@serve.zone/interfaces 13.0.1 → 15.0.0

package/changelog.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 2026-07-20 - 15.0.0
+
+### Breaking Changes
+
+- add scoped immutable deployment operation contracts (deployment)
+  - Replace machine deployment grant fields with an exact organization/service or organization/service-slot grant and use JWT-only credentials on scoped deployment RPCs.
+  - Add revisioned reserve, status, route promotion, retry, and cleanup contracts with complete configuration, rollout, wildcard-route, readiness, and TLS evidence validation.
+  - Require authenticated registry evidence bound to the operation, actor, service, image, registry host, repository, exact tag, root digest, and OCI index media type.
+  - Require promotion and rollback requests to carry exact operation/repository/tag/digest fences and immutable plans and verified runtime tasks to expose exact rollout and digest evidence.
+
+## 2026-07-19 - 14.0.0
+
+### Breaking Changes
+
+- distinguish read-only observed runtime digests from verified immutable rollout digests (deployment)
+  - Report explicit observed-digest replica counts without promoting mutable workloads to verified status.
+
 ## 2026-07-19 - 13.0.1
 
 ### Fixes

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@serve.zone/interfaces',
-    version: '13.0.1',
+    version: '15.0.0',
     description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx3QkFBd0I7SUFDOUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLHVGQUF1RjtDQUNyRyxDQUFBIn0=

package/dist_ts/data/deploymentoperation.d.ts

@@ -0,0 +1,161 @@
+import type { IDeploymentPreflightProposedConfiguration, IDeploymentPreflightRuntimeTask } from './deploymentpreflight.js';
+import type { IImageRolloutStatus, IImmutableImageDeploymentPlan, TSha256Digest } from './immutableimage.js';
+import type { IRegistryTarget } from './registry.js';
+import type { TServiceTargetPortRef } from './serviceports.js';
+export type TDeploymentOperationMode = 'existing-service' | 'greenfield';
+export type TDeploymentOperationPhase = 'reserve' | 'promote' | 'route';
+interface IDeploymentReservationInputBase {
+    organizationId: string;
+    serviceId: string;
+    idempotencyKey: string;
+    sourceRevision: string;
+    version: string;
+    intentDigest: TSha256Digest;
+    proposedConfiguration: IDeploymentPreflightProposedConfiguration;
+    releaseTag: string;
+    routes: IDeploymentRouteRequest[];
+}
+export interface IExistingServiceDeploymentReservationInput extends IDeploymentReservationInputBase {
+    mode: 'existing-service';
+    expectedRolloutGeneration: number;
+    expectedCurrentRolloutId?: string;
+}
+export interface IGreenfieldServiceDeploymentReservationInput extends IDeploymentReservationInputBase {
+    mode: 'greenfield';
+    expectedRolloutGeneration?: never;
+    expectedCurrentRolloutId?: never;
+}
+export type IDeploymentReservationInput = IExistingServiceDeploymentReservationInput | IGreenfieldServiceDeploymentReservationInput;
+export type TDeploymentOperationState = 'reserving' | 'reserved' | 'provisioning' | 'awaiting-image' | 'image-recorded' | 'promoting-image' | 'rolling-out' | 'ready-for-route' | 'promoting-route' | 'verifying-route' | 'succeeded' | 'rolling-back' | 'rolled-back' | 'failed' | 'cleaning' | 'cleaned';
+export interface IDeploymentRouteRequest {
+    hostname: string;
+    targetPort: Extract<TServiceTargetPortRef, number>;
+    /** Required exact one-label hostname used to verify a wildcard route. */
+    verificationHostname?: string;
+    readinessPath?: string;
+    expectedStatusCodes?: number[];
+}
+export interface IDeploymentRouteClaimTarget {
+    hostname: string;
+    bucketHostname: string;
+    wildcard: boolean;
+}
+export declare const canonicalizeDeploymentHostname: (hostnameArg: unknown) => string | undefined;
+/**
+ * Wildcards match exactly one label. Exact siblings share a bucket document
+ * but may coexist; a wildcard claim excludes every exact name in its bucket.
+ */
+export declare const getDeploymentRouteClaimTarget: (hostnameArg: string) => IDeploymentRouteClaimTarget | undefined;
+export declare const getDeploymentRouteVerificationHostname: (routeArg: IDeploymentRouteRequest) => string | undefined;
+export declare const normalizeDeploymentReadinessPath: (pathArg?: unknown) => string | undefined;
+export declare const validateDeploymentProposedConfiguration: (configurationArg: unknown) => string[];
+export declare const validateDeploymentReservationInput: (inputArg: unknown) => string[];
+interface IDeploymentRouteVerificationEvidenceBase {
+    hostname: string;
+    url: string;
+    checkedAt: number;
+    resolvedAddresses: string[];
+    rolloutId: string;
+    rolloutGeneration: number;
+    expectedDigest: TSha256Digest;
+}
+export interface IDeploymentRouteVerificationSuccessEvidence extends IDeploymentRouteVerificationEvidenceBase {
+    outcome: 'succeeded';
+    tls: {
+        authorized: true;
+        servername: string;
+        subjectAlternativeNames: string[];
+        validFrom?: string;
+        validTo?: string;
+    };
+    http: {
+        statusCode: number;
+        redirected: false;
+    };
+    readiness: {
+        path: string;
+        expectedStatusCodes: number[];
+        ready: true;
+    };
+}
+export interface IDeploymentRouteVerificationFailureEvidence extends IDeploymentRouteVerificationEvidenceBase {
+    outcome: 'failed';
+    stage: 'dns' | 'address-policy' | 'connect' | 'tls' | 'http' | 'readiness';
+    code: string;
+    message: string;
+    tls?: IDeploymentRouteVerificationSuccessEvidence['tls'];
+    http?: IDeploymentRouteVerificationSuccessEvidence['http'];
+    readiness?: IDeploymentRouteVerificationSuccessEvidence['readiness'];
+}
+export type IDeploymentRouteVerificationEvidence = IDeploymentRouteVerificationSuccessEvidence | IDeploymentRouteVerificationFailureEvidence;
+export interface IDeploymentOperationFailure {
+    code: string;
+    message: string;
+    retryable: boolean;
+    failedAt: number;
+}
+/**
+ * Durable deployment fence. All state transitions compare-and-set both id and
+ * revision. Claim keys are server-generated and never accepted as authority.
+ */
+export interface IServiceDeploymentOperation {
+    id: string;
+    revision: number;
+    data: {
+        mode: TDeploymentOperationMode;
+        organizationId: string;
+        serviceId: string;
+        actorUserId: string;
+        idempotencyKey: string;
+        requestDigest: TSha256Digest;
+        sourceRevision: string;
+        version: string;
+        intentDigest: TSha256Digest;
+        configurationDigest: TSha256Digest;
+        proposedConfiguration: IDeploymentPreflightProposedConfiguration;
+        namespace: string;
+        registryTarget: IRegistryTarget;
+        releaseTag: string;
+        routes: IDeploymentRouteRequest[];
+        claimKeys: string[];
+        state: TDeploymentOperationState;
+        releaseId?: string;
+        registryRootDigest?: TSha256Digest;
+        rolloutId?: string;
+        rolloutGeneration?: number;
+        routeGeneration?: number;
+        routeVerification?: IDeploymentRouteVerificationEvidence[];
+        failure?: IDeploymentOperationFailure;
+        createdAt: number;
+        updatedAt: number;
+    };
+}
+export interface IServiceDeploymentStatus {
+    operation: IServiceDeploymentOperation;
+    imageDeployment?: IImmutableImageDeploymentPlan;
+    imageRolloutStatus?: IImageRolloutStatus;
+    runtimeTasks: IDeploymentRuntimeTaskEvidence[];
+    routeVerification: IDeploymentRouteVerificationEvidence[];
+    immutableRolloutSucceeded: boolean;
+    runtimeDigestVerified: boolean;
+    routeVerified: boolean;
+    succeeded: boolean;
+}
+interface IDeploymentRuntimeTaskEvidenceBase extends Omit<IDeploymentPreflightRuntimeTask, 'verificationStatus' | 'observedDigest' | 'reportedDigest'> {
+    rolloutId: string;
+    rolloutGeneration: number;
+    expectedDigest: TSha256Digest;
+    observedAt: number;
+}
+export interface IVerifiedDeploymentRuntimeTaskEvidence extends IDeploymentRuntimeTaskEvidenceBase {
+    verificationStatus: 'verified';
+    observedDigest: TSha256Digest;
+    reportedDigest: TSha256Digest;
+}
+export interface IUnverifiedDeploymentRuntimeTaskEvidence extends IDeploymentRuntimeTaskEvidenceBase {
+    verificationStatus: 'missing' | 'mismatched';
+    observedDigest?: TSha256Digest;
+    reportedDigest?: TSha256Digest;
+}
+export type IDeploymentRuntimeTaskEvidence = IVerifiedDeploymentRuntimeTaskEvidence | IUnverifiedDeploymentRuntimeTaskEvidence;
+export {};

package/dist_ts/data/deploymentoperation.js

@@ -0,0 +1,213 @@
+import { normalizeImmutableReleaseTag, normalizeSha256Digest } from './immutableimage.js';
+const canonicalHostnameRegex = /^(?:\*\.)?[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$/;
+export const canonicalizeDeploymentHostname = (hostnameArg) => {
+    if (typeof hostnameArg !== 'string')
+        return undefined;
+    const hostname = hostnameArg.trim().toLowerCase().replace(/\.$/, '');
+    return hostname.length <= 253 && canonicalHostnameRegex.test(hostname)
+        ? hostname
+        : undefined;
+};
+/**
+ * Wildcards match exactly one label. Exact siblings share a bucket document
+ * but may coexist; a wildcard claim excludes every exact name in its bucket.
+ */
+export const getDeploymentRouteClaimTarget = (hostnameArg) => {
+    const hostname = canonicalizeDeploymentHostname(hostnameArg);
+    if (!hostname)
+        return undefined;
+    const wildcard = hostname.startsWith('*.');
+    const labels = (wildcard ? hostname.slice(2) : hostname).split('.');
+    const bucketHostname = wildcard ? labels.join('.') : labels.slice(1).join('.');
+    if (!bucketHostname || (wildcard && labels.length < 2))
+        return undefined;
+    return { hostname, bucketHostname, wildcard };
+};
+export const getDeploymentRouteVerificationHostname = (routeArg) => {
+    const target = getDeploymentRouteClaimTarget(routeArg.hostname);
+    if (!target)
+        return undefined;
+    if (!target.wildcard) {
+        return routeArg.verificationHostname === undefined
+            || routeArg.verificationHostname === target.hostname
+            ? target.hostname
+            : undefined;
+    }
+    if (!routeArg.verificationHostname)
+        return undefined;
+    const verificationTarget = getDeploymentRouteClaimTarget(routeArg.verificationHostname);
+    return verificationTarget
+        && !verificationTarget.wildcard
+        && verificationTarget.bucketHostname === target.bucketHostname
+        ? verificationTarget.hostname
+        : undefined;
+};
+export const normalizeDeploymentReadinessPath = (pathArg) => {
+    if (pathArg !== undefined && typeof pathArg !== 'string')
+        return undefined;
+    const path = pathArg || '/';
+    return /^\/(?!\/)[A-Za-z0-9._~!$&'()*+,;=:@%\/-]{0,1023}$/.test(path)
+        ? path
+        : undefined;
+};
+const deploymentIdentifierRegex = /^[A-Za-z0-9][A-Za-z0-9:._-]{0,199}$/;
+const fullGitRevisionRegex = /^[a-f0-9]{40}$/;
+const semanticVersionRegex = /^(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)\.(?:0|[1-9][0-9]*)(?:-(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9][0-9]*|[0-9]*[A-Za-z-][0-9A-Za-z-]*))*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
+const isRecord = (valueArg) => (Boolean(valueArg) && typeof valueArg === 'object' && !Array.isArray(valueArg));
+const validateStringArray = (valueArg, maxItemsArg, validatorArg) => Array.isArray(valueArg)
+    && valueArg.length <= maxItemsArg
+    && valueArg.every((itemArg) => typeof itemArg === 'string'
+        && itemArg.length > 0
+        && itemArg.length <= 253
+        && validatorArg(itemArg))
+    && new Set(valueArg).size === valueArg.length;
+export const validateDeploymentProposedConfiguration = (configurationArg) => {
+    if (!isRecord(configurationArg))
+        return ['proposedConfiguration must be an object'];
+    const errors = [];
+    if (configurationArg.schemaVersion !== 1)
+        errors.push('schemaVersion must be 1');
+    if (typeof configurationArg.declarationComplete !== 'boolean') {
+        errors.push('declarationComplete must be boolean');
+    }
+    if (typeof configurationArg.projectName !== 'string'
+        || !configurationArg.projectName.trim()
+        || configurationArg.projectName.length > 200) {
+        errors.push('projectName must be bounded and non-empty');
+    }
+    if (!validateStringArray(configurationArg.targetPlatforms, 8, (platformArg) => (/^[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*$/.test(platformArg)))) {
+        errors.push('targetPlatforms must be unique canonical platform identifiers');
+    }
+    if (!validateStringArray(configurationArg.publicDomains, 32, (domainArg) => (canonicalizeDeploymentHostname(domainArg) === domainArg))) {
+        errors.push('publicDomains must be unique canonical exact or wildcard hostnames');
+    }
+    if (!validateStringArray(configurationArg.environmentVariableNames, 256, (nameArg) => (nameArg.length <= 253 && /^[A-Z_][A-Z0-9_]*$/.test(nameArg)))) {
+        errors.push('environmentVariableNames must be unique canonical names');
+    }
+    if (!validateStringArray(configurationArg.secretReferenceIds, 64, (idArg) => (idArg.length <= 253 && /^[A-Za-z0-9][A-Za-z0-9:._-]*$/.test(idArg)))) {
+        errors.push('secretReferenceIds must be unique canonical identifiers');
+    }
+    if (!Array.isArray(configurationArg.containerPorts)
+        || configurationArg.containerPorts.length > 64
+        || configurationArg.containerPorts.some((portArg) => !Number.isSafeInteger(portArg)
+            || portArg < 1 || portArg > 65535)
+        || new Set(configurationArg.containerPorts).size !== configurationArg.containerPorts.length) {
+        errors.push('containerPorts must be unique valid ports');
+    }
+    if (!Array.isArray(configurationArg.volumeMounts)
+        || configurationArg.volumeMounts.length > 32
+        || configurationArg.volumeMounts.some((mountArg) => !isRecord(mountArg)
+            || typeof mountArg.mountPath !== 'string'
+            || !/^\/[A-Za-z0-9._/-]{0,254}$/.test(mountArg.mountPath)
+            || (mountArg.storageClass !== 'corestore' && mountArg.storageClass !== 'ephemeral')
+            || (mountArg.capability !== undefined
+                && mountArg.capability !== 'database'
+                && mountArg.capability !== 'objectstorage'))) {
+        errors.push('volumeMounts must be canonical supported declarations');
+    }
+    if (!Array.isArray(configurationArg.requiredCapabilities)
+        || configurationArg.requiredCapabilities.length > 2
+        || configurationArg.requiredCapabilities.some((capabilityArg) => (capabilityArg !== 'database' && capabilityArg !== 'objectstorage'))
+        || new Set(configurationArg.requiredCapabilities).size
+            !== configurationArg.requiredCapabilities.length) {
+        errors.push('requiredCapabilities must be a unique supported capability set');
+    }
+    return errors;
+};
+export const validateDeploymentReservationInput = (inputArg) => {
+    if (!isRecord(inputArg))
+        return ['reservation input must be an object'];
+    const errors = [];
+    if (inputArg.mode !== 'existing-service' && inputArg.mode !== 'greenfield') {
+        errors.push('mode must identify an existing-service or greenfield deployment');
+    }
+    for (const field of ['organizationId', 'serviceId', 'idempotencyKey']) {
+        if (typeof inputArg[field] !== 'string'
+            || !deploymentIdentifierRegex.test(inputArg[field])) {
+            errors.push(`${field} must be a bounded canonical identifier`);
+        }
+    }
+    if (typeof inputArg.sourceRevision !== 'string'
+        || !fullGitRevisionRegex.test(inputArg.sourceRevision)) {
+        errors.push('sourceRevision must be a full lowercase git revision');
+    }
+    if (typeof inputArg.version !== 'string' || !semanticVersionRegex.test(inputArg.version)) {
+        errors.push('version must be a canonical semantic version');
+    }
+    if (!normalizeSha256Digest(inputArg.intentDigest)) {
+        errors.push('intentDigest must be a canonical sha256 digest');
+    }
+    if (!normalizeImmutableReleaseTag(inputArg.releaseTag)) {
+        errors.push('releaseTag must be a canonical non-latest OCI tag');
+    }
+    const configuration = isRecord(inputArg.proposedConfiguration)
+        ? inputArg.proposedConfiguration
+        : undefined;
+    errors.push(...validateDeploymentProposedConfiguration(inputArg.proposedConfiguration));
+    const containerPorts = configuration && Array.isArray(configuration.containerPorts)
+        ? configuration.containerPorts
+        : undefined;
+    const publicDomains = configuration && Array.isArray(configuration.publicDomains)
+        ? configuration.publicDomains.filter((domainArg) => (typeof domainArg === 'string'))
+        : undefined;
+    if (configuration?.declarationComplete !== true) {
+        errors.push('proposedConfiguration must declare itself complete');
+    }
+    const routes = Array.isArray(inputArg.routes) ? inputArg.routes : undefined;
+    const routeHostnames = routes?.map((routeArg) => (isRecord(routeArg) && typeof routeArg.hostname === 'string' ? routeArg.hostname : undefined));
+    if (!routes
+        || routes.length > 32
+        || !routeHostnames
+        || new Set(routeHostnames).size !== routeHostnames.length
+        || routes.some((routeArg) => {
+            if (!isRecord(routeArg)
+                || typeof routeArg.hostname !== 'string'
+                || canonicalizeDeploymentHostname(routeArg.hostname) !== routeArg.hostname
+                || !Number.isSafeInteger(routeArg.targetPort)
+                || routeArg.targetPort < 1
+                || routeArg.targetPort > 65535
+                || !containerPorts?.includes(routeArg.targetPort)) {
+                return true;
+            }
+            const typedRoute = routeArg;
+            return getDeploymentRouteVerificationHostname(typedRoute) === undefined
+                || (routeArg.readinessPath !== undefined
+                    && (typeof routeArg.readinessPath !== 'string'
+                        || normalizeDeploymentReadinessPath(routeArg.readinessPath) !== routeArg.readinessPath))
+                || (routeArg.expectedStatusCodes !== undefined
+                    && (!Array.isArray(routeArg.expectedStatusCodes)
+                        || routeArg.expectedStatusCodes.length < 1
+                        || routeArg.expectedStatusCodes.length > 16
+                        || new Set(routeArg.expectedStatusCodes).size !== routeArg.expectedStatusCodes.length
+                        || routeArg.expectedStatusCodes.some((statusArg) => !Number.isSafeInteger(statusArg)
+                            || statusArg < 200 || statusArg > 299)));
+        })) {
+        errors.push('routes must be unique canonical declarations over declared numeric ports');
+    }
+    if (inputArg.mode === 'greenfield') {
+        if (inputArg.expectedRolloutGeneration !== undefined
+            || inputArg.expectedCurrentRolloutId !== undefined) {
+            errors.push('greenfield reservation must not carry an existing rollout fence');
+        }
+        if (publicDomains && routeHostnames) {
+            const declared = [...new Set(publicDomains)].sort();
+            const routed = [...new Set(routeHostnames.filter((valueArg) => (typeof valueArg === 'string')))].sort();
+            if (JSON.stringify(declared) !== JSON.stringify(routed)) {
+                errors.push('greenfield routes must exactly match proposed publicDomains');
+            }
+        }
+    }
+    if (inputArg.mode === 'existing-service') {
+        if (!Number.isSafeInteger(inputArg.expectedRolloutGeneration)
+            || inputArg.expectedRolloutGeneration < 0) {
+            errors.push('existing-service reservation requires an explicit rollout generation fence');
+        }
+        if (inputArg.expectedCurrentRolloutId !== undefined
+            && (typeof inputArg.expectedCurrentRolloutId !== 'string'
+                || !deploymentIdentifierRegex.test(inputArg.expectedCurrentRolloutId))) {
+            errors.push('expectedCurrentRolloutId must be a bounded canonical identifier');
+        }
+    }
+    return errors;
+};
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts/data/deploymentpreflight.d.ts

@@ -1,7 +1,8 @@
 import type { TOciManifestMediaType, TSha256Digest } from './immutableimage.js';
 import type { TServiceDeploymentCapability } from './user.js';
+import type { IDeploymentRouteRequest, IServiceDeploymentOperation, TDeploymentOperationMode, TDeploymentOperationPhase } from './deploymentoperation.js';
 export type TDeploymentPreflightDecision = 'GO' | 'NO-GO';
-export type TDeploymentPreflightBlockerCode = 'INVALID_REQUEST' | 'AUTHORIZATION_MISSING' | 'SOURCE_REVISION_INVALID' | 'SOURCE_WORKTREE_DIRTY' | 'VERSION_NOT_RESERVED' | 'VERSION_COLLISION' | 'NAMESPACE_NOT_RESERVED' | 'NAMESPACE_COLLISION' | 'NAMESPACE_NOT_PROVEN_BLANK' | 'CONFIGURATION_DIGEST_INVALID' | 'INTENT_DIGEST_INVALID' | 'PROPOSED_CONFIGURATION_INCOMPLETE' | 'CURRENT_REFERENCE_MUTABLE' | 'CURRENT_RUNTIME_DIGEST_MISSING' | 'OCI_INDEX_DIGEST_REQUIRED' | 'OCI_INDEX_NOT_FOUND' | 'OCI_INDEX_MEDIA_TYPE_REQUIRED' | 'OCI_PLATFORM_MISSING' | 'OCI_PLATFORM_MANIFEST_MISSING' | 'IMMUTABLE_RELEASE_TAG_REQUIRED' | 'IMMUTABLE_RELEASE_TAG_NOT_RESERVED' | 'RELEASE_EVIDENCE_MISSING' | 'RELEASE_EVIDENCE_INVALID' | 'RELEASE_NOT_AUTHORIZED' | 'GREENFIELD_EXECUTION_UNAVAILABLE' | 'ROUTE_PROMOTION_FENCE_UNAVAILABLE' | 'POST_DEPLOYMENT_VERIFICATION_UNAVAILABLE' | 'WOULD_REPLACE_EXISTING_STATE' | 'CORESTORE_INVENTORY_UNAVAILABLE' | 'RUNTIME_ATTESTATION_MISMATCH';
+export type TDeploymentPreflightBlockerCode = 'INVALID_REQUEST' | 'AUTHORIZATION_MISSING' | 'ORGANIZATION_SCOPE_MISSING' | 'SERVICE_OWNERSHIP_MISMATCH' | 'DEPLOYMENT_OPERATION_NOT_FOUND' | 'DEPLOYMENT_OPERATION_CONFLICT' | 'DEPLOY_ON_PUSH_MUST_BE_DISABLED' | 'REGISTRY_AUTHENTICATION_UNAVAILABLE' | 'REGISTRY_REPOSITORY_MISMATCH' | 'REGISTRY_TAG_CONFLICT' | 'SOURCE_REVISION_INVALID' | 'SOURCE_WORKTREE_DIRTY' | 'VERSION_NOT_RESERVED' | 'VERSION_COLLISION' | 'NAMESPACE_NOT_RESERVED' | 'NAMESPACE_COLLISION' | 'NAMESPACE_NOT_PROVEN_BLANK' | 'CONFIGURATION_DIGEST_INVALID' | 'INTENT_DIGEST_INVALID' | 'PROPOSED_CONFIGURATION_INCOMPLETE' | 'CURRENT_REFERENCE_MUTABLE' | 'CURRENT_RUNTIME_DIGEST_MISSING' | 'OCI_INDEX_DIGEST_REQUIRED' | 'OCI_INDEX_NOT_FOUND' | 'OCI_INDEX_MEDIA_TYPE_REQUIRED' | 'OCI_PLATFORM_MISSING' | 'OCI_PLATFORM_MANIFEST_MISSING' | 'IMMUTABLE_RELEASE_TAG_REQUIRED' | 'IMMUTABLE_RELEASE_TAG_NOT_RESERVED' | 'RELEASE_EVIDENCE_MISSING' | 'RELEASE_EVIDENCE_INVALID' | 'RELEASE_EVIDENCE_AMBIGUOUS' | 'RELEASE_NOT_AUTHORIZED' | 'GREENFIELD_EXECUTION_UNAVAILABLE' | 'ROUTE_PROMOTION_FENCE_UNAVAILABLE' | 'POST_DEPLOYMENT_VERIFICATION_UNAVAILABLE' | 'WOULD_REPLACE_EXISTING_STATE' | 'CORESTORE_INVENTORY_UNAVAILABLE' | 'RUNTIME_ATTESTATION_MISMATCH' | 'ROLLOUT_ACTIVE_CONFLICT' | 'ROLLOUT_NOT_SUCCEEDED' | 'ROUTE_UNAVAILABLE' | 'ROUTE_VERIFICATION_FAILED' | 'TLS_VERIFICATION_FAILED';
 export interface IDeploymentPreflightBlocker {
     code: TDeploymentPreflightBlockerCode;
     message: string;
@@ -24,6 +25,7 @@ export interface IDeploymentPreflightRuntimeTask {
     status: string;
     healthStatus?: string;
     imageReference?: string;
+    observedDigest?: TSha256Digest;
     reportedDigest?: TSha256Digest;
     verificationStatus?: 'not-required' | 'pending' | 'verified' | 'missing' | 'mismatched';
 }
@@ -82,6 +84,10 @@ export interface IDeploymentReleaseEvidence {
 export interface IDeploymentPreflightRequestData {
     requestId: string;
     serviceId: string;
+    organizationId?: string;
+    mode?: TDeploymentOperationMode;
+    phase?: TDeploymentOperationPhase;
+    operationId?: string;
     sourceRevision: string;
     sourceDirty: boolean;
     version: string;
@@ -90,7 +96,9 @@ export interface IDeploymentPreflightRequestData {
     ociIndexDigest?: string;
     releaseTag?: string;
     releaseEvidence?: IDeploymentReleaseEvidence;
-    greenfield: true;
+    routes?: IDeploymentRouteRequest[];
+    /** Legacy v14 discriminator. Equivalent to mode: 'greenfield'. */
+    greenfield?: true;
 }
 export interface IDeploymentPreflightReport {
     schemaVersion: 2;
@@ -98,6 +106,7 @@ export interface IDeploymentPreflightReport {
     mutationPerformed: false;
     generatedAt: number;
     service: {
+        organizationId?: string;
         serviceId: string;
         serviceName: string;
         workspaceIdentity: string;
@@ -105,6 +114,9 @@ export interface IDeploymentPreflightReport {
         registryRepository: string;
         deployOnPush: boolean;
     };
+    mode?: TDeploymentOperationMode;
+    phase?: TDeploymentOperationPhase;
+    operation?: IServiceDeploymentOperation;
     source: {
         revision: string;
         dirty: boolean;
@@ -133,6 +145,8 @@ export interface IDeploymentPreflightReport {
         observedReplicaCount: number;
         healthyReplicaCount: number;
         verifiedReplicaCount: number;
+        observedDigestReplicaCount: number;
+        observedDigestConsistent: boolean;
         consistentDigest: boolean;
     };
     platformBindings: IDeploymentPreflightPlatformBinding[];
@@ -158,20 +172,8 @@ export interface IGreenfieldDeploymentFence {
     configurationDigest: TSha256Digest;
     targetNamespace: string;
 }
-export interface IGreenfieldDeploymentOperation {
-    id: string;
-    data: {
-        idempotencyKey: string;
-        requestDigest: TSha256Digest;
-        fence: IGreenfieldDeploymentFence;
-        candidateServiceId?: string;
-        state: 'reserved' | 'provisioning' | 'deploying' | 'verifying' | 'ready-for-promotion' | 'promoting' | 'promoted' | 'rolling-back' | 'rolled-back' | 'failed';
-        routeGeneration?: number;
-        createdAt: number;
-        updatedAt: number;
-        failureCode?: string;
-    };
-}
+/** @deprecated Use IServiceDeploymentOperation. */
+export type IGreenfieldDeploymentOperation = IServiceDeploymentOperation;
 export declare const validateDeploymentPreflightRequest: (requestArg: unknown) => IDeploymentPreflightBlocker[];
 export declare const validateDeploymentReleaseEvidence: (argsArg: {
     evidence: unknown;