@serve.zone/interfaces 27.1.1 → 27.3.0

package/changelog.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 2026-08-18 - 27.3.0
+
+### Features
+
+- add Corestore database backup/restore and settlement recovery contracts (runtime)
+  - Adds exact canonical JSON normalizers, encoders, SHA-256 helpers, and runtime limits for Corestore database backup allocation, receipt, restore request, and restore response contracts.
+  - Adds fenced legacy deployment settlement attempt, recovery attestation, receipt v2, authority-aware validation, and LF-framed stdio contracts.
+  - Preserves legacy Corestore restore request bytes and digests when optional allocation and restore-attempt fences are omitted.
+  - Bumps the package manager metadata to pnpm 11.22.0.
+
+## 2026-08-11 - 27.2.0
+
+### Features
+
+- add byte-safe control credential plaintext creation (corestore)
+  - Export control token validation and a byte-based plaintext builder for Corestore control credentials
+  - Validate UTF-8 token bytes without JSON whitespace and escape canonical JSON plaintext directly from bytes
+  - Increase the sealed control credential size limit to accommodate maximum escaped tokens
+
 ## 2026-08-11 - 27.1.1
 
 ### Fixes

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@serve.zone/interfaces',
-    version: '27.1.1',
+    version: '27.3.0',
     description: 'Shared TypeScript interfaces and TypedRequest contracts for the serve.zone ecosystem.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSx3QkFBd0I7SUFDOUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLHVGQUF1RjtDQUNyRyxDQUFBIn0=

package/dist_ts/runtime.cloudlylegacydeploymentsettlement.d.ts

@@ -20,6 +20,9 @@ export declare const cloudlyLegacyDeploymentSettlementDomains: Readonly<{
     readonly stableOutcomeHmac: "serve.zone/cloudly-legacy-deployment-settlement/stable-outcome-hmac-v1\0";
     readonly scratchReceiptHmac: "serve.zone/cloudly-legacy-deployment-settlement/scratch-receipt-hmac-v1\0";
     readonly productionReceiptHmac: "serve.zone/cloudly-legacy-deployment-settlement/production-receipt-hmac-v1\0";
+    readonly productionExecutionAuthorizationHmac: "serve.zone/cloudly-legacy-deployment-settlement/production-execution-authorization-hmac-v1\0";
+    readonly productionReceiptV2Hmac: "serve.zone/cloudly-legacy-deployment-settlement/production-receipt-hmac-v2\0";
+    readonly resolutionHmac: "serve.zone/cloudly-legacy-deployment-settlement/resolution-recovery-attestation-hmac-v1\0";
 }>;
 export type TCloudlyLegacyDeploymentSettlementCodecErrorCode = 'INVALID_DATA' | 'INVALID_SCHEMA' | 'INVALID_VALUE' | 'LIMIT_EXCEEDED' | 'ORDERING_REQUIRED' | 'CROSS_FIELD_MISMATCH';
 /** Safe error surface: code and schema path are finite and never contain values. */
@@ -42,7 +45,7 @@ export interface ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1 {
     keyVersion: 1;
     authorityMetadataSha256: string;
 }
-export interface ICloudlyLegacyDeploymentSettlementAuthorityMetadataV1 {
+interface ICloudlyLegacyDeploymentSettlementAuthorityMetadataBaseV1 {
     schemaVersion: 1;
     operationId: string;
     authorityId: string;
@@ -71,6 +74,35 @@ export interface ICloudlyLegacyDeploymentSettlementAuthorityMetadataV1 {
     restoredDataSha256: string;
     digestProofSha256: string;
 }
+export interface ICloudlyLegacyDeploymentSettlementAuthorityMetadataV1 extends ICloudlyLegacyDeploymentSettlementAuthorityMetadataBaseV1 {
+    executionProtocol?: 'fenced-attempt-v1';
+    sourceAuthority?: ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1;
+    sourceAuthenticatedPlanSha256?: string;
+    sourceRequestBundleSha256?: string;
+    scratchReceiptSha256?: string;
+}
+export interface ICloudlyLegacyDeploymentSettlementLegacyAuthorityMetadataV1 extends ICloudlyLegacyDeploymentSettlementAuthorityMetadataBaseV1 {
+    executionProtocol?: never;
+    sourceAuthority?: never;
+    sourceAuthenticatedPlanSha256?: never;
+    sourceRequestBundleSha256?: never;
+    scratchReceiptSha256?: never;
+}
+export interface ICloudlyLegacyDeploymentSettlementFencedSourceAuthorityMetadataV1 extends ICloudlyLegacyDeploymentSettlementAuthorityMetadataBaseV1 {
+    executionProtocol: 'fenced-attempt-v1';
+    sourceAuthority?: never;
+    sourceAuthenticatedPlanSha256?: never;
+    sourceRequestBundleSha256?: never;
+    scratchReceiptSha256?: never;
+}
+export interface ICloudlyLegacyDeploymentSettlementFencedProductionAuthorityMetadataV1 extends ICloudlyLegacyDeploymentSettlementAuthorityMetadataBaseV1 {
+    executionProtocol: 'fenced-attempt-v1';
+    sourceAuthority: ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1;
+    sourceAuthenticatedPlanSha256: string;
+    sourceRequestBundleSha256: string;
+    scratchReceiptSha256: string;
+}
+export type TCloudlyLegacyDeploymentSettlementAuthorityMetadataV1 = ICloudlyLegacyDeploymentSettlementLegacyAuthorityMetadataV1 | ICloudlyLegacyDeploymentSettlementFencedSourceAuthorityMetadataV1 | ICloudlyLegacyDeploymentSettlementFencedProductionAuthorityMetadataV1;
 /** Private plaintext HMAC key. Never persist, log, or place in summaries or receipts. */
 export interface ICloudlyLegacyDeploymentSettlementHmacKeyPlaintextV1 {
     format: 'raw-32-byte-base64url';
@@ -78,9 +110,9 @@ export interface ICloudlyLegacyDeploymentSettlementHmacKeyPlaintextV1 {
 }
 /**
  * Exact private-file handoff parsed by pinned maintenance containers.
- * Interfaces only parses and encodes it; consumers own secure generation,
- * storage, use, and destruction of the plaintext key.
- * This package never generates, stores, logs, or performs HMAC with the key.
+ * Consumers own secure generation, storage, use, and destruction of the key.
+ * Interfaces never generates, persists, or logs it; the private stdio verifier
+ * transiently decodes it for HMAC verification and wipes the decoded bytes.
  */
 export interface ICloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintextV1 {
     schemaVersion: 1;
@@ -312,14 +344,20 @@ export type TCloudlyLegacyDeploymentSettlementUnsignedScratchReceiptV1 = Omit<IC
 export type TCloudlyLegacyDeploymentSettlementProductionReceiptPayloadV1 = Omit<ICloudlyLegacyDeploymentSettlementProductionReceiptV1, 'payloadSha256' | 'mac'>;
 export type TCloudlyLegacyDeploymentSettlementUnsignedProductionReceiptV1 = Omit<ICloudlyLegacyDeploymentSettlementProductionReceiptV1, 'mac'>;
 export declare const normalizeCloudlyLegacyDeploymentSettlementAuthorityReference: (valueArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1>;
-export declare const normalizeCloudlyLegacyDeploymentSettlementAuthorityMetadata: (valueArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementAuthorityMetadataV1>;
+export declare const normalizeCloudlyLegacyDeploymentSettlementAuthorityMetadata: (valueArg: unknown) => Readonly<TCloudlyLegacyDeploymentSettlementAuthorityMetadataV1>;
 export declare const encodeCloudlyLegacyDeploymentSettlementAuthorityMetadata: (valueArg: unknown) => Uint8Array;
 export declare const encodeCloudlyLegacyDeploymentSettlementAuthorityMetadataAad: (valueArg: unknown) => Uint8Array;
 export declare const digestCloudlyLegacyDeploymentSettlementAuthorityMetadata: (valueArg: unknown) => string;
 export declare const createCloudlyLegacyDeploymentSettlementAuthorityReference: (metadataArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1>;
 export declare const normalizeCloudlyLegacyDeploymentSettlementAuthorityReferenceForMetadata: (referenceArg: unknown, metadataArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1>;
+export declare const normalizeCloudlyLegacyDeploymentSettlementProductionAuthorityMetadataForSourceAuthority: (productionMetadataArg: unknown, sourceMetadataArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementFencedProductionAuthorityMetadataV1>;
 export declare const normalizeCloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintext: (valueArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintextV1>;
 export declare const encodeCloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintext: (valueArg: unknown) => Uint8Array;
+/**
+ * Private in-process stdio handoff verification only. Do not persist or log the
+ * handoff or returned verifier; discard both as soon as the stdio exchange ends.
+ */
+export declare const createCloudlyLegacyDeploymentSettlementStdioHandoffHmacVerifier: (handoffArg: unknown) => TCloudlyLegacyDeploymentSettlementHmacVerifier;
 export declare const normalizeCloudlyLegacyDeploymentSettlementPlan: (valueArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementPlanV1>;
 export declare const encodeCloudlyLegacyDeploymentSettlementPlan: (valueArg: unknown) => Uint8Array;
 export declare const encodeCloudlyLegacyDeploymentSettlementPlanHmacInput: (valueArg: unknown) => Uint8Array;
@@ -391,4 +429,474 @@ export declare const normalizeCloudlyLegacyDeploymentSettlementAuthenticatedStab
 /** Structural/request binding only; this function does not authenticate MACs. */
 export declare const normalizeCloudlyLegacyDeploymentSettlementScratchReceiptStructureForRequest: (receiptArg: unknown, requestArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementScratchReceiptV1>;
 export declare const normalizeCloudlyLegacyDeploymentSettlementProductionReceiptStructureForRequest: (receiptArg: unknown, requestArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementProductionReceiptV1>;
+export interface ICloudlyLegacyDeploymentSettlementRequestBundleV1 {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-request-bundle';
+    authenticatedRehearsalBinding: IAuthenticatedCloudlyLegacyDeploymentSettlementRehearsalBindingV1;
+    authenticatedRequest: IAuthenticatedCloudlyLegacyDeploymentSettlementProductionRequestV1;
+}
+export type TCloudlyLegacyDeploymentSettlementExecutionPurpose = 'scratch-rehearsal' | 'production';
+export interface ICloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1 {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-execution-attempt-identity';
+    attemptId: string;
+    purpose: TCloudlyLegacyDeploymentSettlementExecutionPurpose;
+    operationId: string;
+    settlementId: string;
+    executionAuthority: ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1;
+    sourceAuthority: ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1;
+    authenticatedPlanSha256: string;
+    requestBundleSha256: string;
+    scratchReceiptSha256: string | null;
+}
+export type TCloudlyLegacyDeploymentSettlementScratchExecutionAttemptIdentityV1 = ICloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1 & {
+    purpose: 'scratch-rehearsal';
+    scratchReceiptSha256: null;
+};
+export type TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1 = ICloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1 & {
+    purpose: 'production';
+    scratchReceiptSha256: string;
+};
+export type TCloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1 = TCloudlyLegacyDeploymentSettlementScratchExecutionAttemptIdentityV1 | TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1;
+export interface ICloudlyLegacyDeploymentSettlementExecutionAttemptPreparedV1 {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-execution-attempt-observation';
+    identity: TCloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1;
+    state: 'prepared';
+    preparedAt: number;
+}
+export interface ICloudlyLegacyDeploymentSettlementExecutionAttemptCommittedV1 {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-execution-attempt-observation';
+    identity: TCloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1;
+    state: 'committed';
+    preparedAt: number;
+    resolvedAt: number;
+    receiptSchemaVersion: 1 | 2;
+    receiptSha256: string;
+}
+export interface ICloudlyLegacyDeploymentSettlementExecutionAttemptAbortedV1 {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-execution-attempt-observation';
+    identity: TCloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1;
+    state: 'aborted';
+    preparedAt: number;
+    resolvedAt: number;
+}
+export type TCloudlyLegacyDeploymentSettlementExecutionAttemptObservationV1 = ICloudlyLegacyDeploymentSettlementExecutionAttemptPreparedV1 | ICloudlyLegacyDeploymentSettlementExecutionAttemptCommittedV1 | ICloudlyLegacyDeploymentSettlementExecutionAttemptAbortedV1;
+export declare const normalizeCloudlyLegacyDeploymentSettlementRequestBundle: (valueArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementRequestBundleV1>;
+export declare const encodeCloudlyLegacyDeploymentSettlementRequestBundle: (valueArg: unknown) => Uint8Array;
+export declare const digestCloudlyLegacyDeploymentSettlementRequestBundle: (valueArg: unknown) => string;
+export declare function createCloudlyLegacyDeploymentSettlementExecutionAttemptIdentity(valueArg: Omit<TCloudlyLegacyDeploymentSettlementScratchExecutionAttemptIdentityV1, 'schemaVersion' | 'kind' | 'attemptId'>): Readonly<TCloudlyLegacyDeploymentSettlementScratchExecutionAttemptIdentityV1>;
+export declare function createCloudlyLegacyDeploymentSettlementExecutionAttemptIdentity(valueArg: Omit<TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1, 'schemaVersion' | 'kind' | 'attemptId'>): Readonly<TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1>;
+export declare function createCloudlyLegacyDeploymentSettlementExecutionAttemptIdentity(valueArg: Omit<ICloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1, 'schemaVersion' | 'kind' | 'attemptId'>): Readonly<TCloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1>;
+export declare const normalizeCloudlyLegacyDeploymentSettlementExecutionAttemptIdentity: (valueArg: unknown) => Readonly<TCloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1>;
+export declare const encodeCloudlyLegacyDeploymentSettlementExecutionAttemptIdentity: (valueArg: unknown) => Uint8Array;
+export declare const digestCloudlyLegacyDeploymentSettlementExecutionAttemptIdentity: (valueArg: unknown) => string;
+export declare const normalizeCloudlyLegacyDeploymentSettlementExecutionAttemptObservation: (valueArg: unknown) => Readonly<TCloudlyLegacyDeploymentSettlementExecutionAttemptObservationV1>;
+export declare const encodeCloudlyLegacyDeploymentSettlementExecutionAttemptObservation: (valueArg: unknown) => Uint8Array;
+export declare const digestCloudlyLegacyDeploymentSettlementExecutionAttemptObservation: (valueArg: unknown) => string;
+export interface ICloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationPayloadV1 {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-production-execution-authorization';
+    authority: ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1;
+    sourceAuthority: ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1;
+    executionAttempt: TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1;
+    authenticatedPlanSha256: string;
+    requestBundleSha256: string;
+    scratchReceiptSha256: string;
+    maintenanceImageDigest: `sha256:${string}`;
+    operationId: string;
+    settlementId: string;
+    runId: string;
+    rehearsalId: string;
+    scratchServiceId: string;
+    allocationId: string;
+    allocationGeneration: number;
+    allocationBindingSha256: string;
+    allocationReceiptSha256: string;
+    sourceImageDigest: `sha256:${string}`;
+    targetImageDigest: `sha256:${string}`;
+    requestedAt: number;
+    approvedAt: number;
+}
+export interface ICloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationV1 extends ICloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationPayloadV1 {
+    payloadSha256: string;
+    mac: string;
+}
+export type TCloudlyLegacyDeploymentSettlementUnsignedProductionExecutionAuthorizationV1 = Omit<ICloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationV1, 'mac'>;
+export interface ICloudlyLegacyDeploymentSettlementProductionReceiptPayloadV2 {
+    schemaVersion: 2;
+    kind: 'cloudly-legacy-deployment-settlement-production-receipt';
+    authority: ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1;
+    sourceAuthority: ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1;
+    executionAttempt: TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1;
+    productionAuthorization: ICloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationV1;
+    productionAuthorizationSha256: string;
+    requestSha256: string;
+    requestBundleSha256: string;
+    scratchReceipt: ICloudlyLegacyDeploymentSettlementScratchReceiptV1;
+    scratchReceiptSha256: string;
+    stableOutcome: ICloudlyLegacyDeploymentSettlementStableOutcomeV1;
+    stableOutcomeSha256: string;
+    transactionCommitted: true;
+    disposition: 'applied' | 'exact-replay' | 'no-op';
+    completedAt: number;
+}
+export interface ICloudlyLegacyDeploymentSettlementProductionReceiptV2 extends ICloudlyLegacyDeploymentSettlementProductionReceiptPayloadV2 {
+    payloadSha256: string;
+    mac: string;
+}
+export type TCloudlyLegacyDeploymentSettlementUnsignedProductionReceiptV2 = Omit<ICloudlyLegacyDeploymentSettlementProductionReceiptV2, 'mac'>;
+export type TCloudlyLegacyDeploymentSettlementProductionReceipt = ICloudlyLegacyDeploymentSettlementProductionReceiptV1 | ICloudlyLegacyDeploymentSettlementProductionReceiptV2;
+export declare const normalizeCloudlyLegacyDeploymentSettlementProductionExecutionAuthorization: (valueArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationV1>;
+export declare const digestCloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationPayload: (valueArg: unknown) => string;
+export declare const encodeCloudlyLegacyDeploymentSettlementProductionExecutionAuthorization: (valueArg: unknown) => Uint8Array;
+export declare const digestCloudlyLegacyDeploymentSettlementProductionExecutionAuthorization: (valueArg: unknown) => string;
+export declare const encodeCloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationHmacInput: (valueArg: unknown) => Uint8Array;
+export declare const normalizeCloudlyLegacyDeploymentSettlementRequestBundleForAuthority: (bundleArg: unknown, authenticatedPlanArg: unknown, metadataArg: unknown, verifierArg: TCloudlyLegacyDeploymentSettlementHmacVerifier) => Promise<Readonly<ICloudlyLegacyDeploymentSettlementRequestBundleV1>>;
+export declare const normalizeCloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationForAuthorities: (authorizationArg: unknown, productionMetadataArg: unknown, sourceMetadataArg: unknown, authenticatedPlanArg: unknown, requestBundleArg: unknown, scratchReceiptArg: unknown, verifierArg: TCloudlyLegacyDeploymentSettlementHmacVerifier) => Promise<Readonly<ICloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationV1>>;
+export declare const digestCloudlyLegacyDeploymentSettlementProductionReceiptPayloadV2: (valueArg: unknown) => string;
+export declare const normalizeCloudlyLegacyDeploymentSettlementProductionReceiptV2: (valueArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementProductionReceiptV2>;
+export declare const normalizeCloudlyLegacyDeploymentSettlementProductionReceiptAnyVersion: (valueArg: unknown) => Readonly<TCloudlyLegacyDeploymentSettlementProductionReceipt>;
+export declare const encodeCloudlyLegacyDeploymentSettlementProductionReceiptV2: (valueArg: unknown) => Uint8Array;
+export declare const digestCloudlyLegacyDeploymentSettlementProductionReceiptV2: (valueArg: unknown) => string;
+export declare const encodeCloudlyLegacyDeploymentSettlementProductionReceiptV2HmacInput: (valueArg: unknown) => Uint8Array;
+export declare const normalizeCloudlyLegacyDeploymentSettlementProductionReceiptV2ForAuthorities: (receiptArg: unknown, productionMetadataArg: unknown, sourceMetadataArg: unknown, authenticatedPlanArg: unknown, requestBundleArg: unknown, verifierArg: TCloudlyLegacyDeploymentSettlementHmacVerifier) => Promise<Readonly<ICloudlyLegacyDeploymentSettlementProductionReceiptV2>>;
+export type TCloudlyLegacyDeploymentSettlementAuthorityStatus = 'active' | 'expired';
+export type TCloudlyLegacyDeploymentSettlementResolutionMode = 'committed-schema1' | 'committed-schema2' | 'aborted-prepared' | 'observed-aborted' | 'absent-tombstone' | 'legacy-no-op';
+export type TCloudlyLegacyDeploymentSettlementCommittedReceipt = ICloudlyLegacyDeploymentSettlementScratchReceiptV1 | ICloudlyLegacyDeploymentSettlementProductionReceiptV2;
+type TCloudlyLegacyDeploymentSettlementCommittedObservationV1<TAttempt extends TCloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1, TReceiptSchemaVersion extends 1 | 2> = Omit<ICloudlyLegacyDeploymentSettlementExecutionAttemptCommittedV1, 'identity' | 'receiptSchemaVersion'> & {
+    identity: TAttempt;
+    receiptSchemaVersion: TReceiptSchemaVersion;
+};
+interface ICloudlyLegacyDeploymentSettlementResolutionBundleBaseV1 {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-resolution-bundle';
+    executionAttempt: TCloudlyLegacyDeploymentSettlementExecutionAttemptIdentityV1;
+    observedAt: number;
+    sourceAuthorityStatus: TCloudlyLegacyDeploymentSettlementAuthorityStatus;
+    executionAuthorityStatus: TCloudlyLegacyDeploymentSettlementAuthorityStatus;
+}
+export interface ICloudlyLegacyDeploymentSettlementCommittedScratchSchema1ResolutionBundleV1 extends ICloudlyLegacyDeploymentSettlementResolutionBundleBaseV1 {
+    outcome: 'committed';
+    mode: 'committed-schema1';
+    executionAttempt: TCloudlyLegacyDeploymentSettlementScratchExecutionAttemptIdentityV1;
+    attemptObservation: TCloudlyLegacyDeploymentSettlementCommittedObservationV1<TCloudlyLegacyDeploymentSettlementScratchExecutionAttemptIdentityV1, 1>;
+    originalReceipt: ICloudlyLegacyDeploymentSettlementScratchReceiptV1;
+    originalReceiptSha256: string;
+}
+export interface ICloudlyLegacyDeploymentSettlementCommittedSchema2ResolutionBundleV1 extends ICloudlyLegacyDeploymentSettlementResolutionBundleBaseV1 {
+    outcome: 'committed';
+    mode: 'committed-schema2';
+    executionAttempt: TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1;
+    attemptObservation: TCloudlyLegacyDeploymentSettlementCommittedObservationV1<TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1, 2>;
+    originalReceipt: ICloudlyLegacyDeploymentSettlementProductionReceiptV2;
+    originalReceiptSha256: string;
+}
+export type TCloudlyLegacyDeploymentSettlementCommittedResolutionBundleV1 = ICloudlyLegacyDeploymentSettlementCommittedScratchSchema1ResolutionBundleV1 | ICloudlyLegacyDeploymentSettlementCommittedSchema2ResolutionBundleV1;
+export interface ICloudlyLegacyDeploymentSettlementAbortedPreparedResolutionBundleV1 extends ICloudlyLegacyDeploymentSettlementResolutionBundleBaseV1 {
+    outcome: 'unapplied';
+    mode: 'aborted-prepared';
+    attemptObservation: ICloudlyLegacyDeploymentSettlementExecutionAttemptAbortedV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementObservedAbortedResolutionBundleV1 extends ICloudlyLegacyDeploymentSettlementResolutionBundleBaseV1 {
+    outcome: 'unapplied';
+    mode: 'observed-aborted';
+    attemptObservation: ICloudlyLegacyDeploymentSettlementExecutionAttemptAbortedV1;
+}
+export type TCloudlyLegacyDeploymentSettlementAbortedResolutionBundleV1 = ICloudlyLegacyDeploymentSettlementAbortedPreparedResolutionBundleV1 | ICloudlyLegacyDeploymentSettlementObservedAbortedResolutionBundleV1;
+export interface ICloudlyLegacyDeploymentSettlementAbsentTombstoneResolutionBundleV1 extends ICloudlyLegacyDeploymentSettlementResolutionBundleBaseV1 {
+    outcome: 'unapplied';
+    mode: 'absent-tombstone';
+    attemptObservation: ICloudlyLegacyDeploymentSettlementExecutionAttemptAbortedV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementLegacyNoOpResolutionBundleV1 extends ICloudlyLegacyDeploymentSettlementResolutionBundleBaseV1 {
+    outcome: 'unapplied';
+    mode: 'legacy-no-op';
+    executionAttempt: TCloudlyLegacyDeploymentSettlementScratchExecutionAttemptIdentityV1;
+    attemptObservation: null;
+}
+export type TCloudlyLegacyDeploymentSettlementResolutionBundleV1 = ICloudlyLegacyDeploymentSettlementCommittedScratchSchema1ResolutionBundleV1 | ICloudlyLegacyDeploymentSettlementCommittedSchema2ResolutionBundleV1 | ICloudlyLegacyDeploymentSettlementAbortedPreparedResolutionBundleV1 | ICloudlyLegacyDeploymentSettlementObservedAbortedResolutionBundleV1 | ICloudlyLegacyDeploymentSettlementAbsentTombstoneResolutionBundleV1 | ICloudlyLegacyDeploymentSettlementLegacyNoOpResolutionBundleV1;
+/** Structural only; this function does not authenticate receipt MACs. */
+export declare const normalizeCloudlyLegacyDeploymentSettlementResolutionBundle: (valueArg: unknown) => Readonly<TCloudlyLegacyDeploymentSettlementResolutionBundleV1>;
+export declare const encodeCloudlyLegacyDeploymentSettlementResolutionBundle: (valueArg: unknown) => Uint8Array;
+export declare const digestCloudlyLegacyDeploymentSettlementResolutionBundle: (valueArg: unknown) => string;
+/** Recovery attestation only; this is neither a receipt nor an execution authorization. */
+export interface IAuthenticatedCloudlyLegacyDeploymentSettlementResolutionV1 {
+    schemaVersion: 1;
+    kind: 'authenticated-cloudly-legacy-deployment-settlement-resolution';
+    authority: ICloudlyLegacyDeploymentSettlementAuthorityReferenceV1;
+    payload: TCloudlyLegacyDeploymentSettlementResolutionBundleV1;
+    payloadSha256: string;
+    mac: string;
+}
+export type TUnsignedAuthenticatedCloudlyLegacyDeploymentSettlementResolutionV1 = Omit<IAuthenticatedCloudlyLegacyDeploymentSettlementResolutionV1, 'mac'>;
+/** Structural only; this function does not authenticate the recovery-attestation MAC. */
+export declare const normalizeCloudlyLegacyDeploymentSettlementAuthenticatedResolutionStructure: (valueArg: unknown) => Readonly<IAuthenticatedCloudlyLegacyDeploymentSettlementResolutionV1>;
+export declare const encodeAuthenticatedCloudlyLegacyDeploymentSettlementResolution: (valueArg: unknown) => Uint8Array;
+export declare const digestAuthenticatedCloudlyLegacyDeploymentSettlementResolution: (valueArg: unknown) => string;
+export declare const encodeCloudlyLegacyDeploymentSettlementResolutionHmacInput: (valueArg: unknown) => Uint8Array;
+/** Artifact/status binding only; trust the authenticated recovery attestation instead. */
+export declare const normalizeCloudlyLegacyDeploymentSettlementResolutionBundleForAuthorities: (bundleArg: unknown, sourceMetadataArg: unknown, executionMetadataArg: unknown, authenticatedPlanArg: unknown, requestBundleArg: unknown, scratchReceiptArg: unknown | null, productionAuthorizationArg: unknown | null, verifierArg: TCloudlyLegacyDeploymentSettlementHmacVerifier) => Promise<Readonly<TCloudlyLegacyDeploymentSettlementResolutionBundleV1>>;
+export declare const normalizeAuthenticatedCloudlyLegacyDeploymentSettlementResolutionForAuthorities: (attestationArg: unknown, sourceMetadataArg: unknown, executionMetadataArg: unknown, authenticatedPlanArg: unknown, requestBundleArg: unknown, scratchReceiptArg: unknown | null, productionAuthorizationArg: unknown | null, verifierArg: TCloudlyLegacyDeploymentSettlementHmacVerifier) => Promise<Readonly<IAuthenticatedCloudlyLegacyDeploymentSettlementResolutionV1>>;
+export type TCloudlyLegacyDeploymentSettlementCompletedApplyResultV1 = Extract<TCloudlyLegacyDeploymentSettlementApplyResultV1, {
+    status: 'completed';
+}>;
+export type TCloudlyLegacyDeploymentSettlementRejectedApplyResultV1 = Extract<TCloudlyLegacyDeploymentSettlementApplyResultV1, {
+    status: 'rejected';
+}>;
+export type TAuthenticatedCloudlyLegacyDeploymentSettlementCompletedApplyResultV1 = Omit<IAuthenticatedCloudlyLegacyDeploymentSettlementApplyResultV1, 'payload'> & {
+    payload: TCloudlyLegacyDeploymentSettlementCompletedApplyResultV1;
+};
+export type TAuthenticatedCloudlyLegacyDeploymentSettlementRejectedApplyResultV1 = Omit<IAuthenticatedCloudlyLegacyDeploymentSettlementApplyResultV1, 'payload'> & {
+    payload: TCloudlyLegacyDeploymentSettlementRejectedApplyResultV1;
+};
+interface ICloudlyLegacyDeploymentSettlementScratchExecutionBundleBaseV1 {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-execution-bundle';
+    purpose: 'scratch-rehearsal';
+    executionAttempt: TCloudlyLegacyDeploymentSettlementScratchExecutionAttemptIdentityV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementCompletedScratchExecutionBundleV1 extends ICloudlyLegacyDeploymentSettlementScratchExecutionBundleBaseV1 {
+    authenticatedResult: TAuthenticatedCloudlyLegacyDeploymentSettlementCompletedApplyResultV1;
+    receipt: ICloudlyLegacyDeploymentSettlementScratchReceiptV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementRejectedScratchExecutionBundleV1 extends ICloudlyLegacyDeploymentSettlementScratchExecutionBundleBaseV1 {
+    authenticatedResult: TAuthenticatedCloudlyLegacyDeploymentSettlementRejectedApplyResultV1;
+    receipt?: never;
+}
+export type TCloudlyLegacyDeploymentSettlementScratchExecutionBundleV1 = ICloudlyLegacyDeploymentSettlementCompletedScratchExecutionBundleV1 | ICloudlyLegacyDeploymentSettlementRejectedScratchExecutionBundleV1;
+interface ICloudlyLegacyDeploymentSettlementProductionExecutionBundleBaseV2 {
+    schemaVersion: 2;
+    kind: 'cloudly-legacy-deployment-settlement-execution-bundle';
+    purpose: 'production';
+    executionAttempt: TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementCompletedProductionExecutionBundleV2 extends ICloudlyLegacyDeploymentSettlementProductionExecutionBundleBaseV2 {
+    authenticatedResult: TAuthenticatedCloudlyLegacyDeploymentSettlementCompletedApplyResultV1;
+    receipt: ICloudlyLegacyDeploymentSettlementProductionReceiptV2;
+}
+export interface ICloudlyLegacyDeploymentSettlementRejectedProductionExecutionBundleV2 extends ICloudlyLegacyDeploymentSettlementProductionExecutionBundleBaseV2 {
+    authenticatedResult: TAuthenticatedCloudlyLegacyDeploymentSettlementRejectedApplyResultV1;
+    receipt?: never;
+}
+export type TCloudlyLegacyDeploymentSettlementProductionExecutionBundleV2 = ICloudlyLegacyDeploymentSettlementCompletedProductionExecutionBundleV2 | ICloudlyLegacyDeploymentSettlementRejectedProductionExecutionBundleV2;
+/** Structural only; this function does not authenticate result or receipt MACs. */
+export declare const normalizeCloudlyLegacyDeploymentSettlementScratchExecutionBundle: (valueArg: unknown) => Readonly<TCloudlyLegacyDeploymentSettlementScratchExecutionBundleV1>;
+/** Structural only; this function does not authenticate result or receipt MACs. */
+export declare const normalizeCloudlyLegacyDeploymentSettlementProductionExecutionBundleV2: (valueArg: unknown) => Readonly<TCloudlyLegacyDeploymentSettlementProductionExecutionBundleV2>;
+export declare const encodeCloudlyLegacyDeploymentSettlementScratchExecutionBundle: (valueArg: unknown) => Uint8Array;
+export declare const encodeCloudlyLegacyDeploymentSettlementProductionExecutionBundleV2: (valueArg: unknown) => Uint8Array;
+export declare const normalizeCloudlyLegacyDeploymentSettlementScratchExecutionBundleForAuthority: (bundleArg: unknown, sourceMetadataArg: unknown, authenticatedPlanArg: unknown, requestBundleArg: unknown, verifierArg: TCloudlyLegacyDeploymentSettlementHmacVerifier) => Promise<Readonly<TCloudlyLegacyDeploymentSettlementScratchExecutionBundleV1>>;
+export declare const normalizeCloudlyLegacyDeploymentSettlementProductionExecutionBundleV2ForAuthorities: (bundleArg: unknown, productionAuthorizationArg: unknown, productionMetadataArg: unknown, sourceMetadataArg: unknown, authenticatedPlanArg: unknown, requestBundleArg: unknown, scratchReceiptArg: unknown, verifierArg: TCloudlyLegacyDeploymentSettlementHmacVerifier) => Promise<Readonly<TCloudlyLegacyDeploymentSettlementProductionExecutionBundleV2>>;
+export declare const cloudlyLegacyDeploymentSettlementStdioLimits: Readonly<{
+    maximumMongoDescriptorBytes: number;
+    maximumPrivateArtifactAggregateBytes: number;
+    maximumRequestFrameBytes: number;
+    maximumResponseFrameBytes: number;
+}>;
+export declare const cloudlyLegacyDeploymentSettlementStdioCommands: readonly ["settlement-plan", "settlement-request", "settlement-scratch-check", "settlement-scratch-apply", "settlement-scratch-resolve", "settlement-production-authorize", "settlement-production-check", "settlement-production-apply", "settlement-production-resolve"];
+export type TCloudlyLegacyDeploymentSettlementStdioCommand = typeof cloudlyLegacyDeploymentSettlementStdioCommands[number];
+export interface ICloudlyLegacyDeploymentSettlementMongoDescriptorV1 {
+    mongoDbUrl: string;
+    mongoDbName: string;
+    mongoDbUser: string;
+    mongoDbPass: string;
+}
+interface ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-stdio-request';
+    requestId: string;
+    command: TCloudlyLegacyDeploymentSettlementStdioCommand;
+}
+export interface ICloudlyLegacyDeploymentSettlementPlanStdioRequestV1 extends ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    command: 'settlement-plan';
+    payload: {
+        mongoDescriptor: ICloudlyLegacyDeploymentSettlementMongoDescriptorV1;
+        authorityHandoff: ICloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintextV1;
+        effectiveAt: number;
+    };
+}
+export interface ICloudlyLegacyDeploymentSettlementRequestStdioRequestV1 extends ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    command: 'settlement-request';
+    payload: {
+        authorityHandoff: ICloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintextV1;
+        authenticatedPlan: IAuthenticatedCloudlyLegacyDeploymentSettlementPlanV1;
+        requestedAt: number;
+    };
+}
+interface ICloudlyLegacyDeploymentSettlementScratchStdioPayloadV1 {
+    mongoDescriptor: ICloudlyLegacyDeploymentSettlementMongoDescriptorV1;
+    authorityHandoff: ICloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintextV1;
+    authenticatedPlan: IAuthenticatedCloudlyLegacyDeploymentSettlementPlanV1;
+    requestBundle: ICloudlyLegacyDeploymentSettlementRequestBundleV1;
+    executionAttempt: TCloudlyLegacyDeploymentSettlementScratchExecutionAttemptIdentityV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementScratchCheckStdioRequestV1 extends ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    command: 'settlement-scratch-check';
+    payload: ICloudlyLegacyDeploymentSettlementScratchStdioPayloadV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementScratchApplyStdioRequestV1 extends ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    command: 'settlement-scratch-apply';
+    payload: ICloudlyLegacyDeploymentSettlementScratchStdioPayloadV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementScratchResolveStdioRequestV1 extends ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    command: 'settlement-scratch-resolve';
+    payload: ICloudlyLegacyDeploymentSettlementScratchStdioPayloadV1 & {
+        observedAt: number;
+    };
+}
+export interface ICloudlyLegacyDeploymentSettlementProductionAuthorizeStdioRequestV1 extends ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    command: 'settlement-production-authorize';
+    payload: {
+        sourceAuthorityHandoff: ICloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintextV1;
+        productionAuthorityHandoff: ICloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintextV1;
+        authenticatedPlan: IAuthenticatedCloudlyLegacyDeploymentSettlementPlanV1;
+        requestBundle: ICloudlyLegacyDeploymentSettlementRequestBundleV1;
+        scratchReceipt: ICloudlyLegacyDeploymentSettlementScratchReceiptV1;
+        executionAttempt: TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1;
+        requestedAt: number;
+        approvedAt: number;
+    };
+}
+interface ICloudlyLegacyDeploymentSettlementProductionStdioPayloadV1 {
+    mongoDescriptor: ICloudlyLegacyDeploymentSettlementMongoDescriptorV1;
+    sourceAuthorityHandoff: ICloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintextV1;
+    productionAuthorityHandoff: ICloudlyLegacyDeploymentSettlementAuthorityHandoffPlaintextV1;
+    authenticatedPlan: IAuthenticatedCloudlyLegacyDeploymentSettlementPlanV1;
+    requestBundle: ICloudlyLegacyDeploymentSettlementRequestBundleV1;
+    scratchReceipt: ICloudlyLegacyDeploymentSettlementScratchReceiptV1;
+    productionAuthorization: ICloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationV1;
+    executionAttempt: TCloudlyLegacyDeploymentSettlementProductionExecutionAttemptIdentityV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementProductionCheckStdioRequestV1 extends ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    command: 'settlement-production-check';
+    payload: ICloudlyLegacyDeploymentSettlementProductionStdioPayloadV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementProductionApplyStdioRequestV1 extends ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    command: 'settlement-production-apply';
+    payload: ICloudlyLegacyDeploymentSettlementProductionStdioPayloadV1;
+}
+export interface ICloudlyLegacyDeploymentSettlementProductionResolveStdioRequestV1 extends ICloudlyLegacyDeploymentSettlementStdioRequestBaseV1 {
+    command: 'settlement-production-resolve';
+    payload: ICloudlyLegacyDeploymentSettlementProductionStdioPayloadV1 & {
+        observedAt: number;
+    };
+}
+export type TCloudlyLegacyDeploymentSettlementStdioRequestV1 = ICloudlyLegacyDeploymentSettlementPlanStdioRequestV1 | ICloudlyLegacyDeploymentSettlementRequestStdioRequestV1 | ICloudlyLegacyDeploymentSettlementScratchCheckStdioRequestV1 | ICloudlyLegacyDeploymentSettlementScratchApplyStdioRequestV1 | ICloudlyLegacyDeploymentSettlementScratchResolveStdioRequestV1 | ICloudlyLegacyDeploymentSettlementProductionAuthorizeStdioRequestV1 | ICloudlyLegacyDeploymentSettlementProductionCheckStdioRequestV1 | ICloudlyLegacyDeploymentSettlementProductionApplyStdioRequestV1 | ICloudlyLegacyDeploymentSettlementProductionResolveStdioRequestV1;
+export declare const cloudlyLegacyDeploymentSettlementStdioErrorMetadata: Readonly<{
+    readonly INVALID_FRAME: Readonly<{
+        retryable: false;
+    }>;
+    readonly INVALID_REQUEST: Readonly<{
+        retryable: false;
+    }>;
+    readonly AUTHORITY_INVALID: Readonly<{
+        retryable: false;
+    }>;
+    readonly AUTHORITY_EXPIRED: Readonly<{
+        retryable: true;
+    }>;
+    readonly REQUEST_MISMATCH: Readonly<{
+        retryable: false;
+    }>;
+    readonly PLAN_MISMATCH: Readonly<{
+        retryable: false;
+    }>;
+    readonly SOURCE_STATE_MISMATCH: Readonly<{
+        retryable: false;
+    }>;
+    readonly FINAL_STATE_MISMATCH: Readonly<{
+        retryable: true;
+    }>;
+    readonly TRANSACTIONS_UNSUPPORTED: Readonly<{
+        retryable: false;
+    }>;
+    readonly OPERATION_DRIFT: Readonly<{
+        retryable: false;
+    }>;
+    readonly CLAIM_DRIFT: Readonly<{
+        retryable: false;
+    }>;
+    readonly CLASSIFICATION_MISMATCH: Readonly<{
+        retryable: false;
+    }>;
+    readonly ATTEMPT_CONFLICT: Readonly<{
+        retryable: false;
+    }>;
+    readonly ATTEMPT_NOT_FOUND: Readonly<{
+        retryable: false;
+    }>;
+    readonly INTERNAL_ERROR: Readonly<{
+        retryable: true;
+    }>;
+}>;
+export type TCloudlyLegacyDeploymentSettlementStdioErrorCode = keyof typeof cloudlyLegacyDeploymentSettlementStdioErrorMetadata;
+export type TCloudlyLegacyDeploymentSettlementStdioSafeErrorV1 = {
+    [TCode in TCloudlyLegacyDeploymentSettlementStdioErrorCode]: {
+        code: TCode;
+        retryable: typeof cloudlyLegacyDeploymentSettlementStdioErrorMetadata[TCode]['retryable'];
+    };
+}[TCloudlyLegacyDeploymentSettlementStdioErrorCode];
+interface ICloudlyLegacyDeploymentSettlementStdioResponseBaseV1<TCommand extends TCloudlyLegacyDeploymentSettlementStdioCommand> {
+    schemaVersion: 1;
+    kind: 'cloudly-legacy-deployment-settlement-stdio-response';
+    requestId: string;
+    command: TCommand;
+}
+export interface ICloudlyLegacyDeploymentSettlementStdioSuccessPayloadByCommandV1 {
+    'settlement-plan': {
+        authenticatedPlan: IAuthenticatedCloudlyLegacyDeploymentSettlementPlanV1;
+    };
+    'settlement-request': {
+        requestBundle: ICloudlyLegacyDeploymentSettlementRequestBundleV1;
+    };
+    'settlement-scratch-check': {
+        authenticatedResult: IAuthenticatedCloudlyLegacyDeploymentSettlementCheckResultV1;
+    };
+    'settlement-scratch-apply': {
+        executionBundle: TCloudlyLegacyDeploymentSettlementScratchExecutionBundleV1;
+    };
+    'settlement-scratch-resolve': {
+        authenticatedResolution: IAuthenticatedCloudlyLegacyDeploymentSettlementResolutionV1;
+    };
+    'settlement-production-authorize': {
+        productionAuthorization: ICloudlyLegacyDeploymentSettlementProductionExecutionAuthorizationV1;
+    };
+    'settlement-production-check': {
+        authenticatedResult: IAuthenticatedCloudlyLegacyDeploymentSettlementCheckResultV1;
+    };
+    'settlement-production-apply': {
+        executionBundle: TCloudlyLegacyDeploymentSettlementProductionExecutionBundleV2;
+    };
+    'settlement-production-resolve': {
+        authenticatedResolution: IAuthenticatedCloudlyLegacyDeploymentSettlementResolutionV1;
+    };
+}
+export type TCloudlyLegacyDeploymentSettlementStdioSuccessPayloadV1 = ICloudlyLegacyDeploymentSettlementStdioSuccessPayloadByCommandV1[TCloudlyLegacyDeploymentSettlementStdioCommand];
+export type TCloudlyLegacyDeploymentSettlementStdioSuccessResponseV1 = {
+    [TCommand in TCloudlyLegacyDeploymentSettlementStdioCommand]: ICloudlyLegacyDeploymentSettlementStdioResponseBaseV1<TCommand> & {
+        ok: true;
+        payload: ICloudlyLegacyDeploymentSettlementStdioSuccessPayloadByCommandV1[TCommand];
+    };
+}[TCloudlyLegacyDeploymentSettlementStdioCommand];
+export type TCloudlyLegacyDeploymentSettlementStdioErrorResponseV1 = {
+    [TCommand in TCloudlyLegacyDeploymentSettlementStdioCommand]: ICloudlyLegacyDeploymentSettlementStdioResponseBaseV1<TCommand> & {
+        ok: false;
+        error: TCloudlyLegacyDeploymentSettlementStdioSafeErrorV1;
+    };
+}[TCloudlyLegacyDeploymentSettlementStdioCommand];
+export type TCloudlyLegacyDeploymentSettlementStdioResponseV1 = TCloudlyLegacyDeploymentSettlementStdioSuccessResponseV1 | TCloudlyLegacyDeploymentSettlementStdioErrorResponseV1;
+export declare const normalizeCloudlyLegacyDeploymentSettlementMongoDescriptor: (valueArg: unknown) => Readonly<ICloudlyLegacyDeploymentSettlementMongoDescriptorV1>;
+/** Structural only; use the authority-aware variant before trusting artifacts. */
+export declare const normalizeCloudlyLegacyDeploymentSettlementStdioRequest: (valueArg: unknown) => Readonly<TCloudlyLegacyDeploymentSettlementStdioRequestV1>;
+export declare const normalizeCloudlyLegacyDeploymentSettlementStdioRequestForAuthorities: (valueArg: unknown) => Promise<Readonly<TCloudlyLegacyDeploymentSettlementStdioRequestV1>>;
+/** Structural only; use the request-authority-aware variant before trusting artifacts. */
+export declare const normalizeCloudlyLegacyDeploymentSettlementStdioResponse: (valueArg: unknown) => Readonly<TCloudlyLegacyDeploymentSettlementStdioResponseV1>;
+export declare const normalizeCloudlyLegacyDeploymentSettlementStdioResponseForRequestAuthorities: (responseArg: unknown, requestArg: unknown) => Promise<Readonly<TCloudlyLegacyDeploymentSettlementStdioResponseV1>>;
+export declare const encodeCloudlyLegacyDeploymentSettlementStdioRequestFrame: (valueArg: unknown) => Uint8Array;
+export declare const encodeCloudlyLegacyDeploymentSettlementStdioResponseFrame: (valueArg: unknown) => Uint8Array;
+export declare const decodeCloudlyLegacyDeploymentSettlementStdioRequestFrame: (frameArg: Uint8Array) => Readonly<TCloudlyLegacyDeploymentSettlementStdioRequestV1>;
+export declare const decodeCloudlyLegacyDeploymentSettlementStdioResponseFrame: (frameArg: Uint8Array) => Readonly<TCloudlyLegacyDeploymentSettlementStdioResponseV1>;
 export { cloudlyLegacyDeploymentSettlementGoldenVectors } from './runtime.cloudlylegacydeploymentsettlement.golden.js';