).min(1),environmentIds:l.array(d).min(1)}).strict(),reason:d,issuedAt:l.string().datetime({offset:!0}),expiresAt:l.string().datetime({offset:!0}),approvedByRef:d,inheritedFromWaiverId:d.optional()}).strict();import{z as p}from"zod";var g=p.string().min(1),P=p.number().finite().nonnegative(),Y=p.number().finite().positive(),T=p.number().finite().min(0).max(100),ee=p.object({id:g,goalId:g,category:p.enum(["availability","capacity","cost","data","latency","operability","portability","recovery","security"]),description:g,criticality:p.enum(["hard","soft"]),measure:g.optional(),target:p.number().finite().optional(),unit:g.optional()}).strict(),te=p.object({id:g,statement:g,priority:p.enum(["low","medium","high","critical"]),requirementIds:p.array(g).min(1)}).strict(),ie=p.object({id:g,concurrentUsers:P,requestsPerSecond:P,burstMultiplier:Y,latencyP95Ms:Y,availabilityPercent:T,dataVolumeGb:P,monthlyDataGrowthPercent:T,storageGb:P,monthlyEgressGb:P,backgroundJobsPerHour:P,rpoMinutes:P,rtoMinutes:P,regions:p.array(g).min(1),forecastMonths:p.number().int().positive(),annualTrafficGrowthPercent:T}).strict(),re=p.object({id:g,requirementId:g.optional(),scopeIds:p.array(g).min(1),kind:p.enum(["capability","compliance","cost","network","operability","residency","technology"]),rule:g,severity:p.enum(["hard","soft"]),rationale:g}).strict(),ne=p.object({id:g,allowedProviderClasses:p.array(g),deniedProviderClasses:p.array(g),residencyRegions:p.array(g).min(1),portabilityMinimum:p.number().int().min(0).max(100),managedServicePosture:p.enum(["prefer_managed","allow_managed","self_managed_only"]),requiredCapabilities:p.array(g),deniedCapabilities:p.array(g),nonWaivableRestrictionIds:p.array(g)}).strict();import{z as u}from"zod";var f=u.string().min(1),q=u.number().finite().min(0).max(100),De=u.object({cost:q,reliability:q,performance:q,scalability:q,portability:q,complexity:q,migrationRisk:q}).strict(),ae=u.object({id:f,architectureId:f,bindingIds:u.array(f).min(1),satisfiedRequirementIds:u.array(f),hardViolationIds:u.array(f),scores:De,assumptions:u.array(f)}).strict(),oe=u.object({id:f,candidateIds:u.array(f).min(1),rejectedCandidateIds:u.array(f),paretoCandidateIds:u.array(f),selectedCandidateId:f.optional(),rationale:f}).strict(),se=u.object({id:f,title:f,status:u.enum(["proposed","accepted","superseded","rejected"]),comparisonId:f,selectedCandidateId:f,requirementIds:u.array(f).min(1),consequenceStatements:u.array(f).min(1),supersedesAdrId:f.optional(),decidedAt:u.string().datetime({offset:!0})}).strict(),ce=u.object({id:f,requirementIds:u.array(f).min(1),candidateViolationIds:u.array(u.object({candidateId:f,violationIds:u.array(f).min(1)}).strict()).min(1),conflictExplanation:f,resolutionOptions:u.array(f).min(1),generatedAt:u.string().datetime({offset:!0})}).strict();import{z as y}from"zod";var m=y.string().min(1),Me=y.object({id:m,sequence:y.number().int().positive(),action:m,bindingIds:y.array(m),prerequisiteStepIds:y.array(m),evidenceRefs:y.array(m)}).strict(),de=y.object({id:m,adrId:m,architectureId:m,candidateId:m,steps:y.array(Me).min(1),rollbackPlanRef:m,approvalRequirementIds:y.array(m)}).strict(),le=y.object({id:m,evolutionPolicyId:m,triggerId:m,fromAdrId:m,toAdrId:m,infrastructurePlanId:m,migrationRisk:y.enum(["low","medium","high","critical"]),continuityRequirementIds:y.array(m).min(1)}).strict(),pe=y.object({id:m,infrastructurePlanId:m,recipientRef:m,contractDigest:y.string().regex(/^sha256:[a-f0-9]{64}$/),artifactRefs:y.array(m).min(1),requiredEvidenceRefs:y.array(m),issuedAt:y.string().datetime({offset:!0}),expiresAt:y.string().datetime({offset:!0}),containsCredentials:y.literal(!1)}).strict(),me=y.object({id:m,packetId:m,recipientRef:m,status:y.enum(["accepted","rejected","expired"]),receivedDigest:y.string().regex(/^sha256:[a-f0-9]{64}$/),evidenceRefs:y.array(m),receivedAt:y.string().datetime({offset:!0})}).strict();var fe=I.object({id:I.string().min(1),version:I.literal("2.0.0"),goals:I.array(te).min(1),requirements:I.array(ee).min(1),workloadEnvelopes:I.array(ie).min(1),restrictions:I.array(re),providerPolicies:I.array(ne).min(1),capabilities:I.array(U).min(1),architectures:I.array(N).min(1),bindings:I.array(J),evolutionTriggers:I.array(K),evolutionPolicies:I.array(Q),waivers:I.array(X),candidates:I.array(ae).min(1),comparisons:I.array(oe),adrs:I.array(se),infrastructurePlans:I.array(de),evolutionPlans:I.array(le),handoffPackets:I.array(pe),handoffReceipts:I.array(me),unsatisfiableReports:I.array(ce)}).strict();function S(e){return new Set(e.map(({id:i})=>i))}function x(e,i,n,r,s){for(let o of i)v(e,o,n,r,s)}function v(e,i,n,r,s){if(!e.has(i))s.push({code:"missing_reference",message:`${n} references missing ${r} ${i}.`})}function ue(e,i){for(let[n,r]of Object.entries(e)){if(!Array.isArray(r))continue;let s=new Set;for(let o of r){if(!We(o))continue;if(s.has(o.id))i.push(h("duplicate_id",`${n} contains duplicate id ${o.id}.`));s.add(o.id)}}}function h(e,i){return{code:e,message:i}}function We(e){return typeof e==="object"&&e!==null&&"id"in e&&typeof e.id==="string"}function ye(e){let i=[],n=S(e.goals),r=S(e.requirements),s=S(e.workloadEnvelopes),o=S(e.restrictions),c=S(e.capabilities),_=S(e.architectures),ke=S(e.bindings),W=S(e.evolutionTriggers),Ce=S(e.evolutionPolicies),A=S(e.candidates),Pe=S(e.comparisons),j=S(e.adrs),Z=S(e.infrastructurePlans),qe=S(e.handoffPackets),Ae=new Set([...r,...o]);for(let a of e.requirements)v(n,a.goalId,a.id,"goal",i);for(let a of e.restrictions)if(a.requirementId)v(r,a.requirementId,a.id,"requirement",i);for(let a of e.goals)x(r,a.requirementIds,a.id,"requirement",i);for(let a of e.capabilities)x(r,a.requirementIds,a.id,"requirement",i),x(c,a.dependsOnCapabilityIds,a.id,"capability",i);for(let a of e.architectures)v(s,a.workloadEnvelopeId,a.id,"workload envelope",i),x(c,a.capabilityIds,a.id,"capability",i),x(o,a.restrictionIds,a.id,"restriction",i);for(let a of e.bindings)v(_,a.architectureId,a.id,"architecture",i),v(c,a.capabilityId,a.id,"capability",i);for(let a of e.evolutionPolicies)v(_,a.architectureId,a.id,"architecture",i),x(W,a.triggerIds,a.id,"trigger",i);for(let a of e.waivers)v(o,a.restrictionId,a.id,"restriction",i),x(_,a.scope.architectureIds,a.id,"architecture",i);for(let a of e.candidates)v(_,a.architectureId,a.id,"architecture",i),x(ke,a.bindingIds,a.id,"binding",i),x(r,a.satisfiedRequirementIds,a.id,"requirement",i),x(Ae,a.hardViolationIds,a.id,"hard violation target",i);for(let a of e.comparisons)x(A,a.candidateIds,a.id,"candidate",i);for(let a of e.adrs)v(Pe,a.comparisonId,a.id,"comparison",i),v(A,a.selectedCandidateId,a.id,"candidate",i),x(r,a.requirementIds,a.id,"requirement",i);for(let a of e.infrastructurePlans)v(j,a.adrId,a.id,"ADR",i),v(_,a.architectureId,a.id,"architecture",i),v(A,a.candidateId,a.id,"candidate",i);for(let a of e.evolutionPlans)v(Ce,a.evolutionPolicyId,a.id,"evolution policy",i),v(Z,a.infrastructurePlanId,a.id,"infrastructure plan",i),v(W,a.triggerId,a.id,"trigger",i),v(j,a.fromAdrId,a.id,"ADR",i),v(j,a.toAdrId,a.id,"ADR",i);for(let a of e.handoffPackets)v(Z,a.infrastructurePlanId,a.id,"infrastructure plan",i);for(let a of e.handoffReceipts)v(qe,a.packetId,a.id,"handoff packet",i);for(let a of e.unsatisfiableReports)x(r,a.requirementIds,a.id,"requirement",i),x(A,a.candidateViolationIds.map(({candidateId:Oe})=>Oe),a.id,"candidate",i);return i}function ge(e,i){for(let n of e.bindings)for(let r of e.providerPolicies){if(n.providerClass&&(r.deniedProviderClasses.includes(n.providerClass)||r.allowedProviderClasses.length>0&&!r.allowedProviderClasses.includes(n.providerClass)))i.push(h("provider_denied",`${n.id} uses provider class denied by ${r.id}.`));if(!r.residencyRegions.includes(n.region))i.push(h("residency_denied",`${n.id} uses region outside ${r.id}.`))}}function _e(e){let i=[];return Ze(e,i),ge(e,i),Be(e,i),Ge(e,i),Le(e,i),He(e,i),ue(e,i),i}function Ze(e,i){for(let n of e.providerPolicies){Ie(n.allowedProviderClasses,n.deniedProviderClasses,n.id,"provider class",i),Ie(n.requiredCapabilities,n.deniedCapabilities,n.id,"capability",i);let r=new Set(e.restrictions.map(({id:s})=>s));for(let s of n.nonWaivableRestrictionIds)if(!r.has(s))i.push(h("missing_reference",`${n.id} references missing restriction ${s}.`))}}function Be(e,i){let n=new Map(e.waivers.map((s)=>[s.id,s])),r=new Set(e.providerPolicies.flatMap(({nonWaivableRestrictionIds:s})=>s));for(let s of e.waivers){if(r.has(s.restrictionId))i.push(h("non_waivable",`${s.id} targets non-waivable restriction ${s.restrictionId}.`));if(Date.parse(s.expiresAt)<=Date.parse(s.issuedAt))i.push(h("invalid_expiry",`${s.id} must expire after issuance.`));if(!s.inheritedFromWaiverId)continue;let o=n.get(s.inheritedFromWaiverId);if(!o){i.push(h("missing_reference",`${s.id} references missing parent waiver.`));continue}if(o.restrictionId!==s.restrictionId)i.push(h("waiver_broadened",`${s.id} must inherit the same restriction.`));if(Date.parse(s.expiresAt)>Date.parse(o.expiresAt))i.push(h("waiver_broadened",`${s.id} may not outlive parent ${o.id}.`));if(!ve(s.scope.architectureIds,o.scope.architectureIds)||!ve(s.scope.environmentIds,o.scope.environmentIds))i.push(h("waiver_broadened",`${s.id} may only tighten parent ${o.id} scope.`))}}function Ge(e,i){let n=new Map(e.candidates.map((r)=>[r.id,r]));for(let r of e.comparisons){let s=r.candidateIds.flatMap((c)=>{let _=n.get(c);return _?[_]:[]}),o=L(s);if(!he(o.rejectedCandidateIds,r.rejectedCandidateIds))i.push(h("comparison_mismatch",`${r.id} hard-violation rejection is not deterministic.`));if(!he(o.paretoCandidateIds,r.paretoCandidateIds))i.push(h("comparison_mismatch",`${r.id} Pareto frontier is not deterministic.`));if(r.selectedCandidateId&&!o.paretoCandidateIds.includes(r.selectedCandidateId))i.push(h("invalid_selection",`${r.id} must select from its Pareto frontier.`))}}function Le(e,i){let n=new Set(e.unsatisfiableReports.flatMap(({candidateViolationIds:o})=>o.map(({candidateId:c})=>c))),r=new Set(e.comparisons.flatMap(({candidateIds:o})=>o)),s=e.candidates.filter(({id:o})=>r.has(o)).every(({hardViolationIds:o})=>o.length>0);if(r.size>0&&s){for(let o of r)if(!n.has(o))i.push(h("unsatisfiable_report_required",`Hard-invalid candidate ${o} requires an unsatisfiable report.`))}}function He(e,i){let n=new Map(e.handoffPackets.map((r)=>[r.id,r]));for(let r of e.handoffPackets)if(Date.parse(r.expiresAt)<=Date.parse(r.issuedAt))i.push(h("invalid_expiry",`${r.id} must expire after issuance.`));for(let r of e.handoffReceipts){let s=n.get(r.packetId);if(s&&r.receivedDigest!==s.contractDigest)i.push(h("digest_mismatch",`${r.id} does not acknowledge packet digest.`))}}function Ie(e,i,n,r,s){for(let o of e)if(i.includes(o))s.push(h("policy_conflict",`${n} both allows/requires and denies ${r} ${o}.`))}function ve(e,i){return e.every((n)=>i.includes(n))}function he(e,i){return e.length===i.length&&e.every((n,r)=>n===i[r])}var Fe=/(?:api[_-]?key|client[_-]?secret|private[_-]?key|password|bearer\s+|sk-[a-z0-9]|ghp_[a-z0-9])/i,Ue=/(?:aws_access_key|service_account_json|azure_client_secret|provider[_-]?config|kubeconfig)/i;class be extends Error{issues;constructor(e){super("Infrastructure intent V2 is invalid");this.issues=e;this.name="InfrastructureIntentValidationError"}}function Ne(e){let i=fe.safeParse(e);if(!i.success)return i.error.issues.map((s)=>({code:"schema_invalid",message:s.message,path:s.path.join(".")}));let n=[...ye(i.data),..._e(i.data)],r=JSON.stringify(i.data);if(Fe.test(r))n.push({code:"secret_material",message:"Infrastructure intent must not contain credentials or secret values."});if(Ue.test(r))n.push({code:"provider_config",message:"Infrastructure intent must not contain provider configuration material."});return n}function wi(e){let i=Ne(e);if(i.length>0)throw new be(i)}import{z as t}from"zod";var C=t.object({id:t.string().min(1),kind:t.string().min(1),version:t.string().min(1).optional()}),Je=C.extend({kind:t.literal("progressive_delivery_rollout")}),D=C.extend({kind:t.literal("progressive_delivery_rollback")}),M=C.extend({kind:t.literal("observability_metric")}),Ke=C.extend({kind:t.literal("observability_trace")}),Qe=C.extend({kind:t.literal("observability_log")}),Re=C.extend({kind:t.literal("job_schedule")}),Se=C.extend({kind:t.literal("integration_capability")}),Xe=C.extend({kind:t.literal("companyos_policy_gate")}),w=C.extend({kind:t.literal("companyos_owner")}),Ye=C.extend({kind:t.literal("orchestration_workflow")}),et=C.extend({kind:t.literal("cost_budget")}),tt=C.extend({kind:t.literal("metering_usage")}),it=t.object({id:t.string().min(1),name:t.string().min(1),tier:t.enum(["development","preview","staging","production"]),ownerRef:w}),rt=t.object({id:t.string().min(1),type:t.enum(["web","api","worker","job","database","edge","custom"]),capabilityRefs:t.array(Se).default([])}),nt=t.object({id:t.string().min(1),name:t.string().min(1),runtimeTargetId:t.string().min(1),ownerRef:w}),at=t.object({id:t.string().min(1),serviceId:t.string().min(1),kind:t.enum(["health","readiness","liveness"]),metricRef:M}),ot=t.object({id:t.string().min(1),serviceId:t.string().min(1),objective:t.string().min(1),threshold:t.string().min(1),metricRefs:t.array(M).min(1),ownerRef:w}),st=t.object({id:t.string().min(1),serviceId:t.string().min(1),metricRefs:t.array(M).min(1),traceRefs:t.array(Ke).default([]),logRefs:t.array(Qe).default([])}),ct=t.object({id:t.string().min(1),sourceRef:t.string().min(1),action:t.string().min(1),actorRef:w,targetRef:t.string().min(1),outcome:t.enum(["planned","approved","succeeded","failed","mitigated"]),observedAt:t.string().min(1)}),dt=t.object({id:t.string().min(1),policyGateRef:Xe,ownerRef:w,requiredFor:t.array(t.string().min(1)).min(1)}),lt=t.object({id:t.string().min(1),jobScheduleRef:Re,capabilityRefs:t.array(Se).default([]),ownerRef:w}),pt=t.object({id:t.string().min(1),serviceId:t.string().min(1),windowRef:t.string().min(1),rollbackRef:D,ownerRef:w,evidenceReceiptIds:t.array(t.string().min(1)).min(1)}),mt=t.object({id:t.string().min(1),environmentId:t.string().min(1),serviceId:t.string().min(1),pipelineId:t.string().min(1),rolloutRef:Je,rollbackRef:D,approvalRequirementId:t.string().min(1),healthCheckIds:t.array(t.string().min(1)).min(1),sloIds:t.array(t.string().min(1)).min(1),evidenceReceiptIds:t.array(t.string().min(1)).min(1),highRisk:t.boolean().default(!1)}),ft=t.object({id:t.string().min(1),deploymentId:t.string().min(1),rollbackRef:D,priorEvidenceReceiptId:t.string().min(1)}),ut=t.object({id:t.string().min(1),deploymentId:t.string().min(1),version:t.string().min(1),orchestrationRef:Ye}),yt=t.object({id:t.string().min(1),serviceId:t.string().min(1),severity:t.enum(["low","medium","high","critical"]),monitorId:t.string().min(1),sloId:t.string().min(1)}),gt=t.object({id:t.string().min(1),serviceId:t.string().min(1),ownerRef:w,scheduleRef:Re}),It=t.object({id:t.string().min(1),incidentId:t.string().min(1),onCallId:t.string().min(1),ownerRef:w}),vt=t.object({id:t.string().min(1),incidentId:t.string().min(1),ownerRef:w,evidenceReceiptIds:t.array(t.string().min(1)).min(1),followUpRefs:t.array(t.string().min(1)).min(1)}),ht=t.object({id:t.string().min(1),alertId:t.string().min(1),environmentId:t.string().min(1),serviceId:t.string().min(1),severity:t.enum(["low","medium","high","critical"]),escalationId:t.string().min(1),mitigationOwnerRef:w,postmortemId:t.string().min(1),evidenceReceiptIds:t.array(t.string().min(1)).min(1)}),_t=t.object({id:t.string().min(1),serviceId:t.string().min(1),expectedLoad:t.string().min(1),thresholds:t.array(t.string().min(1)).min(1),ownerRef:w,evidenceReceiptIds:t.array(t.string().min(1)).min(1)}),bt=t.object({id:t.string().min(1),serviceId:t.string().min(1),budgetRef:et,usageRef:tt,thresholds:t.array(t.string().min(1)).min(1),ownerRef:w}),Rt=t.object({id:t.string().min(1),purpose:t.string().min(1),ref:t.string().min(1),ownerRef:w}),St=t.object({id:t.string().min(1),serviceId:t.string().min(1),level:t.enum(["low","medium","high","critical"]),mitigationRef:t.string().min(1),ownerRef:w}),xe=t.object({id:t.string().min(1),version:t.string().min(1),environments:t.array(it).min(1),runtimeTargets:t.array(rt).min(1),services:t.array(nt).min(1),pipelines:t.array(lt).default([]),migrationWindows:t.array(pt).default([]),deployments:t.array(mt).default([]),releases:t.array(ut).default([]),rollbacks:t.array(ft).default([]),healthChecks:t.array(at).default([]),slos:t.array(ot).default([]),monitors:t.array(st).default([]),alerts:t.array(yt).default([]),onCall:t.array(gt).default([]),escalations:t.array(It).default([]),incidents:t.array(ht).default([]),postmortems:t.array(vt).default([]),capacityPlans:t.array(_t).default([]),costBudgets:t.array(bt).default([]),secretRefs:t.array(Rt).default([]),operationalRisks:t.array(St).default([]),approvalRequirements:t.array(dt).default([]),evidenceReceipts:t.array(ct).default([])});class we extends Error{issues;constructor(e,i){super(e);this.issues=i;this.name="InfraOpsValidationError"}}var xt=/(api[_-]?key|secret[_-]?access|private[_-]?key|token=|password=|bearer\s+[a-z0-9]|sk-[a-z0-9])/i,wt=/(aws_access_key|gcp_service_account|azure_client_secret|vercel_token|cloudflare_api_token|kubeconfig|providerConfig|provider_config)/i;function kt(e){let i=xe.safeParse(e);if(!i.success)return i.error.issues.map((o)=>({level:"error",message:o.message,context:{path:o.path.join(".")}}));let n=[],r=new Set(e.evidenceReceipts.map((o)=>o.id)),s=new Set(e.deployments.map((o)=>o.id));return Ct(e,n),Pt(e,r,n),qt(e,s,r,n),At(e,r,n),Ot(e,r,n),Vt(e,r,n),jt(e,n),n}function Ai(e){let i=kt(e);if(i.filter((r)=>r.level==="error").length>0)throw new we(`Infra-ops spec ${e.id} is invalid`,i)}function Ct(e,i){let n=JSON.stringify(e);if(xt.test(n))i.push({level:"error",message:"Infra-ops specs must not contain secret values or credentials."});if(wt.test(n))i.push({level:"error",message:"Infra-ops specs must not contain provider config material."});for(let r of e.secretRefs)if(!r.ref.startsWith("secretref:"))i.push({level:"error",message:`Secret ref ${r.id} must use a redacted secretref: identifier.`})}function Pt(e,i,n){let r=new Set(e.approvalRequirements.map((c)=>c.id)),s=new Set(e.healthChecks.map((c)=>c.id)),o=new Set(e.slos.map((c)=>c.id));for(let c of e.deployments){if(!r.has(c.approvalRequirementId))n.push(k(`Deployment ${c.id} requires approval.`));if(!c.healthCheckIds.some((_)=>s.has(_)))n.push(k(`Deployment ${c.id} requires health checks.`));if(!c.sloIds.some((_)=>o.has(_)))n.push(k(`Deployment ${c.id} requires SLO refs.`));if(c.highRisk&&!e.releases.some((_)=>_.deploymentId===c.id))n.push(k(`Deployment ${c.id} requires orchestration context.`));for(let _ of c.evidenceReceiptIds)if(!i.has(_))n.push(k(`Deployment ${c.id} references missing evidence.`))}}function qt(e,i,n,r){for(let s of e.rollbacks){if(!i.has(s.deploymentId))r.push(k(`Rollback ${s.id} references missing deployment.`));if(!n.has(s.priorEvidenceReceiptId))r.push(k(`Rollback ${s.id} requires prior deployment evidence.`))}}function At(e,i,n){for(let r of e.migrationWindows)for(let s of r.evidenceReceiptIds)if(!i.has(s))n.push(k(`Migration window ${r.id} references missing evidence.`))}function Ot(e,i,n){let r=new Set(e.escalations.map((o)=>o.id)),s=new Set(e.postmortems.map((o)=>o.id));for(let o of e.incidents){if(!r.has(o.escalationId))n.push(k(`Incident ${o.id} requires escalation.`));if(!s.has(o.postmortemId))n.push(k(`Incident ${o.id} requires postmortem evidence.`));for(let c of o.evidenceReceiptIds)if(!i.has(c))n.push(k(`Incident ${o.id} references missing evidence.`))}}function Vt(e,i,n){for(let r of e.costBudgets)if(r.thresholds.length===0)n.push(k(`Cost budget ${r.id} requires thresholds.`));for(let r of e.capacityPlans){if(r.thresholds.length===0||r.expectedLoad.length===0)n.push(k(`Capacity plan ${r.id} requires load thresholds.`));for(let s of r.evidenceReceiptIds)if(!i.has(s))n.push(k(`Capacity plan ${r.id} references missing evidence.`))}}function jt(e,i){for(let n of e.evidenceReceipts)if(!n.sourceRef||!n.action||!n.targetRef)i.push(k(`Evidence receipt ${n.id} is incomplete.`))}function k(e){return{level:"error",message:e}}export{ae as ArchitectureCandidateSchema,oe as ArchitectureComparisonSchema,se as ArchitectureDecisionRecordSchema,le as ArchitectureEvolutionPlanSchema,De as ArchitectureScoreSchema,w as CompanyOsOwnerRefSchema,Xe as CompanyOsPolicyGateRefSchema,X as ConstraintWaiverSchema,et as CostBudgetRefSchema,Q as EvolutionPolicySchema,K as EvolutionTriggerSchema,yt as InfraAlertSpecSchema,dt as InfraApprovalRequirementSpecSchema,_t as InfraCapacityPlanSpecSchema,bt as InfraCostBudgetSpecSchema,mt as InfraDeploymentSpecSchema,it as InfraEnvironmentRefSchema,It as InfraEscalationSpecSchema,ct as InfraEvidenceReceiptSpecSchema,at as InfraHealthCheckSpecSchema,ht as InfraIncidentSpecSchema,pt as InfraMigrationWindowSpecSchema,st as InfraMonitorSpecSchema,gt as InfraOnCallSpecSchema,St as InfraOperationalRiskSpecSchema,xe as InfraOpsSpecSchema,we as InfraOpsValidationError,lt as InfraPipelineSpecSchema,vt as InfraPostmortemSpecSchema,ut as InfraReleaseSpecSchema,ft as InfraRollbackSpecSchema,rt as InfraRuntimeTargetRefSchema,Rt as InfraSecretRefSpecSchema,nt as InfraServiceRefSchema,ot as InfraSloSpecSchema,Te as InfrastructureCapabilityKindSchema,pe as InfrastructureHandoffPacketSchema,me as InfrastructureHandoffReceiptSchema,fe as InfrastructureIntentV2Schema,be as InfrastructureIntentValidationError,de as InfrastructurePlanSchema,Se as IntegrationCapabilityRefSchema,Re as JobScheduleRefSchema,N as LogicalArchitectureSchema,U as LogicalCapabilitySchema,tt as MeteringUsageRefSchema,Qe as ObservabilityLogRefSchema,M as ObservabilityMetricRefSchema,Ke as ObservabilityTraceRefSchema,J as OperationalBindingSchema,te as OperationalGoalSchema,ee as OperationalRequirementSchema,Ye as OrchestrationWorkflowRefSchema,re as PlatformRestrictionSchema,D as ProgressiveDeliveryRollbackRefSchema,Je as ProgressiveDeliveryRolloutRefSchema,ne as ProviderPolicySchema,ce as UnsatisfiableRequirementReportSchema,ie as WorkloadEnvelopeSchema,Ai as assertInfraOpsSpecValid,wi as assertInfrastructureIntentV2Valid,ze as canonicalizeInfrastructureIntent,L as compareArchitectureCandidates,zt as deploymentReleaseLoopFixture,Bt as digestInfrastructureIntent,$t as incidentLoopFixture,Ut as infrastructureIntentV2Fixture,kt as validateInfraOpsSpec,Ne as validateInfrastructureIntentV2};

package/dist/infra-ops-spec.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/intent-architecture.d.ts

@@ -0,0 +1,104 @@
+import { z } from 'zod';
+export declare const InfrastructureCapabilityKindSchema: z.ZodEnum<{
+    cache: "cache";
+    ci: "ci";
+    compute: "compute";
+    database: "database";
+    email: "email";
+    network: "network";
+    object_storage: "object_storage";
+    observability: "observability";
+    queue: "queue";
+    secrets: "secrets";
+}>;
+export type InfrastructureCapabilityKind = z.infer<typeof InfrastructureCapabilityKindSchema>;
+/** A logical capability independent of a concrete provider product. */
+export declare const LogicalCapabilitySchema: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodEnum<{
+        cache: "cache";
+        ci: "ci";
+        compute: "compute";
+        database: "database";
+        email: "email";
+        network: "network";
+        object_storage: "object_storage";
+        observability: "observability";
+        queue: "queue";
+        secrets: "secrets";
+    }>;
+    purpose: z.ZodString;
+    requirementIds: z.ZodArray<z.ZodString>;
+    dependsOnCapabilityIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type LogicalCapability = z.infer<typeof LogicalCapabilitySchema>;
+/** Provider-neutral architecture composed solely from logical capabilities. */
+export declare const LogicalArchitectureSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    workloadEnvelopeId: z.ZodString;
+    capabilityIds: z.ZodArray<z.ZodString>;
+    restrictionIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type LogicalArchitecture = z.infer<typeof LogicalArchitectureSchema>;
+/** Declarative binding from a logical capability to an approved target class. */
+export declare const OperationalBindingSchema: z.ZodObject<{
+    id: z.ZodString;
+    architectureId: z.ZodString;
+    capabilityId: z.ZodString;
+    environmentId: z.ZodString;
+    targetClass: z.ZodString;
+    providerClass: z.ZodOptional<z.ZodString>;
+    region: z.ZodString;
+    evidenceRefs: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type OperationalBinding = z.infer<typeof OperationalBindingSchema>;
+export declare const EvolutionTriggerSchema: z.ZodObject<{
+    id: z.ZodString;
+    metric: z.ZodString;
+    operator: z.ZodEnum<{
+        eq: "eq";
+        gt: "gt";
+        gte: "gte";
+        lt: "lt";
+        lte: "lte";
+    }>;
+    threshold: z.ZodNumber;
+    observationWindowMinutes: z.ZodNumber;
+    action: z.ZodEnum<{
+        migrate: "migrate";
+        replan: "replan";
+        review: "review";
+    }>;
+}, z.core.$strict>;
+export type EvolutionTrigger = z.infer<typeof EvolutionTriggerSchema>;
+/** Controls when and how an approved architecture may evolve. */
+export declare const EvolutionPolicySchema: z.ZodObject<{
+    id: z.ZodString;
+    architectureId: z.ZodString;
+    triggerIds: z.ZodArray<z.ZodString>;
+    minimumReviewIntervalDays: z.ZodNumber;
+    allowedChangeKinds: z.ZodArray<z.ZodEnum<{
+        rebind: "rebind";
+        replace: "replace";
+        retire: "retire";
+        scale: "scale";
+    }>>;
+    approvalRequirementIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type EvolutionPolicy = z.infer<typeof EvolutionPolicySchema>;
+/** Time-bounded exception whose child scopes and lifetime may only tighten. */
+export declare const ConstraintWaiverSchema: z.ZodObject<{
+    id: z.ZodString;
+    restrictionId: z.ZodString;
+    scope: z.ZodObject<{
+        architectureIds: z.ZodArray<z.ZodString>;
+        environmentIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    reason: z.ZodString;
+    issuedAt: z.ZodString;
+    expiresAt: z.ZodString;
+    approvedByRef: z.ZodString;
+    inheritedFromWaiverId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ConstraintWaiver = z.infer<typeof ConstraintWaiverSchema>;

package/dist/intent-architecture.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as t}from"zod";var e=t.string().min(1),i=t.enum(["compute","database","cache","queue","object_storage","email","network","secrets","ci","observability"]),a=t.object({id:e,kind:i,purpose:e,requirementIds:t.array(e),dependsOnCapabilityIds:t.array(e)}).strict(),o=t.object({id:e,name:e,workloadEnvelopeId:e,capabilityIds:t.array(e).min(1),restrictionIds:t.array(e)}).strict(),n=t.object({id:e,architectureId:e,capabilityId:e,environmentId:e,targetClass:e,providerClass:e.optional(),region:e,evidenceRefs:t.array(e)}).strict(),c=t.object({id:e,metric:e,operator:t.enum(["gt","gte","lt","lte","eq"]),threshold:t.number().finite(),observationWindowMinutes:t.number().int().positive(),action:t.enum(["review","replan","migrate"])}).strict(),s=t.object({id:e,architectureId:e,triggerIds:t.array(e).min(1),minimumReviewIntervalDays:t.number().int().nonnegative(),allowedChangeKinds:t.array(t.enum(["scale","rebind","replace","retire"])).min(1),approvalRequirementIds:t.array(e)}).strict(),p=t.object({id:e,restrictionId:e,scope:t.object({architectureIds:t.array(e).min(1),environmentIds:t.array(e).min(1)}).strict(),reason:e,issuedAt:t.string().datetime({offset:!0}),expiresAt:t.string().datetime({offset:!0}),approvedByRef:e,inheritedFromWaiverId:e.optional()}).strict();export{p as ConstraintWaiverSchema,s as EvolutionPolicySchema,c as EvolutionTriggerSchema,i as InfrastructureCapabilityKindSchema,o as LogicalArchitectureSchema,a as LogicalCapabilitySchema,n as OperationalBindingSchema};

package/dist/intent-canonical.d.ts

@@ -0,0 +1,4 @@
+/** Stable JSON representation used to bind handoffs and review evidence. */
+export declare function canonicalizeInfrastructureIntent(value: unknown): string;
+/** SHA-256 digest of the stable JSON representation. */
+export declare function digestInfrastructureIntent(value: unknown): string;

package/dist/intent-canonical.js

@@ -0,0 +1,2 @@
+// @bun
+import{createHash as o}from"crypto";function i(n){return JSON.stringify(e(n))}function c(n){let r=i(n);return`sha256:${o("sha256").update(r).digest("hex")}`}function e(n){if(n===null||typeof n==="string"||typeof n==="boolean")return n;if(typeof n==="number"){if(!Number.isFinite(n))throw TypeError("Cannot canonicalize number");return n}if(Array.isArray(n))return n.map(e);if(typeof n==="object")return Object.fromEntries(Object.entries(n).filter(([,r])=>r!==void 0).sort(([r],[t])=>r.localeCompare(t)).map(([r,t])=>[r,e(t)]));throw TypeError(`Cannot canonicalize ${typeof n}`)}export{i as canonicalizeInfrastructureIntent,c as digestInfrastructureIntent};

package/dist/intent-comparison.d.ts

@@ -0,0 +1,8 @@
+import type { ArchitectureCandidate } from './intent-decisions.js';
+export interface CandidateComparisonResult {
+    eligibleCandidateIds: string[];
+    rejectedCandidateIds: string[];
+    paretoCandidateIds: string[];
+}
+/** Reject hard violations, then compute a stable multi-objective Pareto frontier. */
+export declare function compareArchitectureCandidates(candidates: readonly ArchitectureCandidate[]): CandidateComparisonResult;

package/dist/intent-comparison.js

@@ -0,0 +1,2 @@
+// @bun
+var n=["cost","complexity","migrationRisk"],c=["reliability","performance","scalability","portability"];function l(o){let r=[...o].sort((e,t)=>e.id.localeCompare(t.id)),s=r.filter((e)=>e.hardViolationIds.length),i=r.filter((e)=>!e.hardViolationIds.length),a=i.filter((e)=>!i.some((t)=>t.id!==e.id&&d(t,e)));return{eligibleCandidateIds:i.map(({id:e})=>e),rejectedCandidateIds:s.map(({id:e})=>e),paretoCandidateIds:a.map(({id:e})=>e)}}function d(o,r){let s=n.every((t)=>o.scores[t]<=r.scores[t]),i=c.every((t)=>o.scores[t]>=r.scores[t]),a=n.some((t)=>o.scores[t]<r.scores[t]),e=c.some((t)=>o.scores[t]>r.scores[t]);return s&&i&&(a||e)}export{l as compareArchitectureCandidates};

package/dist/intent-core.d.ts

@@ -0,0 +1,98 @@
+import { z } from 'zod';
+/** A measurable or qualitative constraint needed to achieve an operational goal. */
+export declare const OperationalRequirementSchema: z.ZodObject<{
+    id: z.ZodString;
+    goalId: z.ZodString;
+    category: z.ZodEnum<{
+        availability: "availability";
+        capacity: "capacity";
+        cost: "cost";
+        data: "data";
+        latency: "latency";
+        operability: "operability";
+        portability: "portability";
+        recovery: "recovery";
+        security: "security";
+    }>;
+    description: z.ZodString;
+    criticality: z.ZodEnum<{
+        hard: "hard";
+        soft: "soft";
+    }>;
+    measure: z.ZodOptional<z.ZodString>;
+    target: z.ZodOptional<z.ZodNumber>;
+    unit: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type OperationalRequirement = z.infer<typeof OperationalRequirementSchema>;
+/** Business-facing outcome whose requirements drive infrastructure decisions. */
+export declare const OperationalGoalSchema: z.ZodObject<{
+    id: z.ZodString;
+    statement: z.ZodString;
+    priority: z.ZodEnum<{
+        critical: "critical";
+        high: "high";
+        low: "low";
+        medium: "medium";
+    }>;
+    requirementIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type OperationalGoal = z.infer<typeof OperationalGoalSchema>;
+/** Provider-neutral workload and recovery bounds used for architecture sizing. */
+export declare const WorkloadEnvelopeSchema: z.ZodObject<{
+    id: z.ZodString;
+    concurrentUsers: z.ZodNumber;
+    requestsPerSecond: z.ZodNumber;
+    burstMultiplier: z.ZodNumber;
+    latencyP95Ms: z.ZodNumber;
+    availabilityPercent: z.ZodNumber;
+    dataVolumeGb: z.ZodNumber;
+    monthlyDataGrowthPercent: z.ZodNumber;
+    storageGb: z.ZodNumber;
+    monthlyEgressGb: z.ZodNumber;
+    backgroundJobsPerHour: z.ZodNumber;
+    rpoMinutes: z.ZodNumber;
+    rtoMinutes: z.ZodNumber;
+    regions: z.ZodArray<z.ZodString>;
+    forecastMonths: z.ZodNumber;
+    annualTrafficGrowthPercent: z.ZodNumber;
+}, z.core.$strict>;
+export type WorkloadEnvelope = z.infer<typeof WorkloadEnvelopeSchema>;
+/** A hard or soft restriction imposed by product, policy, or operations. */
+export declare const PlatformRestrictionSchema: z.ZodObject<{
+    id: z.ZodString;
+    requirementId: z.ZodOptional<z.ZodString>;
+    scopeIds: z.ZodArray<z.ZodString>;
+    kind: z.ZodEnum<{
+        capability: "capability";
+        compliance: "compliance";
+        cost: "cost";
+        network: "network";
+        operability: "operability";
+        residency: "residency";
+        technology: "technology";
+    }>;
+    rule: z.ZodString;
+    severity: z.ZodEnum<{
+        hard: "hard";
+        soft: "soft";
+    }>;
+    rationale: z.ZodString;
+}, z.core.$strict>;
+export type PlatformRestriction = z.infer<typeof PlatformRestrictionSchema>;
+/** Organization policy for admissible providers without provider configuration. */
+export declare const ProviderPolicySchema: z.ZodObject<{
+    id: z.ZodString;
+    allowedProviderClasses: z.ZodArray<z.ZodString>;
+    deniedProviderClasses: z.ZodArray<z.ZodString>;
+    residencyRegions: z.ZodArray<z.ZodString>;
+    portabilityMinimum: z.ZodNumber;
+    managedServicePosture: z.ZodEnum<{
+        allow_managed: "allow_managed";
+        prefer_managed: "prefer_managed";
+        self_managed_only: "self_managed_only";
+    }>;
+    requiredCapabilities: z.ZodArray<z.ZodString>;
+    deniedCapabilities: z.ZodArray<z.ZodString>;
+    nonWaivableRestrictionIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type ProviderPolicy = z.infer<typeof ProviderPolicySchema>;

package/dist/intent-core.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as e}from"zod";var t=e.string().min(1),r=e.number().finite().nonnegative(),a=e.number().finite().positive(),i=e.number().finite().min(0).max(100),n=e.object({id:t,goalId:t,category:e.enum(["availability","capacity","cost","data","latency","operability","portability","recovery","security"]),description:t,criticality:e.enum(["hard","soft"]),measure:t.optional(),target:e.number().finite().optional(),unit:t.optional()}).strict(),c=e.object({id:t,statement:t,priority:e.enum(["low","medium","high","critical"]),requirementIds:e.array(t).min(1)}).strict(),s=e.object({id:t,concurrentUsers:r,requestsPerSecond:r,burstMultiplier:a,latencyP95Ms:a,availabilityPercent:i,dataVolumeGb:r,monthlyDataGrowthPercent:i,storageGb:r,monthlyEgressGb:r,backgroundJobsPerHour:r,rpoMinutes:r,rtoMinutes:r,regions:e.array(t).min(1),forecastMonths:e.number().int().positive(),annualTrafficGrowthPercent:i}).strict(),l=e.object({id:t,requirementId:t.optional(),scopeIds:e.array(t).min(1),kind:e.enum(["capability","compliance","cost","network","operability","residency","technology"]),rule:t,severity:e.enum(["hard","soft"]),rationale:t}).strict(),m=e.object({id:t,allowedProviderClasses:e.array(t),deniedProviderClasses:e.array(t),residencyRegions:e.array(t).min(1),portabilityMinimum:e.number().int().min(0).max(100),managedServicePosture:e.enum(["prefer_managed","allow_managed","self_managed_only"]),requiredCapabilities:e.array(t),deniedCapabilities:e.array(t),nonWaivableRestrictionIds:e.array(t)}).strict();export{c as OperationalGoalSchema,n as OperationalRequirementSchema,l as PlatformRestrictionSchema,m as ProviderPolicySchema,s as WorkloadEnvelopeSchema};

package/dist/intent-decisions.d.ts

@@ -0,0 +1,72 @@
+import { z } from 'zod';
+/** Comparable quality dimensions. Cost, complexity, and migration risk are minimized. */
+export declare const ArchitectureScoreSchema: z.ZodObject<{
+    cost: z.ZodNumber;
+    reliability: z.ZodNumber;
+    performance: z.ZodNumber;
+    scalability: z.ZodNumber;
+    portability: z.ZodNumber;
+    complexity: z.ZodNumber;
+    migrationRisk: z.ZodNumber;
+}, z.core.$strict>;
+export type ArchitectureScore = z.infer<typeof ArchitectureScoreSchema>;
+/** One evaluated realization of a logical architecture. */
+export declare const ArchitectureCandidateSchema: z.ZodObject<{
+    id: z.ZodString;
+    architectureId: z.ZodString;
+    bindingIds: z.ZodArray<z.ZodString>;
+    satisfiedRequirementIds: z.ZodArray<z.ZodString>;
+    hardViolationIds: z.ZodArray<z.ZodString>;
+    scores: z.ZodObject<{
+        cost: z.ZodNumber;
+        reliability: z.ZodNumber;
+        performance: z.ZodNumber;
+        scalability: z.ZodNumber;
+        portability: z.ZodNumber;
+        complexity: z.ZodNumber;
+        migrationRisk: z.ZodNumber;
+    }, z.core.$strict>;
+    assumptions: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type ArchitectureCandidate = z.infer<typeof ArchitectureCandidateSchema>;
+/** Deterministic result: hard-invalid candidates are excluded before Pareto ranking. */
+export declare const ArchitectureComparisonSchema: z.ZodObject<{
+    id: z.ZodString;
+    candidateIds: z.ZodArray<z.ZodString>;
+    rejectedCandidateIds: z.ZodArray<z.ZodString>;
+    paretoCandidateIds: z.ZodArray<z.ZodString>;
+    selectedCandidateId: z.ZodOptional<z.ZodString>;
+    rationale: z.ZodString;
+}, z.core.$strict>;
+export type ArchitectureComparison = z.infer<typeof ArchitectureComparisonSchema>;
+/** Architecture decision record bound to comparison evidence. */
+export declare const ArchitectureDecisionRecordSchema: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    status: z.ZodEnum<{
+        accepted: "accepted";
+        proposed: "proposed";
+        rejected: "rejected";
+        superseded: "superseded";
+    }>;
+    comparisonId: z.ZodString;
+    selectedCandidateId: z.ZodString;
+    requirementIds: z.ZodArray<z.ZodString>;
+    consequenceStatements: z.ZodArray<z.ZodString>;
+    supersedesAdrId: z.ZodOptional<z.ZodString>;
+    decidedAt: z.ZodString;
+}, z.core.$strict>;
+export type ArchitectureDecisionRecord = z.infer<typeof ArchitectureDecisionRecordSchema>;
+/** Explains why no candidate can satisfy all hard requirements. */
+export declare const UnsatisfiableRequirementReportSchema: z.ZodObject<{
+    id: z.ZodString;
+    requirementIds: z.ZodArray<z.ZodString>;
+    candidateViolationIds: z.ZodArray<z.ZodObject<{
+        candidateId: z.ZodString;
+        violationIds: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    conflictExplanation: z.ZodString;
+    resolutionOptions: z.ZodArray<z.ZodString>;
+    generatedAt: z.ZodString;
+}, z.core.$strict>;
+export type UnsatisfiableRequirementReport = z.infer<typeof UnsatisfiableRequirementReportSchema>;

package/dist/intent-decisions.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as t}from"zod";var e=t.string().min(1),r=t.number().finite().min(0).max(100),i=t.object({cost:r,reliability:r,performance:r,scalability:r,portability:r,complexity:r,migrationRisk:r}).strict(),c=t.object({id:e,architectureId:e,bindingIds:t.array(e).min(1),satisfiedRequirementIds:t.array(e),hardViolationIds:t.array(e),scores:i,assumptions:t.array(e)}).strict(),o=t.object({id:e,candidateIds:t.array(e).min(1),rejectedCandidateIds:t.array(e),paretoCandidateIds:t.array(e),selectedCandidateId:e.optional(),rationale:e}).strict(),n=t.object({id:e,title:e,status:t.enum(["proposed","accepted","superseded","rejected"]),comparisonId:e,selectedCandidateId:e,requirementIds:t.array(e).min(1),consequenceStatements:t.array(e).min(1),supersedesAdrId:e.optional(),decidedAt:t.string().datetime({offset:!0})}).strict(),s=t.object({id:e,requirementIds:t.array(e).min(1),candidateViolationIds:t.array(t.object({candidateId:e,violationIds:t.array(e).min(1)}).strict()).min(1),conflictExplanation:e,resolutionOptions:t.array(e).min(1),generatedAt:t.string().datetime({offset:!0})}).strict();export{c as ArchitectureCandidateSchema,o as ArchitectureComparisonSchema,n as ArchitectureDecisionRecordSchema,i as ArchitectureScoreSchema,s as UnsatisfiableRequirementReportSchema};

package/dist/intent-fixtures-decision.d.ts

@@ -0,0 +1,4 @@
+import type { InfrastructureIntentV2 } from './intent-types.js';
+type DecisionFixture = Pick<InfrastructureIntentV2, 'candidates' | 'comparisons' | 'adrs' | 'infrastructurePlans' | 'evolutionPlans' | 'handoffPackets' | 'handoffReceipts' | 'unsatisfiableReports'>;
+export declare const infrastructureIntentV2DecisionFixture: DecisionFixture;
+export {};

package/dist/intent-fixtures-decision.js

@@ -0,0 +1,2 @@
+// @bun
+var e=["compute","database","cache","queue","object_storage","email","network","secrets","ci","observability"].map((a)=>`binding-${a}`),i=`sha256:${"a".repeat(64)}`,t={candidates:[{id:"candidate-a",architectureId:"architecture-primary",bindingIds:e,satisfiedRequirementIds:["req-availability","req-portability"],hardViolationIds:[],scores:{cost:50,reliability:90,performance:85,scalability:90,portability:80,complexity:40,migrationRisk:30},assumptions:["Qualified capacity remains available."]},{id:"candidate-b",architectureId:"architecture-primary",bindingIds:e,satisfiedRequirementIds:["req-availability"],hardViolationIds:[],scores:{cost:60,reliability:80,performance:75,scalability:80,portability:70,complexity:50,migrationRisk:40},assumptions:["Manual scaling is acceptable."]},{id:"candidate-invalid",architectureId:"architecture-primary",bindingIds:e,satisfiedRequirementIds:["req-portability"],hardViolationIds:["req-availability"],scores:{cost:10,reliability:100,performance:100,scalability:100,portability:100,complexity:10,migrationRisk:10},assumptions:["Hard requirement is knowingly unmet."]}],comparisons:[{id:"comparison-primary",candidateIds:["candidate-a","candidate-b","candidate-invalid"],rejectedCandidateIds:["candidate-invalid"],paretoCandidateIds:["candidate-a"],selectedCandidateId:"candidate-a",rationale:"Candidate A dominates B after hard-violation rejection."}],adrs:[{id:"adr-primary",title:"Adopt portable regional service",status:"accepted",comparisonId:"comparison-primary",selectedCandidateId:"candidate-a",requirementIds:["req-availability","req-portability"],consequenceStatements:["Operate two regional failure domains."],decidedAt:"2026-08-03T00:00:00Z"}],infrastructurePlans:[{id:"plan-primary",adrId:"adr-primary",architectureId:"architecture-primary",candidateId:"candidate-a",steps:[{id:"step-bind",sequence:1,action:"Realize approved logical bindings.",bindingIds:e,prerequisiteStepIds:[],evidenceRefs:["evidence-plan-review"]}],rollbackPlanRef:"rollback:plan-primary",approvalRequirementIds:["approval-architecture-owner"]}],evolutionPlans:[],handoffPackets:[{id:"handoff-primary",infrastructurePlanId:"plan-primary",recipientRef:"workflow:infra-implementation",contractDigest:i,artifactRefs:["artifact:plan-primary"],requiredEvidenceRefs:["evidence:implementation-receipt"],issuedAt:"2026-08-03T01:00:00Z",expiresAt:"2026-08-10T01:00:00Z",containsCredentials:!1}],handoffReceipts:[{id:"receipt-primary",packetId:"handoff-primary",recipientRef:"workflow:infra-implementation",status:"accepted",receivedDigest:i,evidenceRefs:["evidence:receipt-primary"],receivedAt:"2026-08-03T01:05:00Z"}],unsatisfiableReports:[]};export{t as infrastructureIntentV2DecisionFixture};

package/dist/intent-fixtures.d.ts

@@ -0,0 +1,3 @@
+import type { InfrastructureIntentV2 } from './intent-types.js';
+/** Canonical provider-neutral V2 intent fixture covering every capability family. */
+export declare const infrastructureIntentV2Fixture: InfrastructureIntentV2;

package/dist/intent-fixtures.js

@@ -0,0 +1,2 @@
+// @bun
+var r=["compute","database","cache","queue","object_storage","email","network","secrets","ci","observability"].map((e)=>`binding-${e}`),n=`sha256:${"a".repeat(64)}`,s={candidates:[{id:"candidate-a",architectureId:"architecture-primary",bindingIds:r,satisfiedRequirementIds:["req-availability","req-portability"],hardViolationIds:[],scores:{cost:50,reliability:90,performance:85,scalability:90,portability:80,complexity:40,migrationRisk:30},assumptions:["Qualified capacity remains available."]},{id:"candidate-b",architectureId:"architecture-primary",bindingIds:r,satisfiedRequirementIds:["req-availability"],hardViolationIds:[],scores:{cost:60,reliability:80,performance:75,scalability:80,portability:70,complexity:50,migrationRisk:40},assumptions:["Manual scaling is acceptable."]},{id:"candidate-invalid",architectureId:"architecture-primary",bindingIds:r,satisfiedRequirementIds:["req-portability"],hardViolationIds:["req-availability"],scores:{cost:10,reliability:100,performance:100,scalability:100,portability:100,complexity:10,migrationRisk:10},assumptions:["Hard requirement is knowingly unmet."]}],comparisons:[{id:"comparison-primary",candidateIds:["candidate-a","candidate-b","candidate-invalid"],rejectedCandidateIds:["candidate-invalid"],paretoCandidateIds:["candidate-a"],selectedCandidateId:"candidate-a",rationale:"Candidate A dominates B after hard-violation rejection."}],adrs:[{id:"adr-primary",title:"Adopt portable regional service",status:"accepted",comparisonId:"comparison-primary",selectedCandidateId:"candidate-a",requirementIds:["req-availability","req-portability"],consequenceStatements:["Operate two regional failure domains."],decidedAt:"2026-08-03T00:00:00Z"}],infrastructurePlans:[{id:"plan-primary",adrId:"adr-primary",architectureId:"architecture-primary",candidateId:"candidate-a",steps:[{id:"step-bind",sequence:1,action:"Realize approved logical bindings.",bindingIds:r,prerequisiteStepIds:[],evidenceRefs:["evidence-plan-review"]}],rollbackPlanRef:"rollback:plan-primary",approvalRequirementIds:["approval-architecture-owner"]}],evolutionPlans:[],handoffPackets:[{id:"handoff-primary",infrastructurePlanId:"plan-primary",recipientRef:"workflow:infra-implementation",contractDigest:n,artifactRefs:["artifact:plan-primary"],requiredEvidenceRefs:["evidence:implementation-receipt"],issuedAt:"2026-08-03T01:00:00Z",expiresAt:"2026-08-10T01:00:00Z",containsCredentials:!1}],handoffReceipts:[{id:"receipt-primary",packetId:"handoff-primary",recipientRef:"workflow:infra-implementation",status:"accepted",receivedDigest:n,evidenceRefs:["evidence:receipt-primary"],receivedAt:"2026-08-03T01:05:00Z"}],unsatisfiableReports:[]};var a=["compute","database","cache","queue","object_storage","email","network","secrets","ci","observability"],t=a.map((e)=>`cap-${e}`),o=a.map((e)=>`binding-${e}`),l={id:"intent-customer-api-v2",version:"2.0.0",goals:[{id:"goal-resilience",statement:"Keep the customer API available through regional faults.",priority:"critical",requirementIds:["req-availability","req-portability"]}],requirements:[{id:"req-availability",goalId:"goal-resilience",category:"availability",description:"Monthly service availability",criticality:"hard",measure:"availability_percent",target:99.95,unit:"percent"},{id:"req-portability",goalId:"goal-resilience",category:"portability",description:"Retain replaceable infrastructure boundaries",criticality:"soft"}],workloadEnvelopes:[{id:"workload-primary",concurrentUsers:2000,requestsPerSecond:800,burstMultiplier:3,latencyP95Ms:250,availabilityPercent:99.95,dataVolumeGb:500,monthlyDataGrowthPercent:8,storageGb:750,monthlyEgressGb:2000,backgroundJobsPerHour:5000,rpoMinutes:5,rtoMinutes:30,regions:["eu-west","eu-central"],forecastMonths:24,annualTrafficGrowthPercent:40}],restrictions:[{id:"restriction-residency",requirementId:"req-availability",scopeIds:["architecture-primary"],kind:"residency",rule:"Customer data remains in approved EU regions.",severity:"hard",rationale:"Regulatory boundary"},{id:"restriction-cache",scopeIds:["architecture-primary"],kind:"technology",rule:"Cache may be temporarily omitted in preview.",severity:"soft",rationale:"Preview cost control"}],providerPolicies:[{id:"policy-neutral",allowedProviderClasses:["qualified-cloud"],deniedProviderClasses:["unqualified-cloud"],residencyRegions:["eu-west","eu-central"],portabilityMinimum:70,managedServicePosture:"prefer_managed",requiredCapabilities:["encryption-at-rest"],deniedCapabilities:["public-database"],nonWaivableRestrictionIds:["restriction-residency"]}],capabilities:a.map((e,i)=>({id:t[i],kind:e,purpose:`Provide ${e.replace("_"," ")} capability.`,requirementIds:["req-availability"],dependsOnCapabilityIds:i===0?[]:["cap-compute"]})),architectures:[{id:"architecture-primary",name:"Portable regional service",workloadEnvelopeId:"workload-primary",capabilityIds:t,restrictionIds:["restriction-residency","restriction-cache"]}],bindings:a.map((e,i)=>({id:o[i],architectureId:"architecture-primary",capabilityId:t[i],environmentId:"production-eu",targetClass:`managed-${e}`,providerClass:"qualified-cloud",region:"eu-west",evidenceRefs:[`evidence-${e}`]})),evolutionTriggers:[{id:"trigger-load",metric:"requests_per_second",operator:"gte",threshold:700,observationWindowMinutes:15,action:"replan"}],evolutionPolicies:[{id:"evolution-primary",architectureId:"architecture-primary",triggerIds:["trigger-load"],minimumReviewIntervalDays:30,allowedChangeKinds:["scale","rebind"],approvalRequirementIds:["approval-architecture-owner"]}],waivers:[{id:"waiver-preview",restrictionId:"restriction-cache",scope:{architectureIds:["architecture-primary"],environmentIds:["preview","development"]},reason:"Validate traffic assumptions before provisioning cache.",issuedAt:"2026-08-01T00:00:00Z",expiresAt:"2026-09-01T00:00:00Z",approvedByRef:"owner:platform"},{id:"waiver-development",restrictionId:"restriction-cache",scope:{architectureIds:["architecture-primary"],environmentIds:["development"]},reason:"Tightened child waiver for development only.",issuedAt:"2026-08-02T00:00:00Z",expiresAt:"2026-08-15T00:00:00Z",approvedByRef:"owner:platform",inheritedFromWaiverId:"waiver-preview"}],...s};export{l as infrastructureIntentV2Fixture};

package/dist/intent-plans.d.ts

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+/** Executable-neutral plan for realizing an accepted infrastructure decision. */
+export declare const InfrastructurePlanSchema: z.ZodObject<{
+    id: z.ZodString;
+    adrId: z.ZodString;
+    architectureId: z.ZodString;
+    candidateId: z.ZodString;
+    steps: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        sequence: z.ZodNumber;
+        action: z.ZodString;
+        bindingIds: z.ZodArray<z.ZodString>;
+        prerequisiteStepIds: z.ZodArray<z.ZodString>;
+        evidenceRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    rollbackPlanRef: z.ZodString;
+    approvalRequirementIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type InfrastructurePlan = z.infer<typeof InfrastructurePlanSchema>;
+/** Planned transition between accepted architecture decisions. */
+export declare const ArchitectureEvolutionPlanSchema: z.ZodObject<{
+    id: z.ZodString;
+    evolutionPolicyId: z.ZodString;
+    triggerId: z.ZodString;
+    fromAdrId: z.ZodString;
+    toAdrId: z.ZodString;
+    infrastructurePlanId: z.ZodString;
+    migrationRisk: z.ZodEnum<{
+        critical: "critical";
+        high: "high";
+        low: "low";
+        medium: "medium";
+    }>;
+    continuityRequirementIds: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type ArchitectureEvolutionPlan = z.infer<typeof ArchitectureEvolutionPlanSchema>;
+/** Redacted handoff from planning into an authorized implementation system. */
+export declare const InfrastructureHandoffPacketSchema: z.ZodObject<{
+    id: z.ZodString;
+    infrastructurePlanId: z.ZodString;
+    recipientRef: z.ZodString;
+    contractDigest: z.ZodString;
+    artifactRefs: z.ZodArray<z.ZodString>;
+    requiredEvidenceRefs: z.ZodArray<z.ZodString>;
+    issuedAt: z.ZodString;
+    expiresAt: z.ZodString;
+    containsCredentials: z.ZodLiteral<false>;
+}, z.core.$strict>;
+export type InfrastructureHandoffPacket = z.infer<typeof InfrastructureHandoffPacketSchema>;
+/** Receipt acknowledging a handoff without claiming provider-side execution. */
+export declare const InfrastructureHandoffReceiptSchema: z.ZodObject<{
+    id: z.ZodString;
+    packetId: z.ZodString;
+    recipientRef: z.ZodString;
+    status: z.ZodEnum<{
+        accepted: "accepted";
+        expired: "expired";
+        rejected: "rejected";
+    }>;
+    receivedDigest: z.ZodString;
+    evidenceRefs: z.ZodArray<z.ZodString>;
+    receivedAt: z.ZodString;
+}, z.core.$strict>;
+export type InfrastructureHandoffReceipt = z.infer<typeof InfrastructureHandoffReceiptSchema>;

package/dist/intent-plans.js

@@ -0,0 +1,2 @@
+// @bun
+import{z as t}from"zod";var e=t.string().min(1),r=t.object({id:e,sequence:t.number().int().positive(),action:e,bindingIds:t.array(e),prerequisiteStepIds:t.array(e),evidenceRefs:t.array(e)}).strict(),i=t.object({id:e,adrId:e,architectureId:e,candidateId:e,steps:t.array(r).min(1),rollbackPlanRef:e,approvalRequirementIds:t.array(e)}).strict(),c=t.object({id:e,evolutionPolicyId:e,triggerId:e,fromAdrId:e,toAdrId:e,infrastructurePlanId:e,migrationRisk:t.enum(["low","medium","high","critical"]),continuityRequirementIds:t.array(e).min(1)}).strict(),n=t.object({id:e,infrastructurePlanId:e,recipientRef:e,contractDigest:t.string().regex(/^sha256:[a-f0-9]{64}$/),artifactRefs:t.array(e).min(1),requiredEvidenceRefs:t.array(e),issuedAt:t.string().datetime({offset:!0}),expiresAt:t.string().datetime({offset:!0}),containsCredentials:t.literal(!1)}).strict(),s=t.object({id:e,packetId:e,recipientRef:e,status:t.enum(["accepted","rejected","expired"]),receivedDigest:t.string().regex(/^sha256:[a-f0-9]{64}$/),evidenceRefs:t.array(e),receivedAt:t.string().datetime({offset:!0})}).strict();export{c as ArchitectureEvolutionPlanSchema,n as InfrastructureHandoffPacketSchema,s as InfrastructureHandoffReceiptSchema,i as InfrastructurePlanSchema};