@sylphx/contract 0.2.0

package/dist/schemas/project-manifest.d.ts

@@ -0,0 +1,1421 @@
+/**
+ * `sylphx.toml` project manifest — Effect Schema SSOT (ADR-084 Rule 1).
+ *
+ * Plane: `management`. The manifest is the user-facing, editable surface
+ * declared in Git at repo root. The CLI parses `sylphx.toml` via Bun's
+ * built-in TOML parser, validates against this schema, and pushes to the
+ * Management API (`PUT /projects/:id/manifest`, landing in a follow-up PR).
+ *
+ * Slug-valued (not TypeID) on purpose: the manifest is what users type,
+ * so slugs are the DX-correct surface. The server maps slugs → TypeIDs
+ * per ADR-055. Immutable fields (slug, org, service.name, postgres.tier,
+ * volume.size_gb shrink) are validated at apply time on the server;
+ * the local parser only enforces shape.
+ *
+ * See docs/design/sylphx-toml-manifest.md §2 for the full design.
+ */
+import { Schema } from 'effect';
+/**
+ * Slug format per ADR-055 §Slugs — lower-case, DNS-safe, 3-63 chars.
+ * Used for `project.slug`, `project.org`, `[[services]].name`, resource
+ * names, and per-service resource bindings.
+ */
+export declare const Slug: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+export type Slug = typeof Slug.Type;
+/** Environment name — closed enum matches ADR-080 environment types. */
+export declare const ManifestEnvName: Schema.Literal<["production", "staging", "preview", "development"]>;
+export type ManifestEnvName = typeof ManifestEnvName.Type;
+/** Hetzner region starter set; extend as new regions come online. */
+export declare const ManifestRegion: Schema.Literal<["fsn1", "nbg1", "hel1", "ash1", "hil1"]>;
+export type ManifestRegion = typeof ManifestRegion.Type;
+/** Machine size tiers — shared between build runners and service containers. */
+export declare const MachineSize: Schema.Literal<["nano", "micro", "small", "standard", "large", "xlarge"]>;
+export type MachineSize = typeof MachineSize.Type;
+/** Build runner size — smaller enum than MachineSize (no nano/micro). */
+export declare const BuildMachineSize: Schema.Literal<["standard", "large", "xlarge"]>;
+export type BuildMachineSize = typeof BuildMachineSize.Type;
+/** Buildpack identifier per ADR-071. `auto` lets the platform detect. */
+export declare const BuildpackName: Schema.Literal<["auto", "ruby", "node", "python", "static", "dockerfile"]>;
+export type BuildpackName = typeof BuildpackName.Type;
+/** Service type discriminant — drives K8s workload shape (Deployment/Job). */
+export declare const ServiceType: Schema.Literal<["web", "worker", "cron", "function"]>;
+export type ServiceType = typeof ServiceType.Type;
+/** Deploy strategy — `rolling` is the Sylphx default (ArgoCD PreSync-gated). */
+export declare const DeployStrategy: Schema.Literal<["rolling", "blue-green", "immediate"]>;
+export type DeployStrategy = typeof DeployStrategy.Type;
+/** WWW-apex redirect policy at the Gateway API listener. */
+export declare const WwwRedirect: Schema.Literal<["apex", "www", "none"]>;
+export type WwwRedirect = typeof WwwRedirect.Type;
+export declare const ManifestProjectSection: Schema.Struct<{
+    /** Human-readable name; mutable, displayed in Console. */
+    name: Schema.filter<Schema.filter<typeof Schema.String>>;
+    /**
+     * DNS-safe slug; **immutable** per ADR-055. Drives `{slug}.sylphx.app`,
+     * `{slug}.sylphx.net`. Server rejects slug change with `409 immutable_slug`.
+     */
+    slug: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+    /** Owner org slug (ADR-055). Resolved to OrgId server-side. */
+    org: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+    /** Default deployment region. Multi-region is services-level. */
+    region: Schema.optional<Schema.Literal<["fsn1", "nbg1", "hel1", "ash1", "hil1"]>>;
+    /** Optional description surfaced in Console header. */
+    description: Schema.optional<Schema.filter<typeof Schema.String>>;
+}>;
+export type ManifestProjectSection = typeof ManifestProjectSection.Type;
+export declare const ManifestBuildSection: Schema.Struct<{
+    /**
+     * Override buildpack auto-detection. Unset → auto-detect from
+     * package.json / Gemfile / requirements.txt / Dockerfile.
+     */
+    buildpack: Schema.optional<Schema.Literal<["auto", "ruby", "node", "python", "static", "dockerfile"]>>;
+    /** Override path to Dockerfile (implies buildpack=dockerfile). */
+    dockerfile: Schema.optional<typeof Schema.String>;
+    /** Docker build context path (default: repo root). */
+    docker_context: Schema.optional<typeof Schema.String>;
+    /** Custom build command; overrides buildpack default. */
+    build_command: Schema.optional<typeof Schema.String>;
+    /** Glob patterns to exclude from build context (.dockerignore-style). */
+    ignore: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    /** CI build machine tier per `buildMachineType` field on Project. */
+    machine_type: Schema.optional<Schema.Literal<["standard", "large", "xlarge"]>>;
+    /** Reserved for reproducible-builds (ADR-069) metadata. */
+    reproducible: Schema.optional<typeof Schema.Boolean>;
+}>;
+export type ManifestBuildSection = typeof ManifestBuildSection.Type;
+export declare const ManifestDeploySection: Schema.Struct<{
+    /**
+     * Command run before traffic cutover (DB migrations via expand-and-
+     * contract). Runs as an ArgoCD PreSync Job (sync-wave "-1"). ADR-066.2.
+     */
+    release_command: Schema.optional<typeof Schema.String>;
+    /** HTTP path for K8s readinessProbe. */
+    health_check_path: Schema.optional<typeof Schema.String>;
+    /** Timeout in seconds. */
+    health_check_timeout: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    /** Deploy strategy; Sylphx default is rolling. */
+    strategy: Schema.optional<Schema.Literal<["rolling", "blue-green", "immediate"]>>;
+    /** Grace period before SIGKILL (seconds). */
+    graceful_shutdown: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+}>;
+export type ManifestDeploySection = typeof ManifestDeploySection.Type;
+export declare const ManifestServiceSection: Schema.Struct<{
+    /** Service name — unique within project. Used as K8s Deployment name. */
+    name: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+    type: Schema.Literal<["web", "worker", "cron", "function"]>;
+    /** Container start command. */
+    command: Schema.optional<typeof Schema.String>;
+    /** Internal container port; required for `web`. */
+    port: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    /**
+     * Public HTTP port (Gateway API listener). Defaults to 443 for web.
+     * Most users leave unset.
+     */
+    internal_port: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    /** Replica count. Ignored for `cron`. */
+    replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    /** Compute size; maps to per-service K8s resources.requests/limits. */
+    instance_type: Schema.optional<Schema.Literal<["nano", "micro", "small", "standard", "large", "xlarge"]>>;
+    /** Required when type=cron. Standard 5-field cron expression. */
+    cron_schedule: Schema.optional<typeof Schema.String>;
+    /** Optional per-service region override. */
+    regions: Schema.optional<Schema.Array$<Schema.Literal<["fsn1", "nbg1", "hel1", "ash1", "hil1"]>>>;
+    /**
+     * Scale-to-zero (KEDA). `false` (default) = pinned at `min_replicas >= 1`;
+     * `true` = the reconciler emits a KEDA ScaledObject and lets KEDA drive
+     * the replica count from 0 → N on incoming traffic (docs/design/scale-to-zero.md).
+     */
+    scale_to_zero: Schema.optional<typeof Schema.Boolean>;
+    /**
+     * Seconds of no traffic before KEDA scales the Deployment down to 0.
+     * Maps to KEDA `cooldownPeriod`. Only meaningful when `scale_to_zero=true`.
+     * Range: 60s–3600s. Default: 300 (5 min).
+     */
+    idle_timeout_seconds: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    /**
+     * Minimum replica count. Default: `0` when `scale_to_zero=true`, else `1`.
+     * Setting `min_replicas=1` alongside `scale_to_zero=true` keeps a warm
+     * floor while still letting KEDA scale horizontally beyond 1.
+     */
+    min_replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    /** Per-service env var merge — refs entries from top-level [env]. */
+    env: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    /** Per-service resource bindings (by resource name). */
+    resources: Schema.optional<Schema.Array$<Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>>>;
+}>;
+export type ManifestServiceSection = typeof ManifestServiceSection.Type;
+/**
+ * Env var value — literal, secret reference, or resource attribute.
+ * Values are NEVER stored in the manifest — always by reference.
+ * `from_secret` resolves via the platform `secrets` table (AES-256-GCM).
+ * `from_resource` + `attr` resolves via the `resources` table; valid
+ * attributes: `connection_url | host | port | user | password | database`.
+ */
+export declare const ManifestEnvValue: Schema.Union<[Schema.Struct<{
+    value: typeof Schema.String;
+}>, Schema.Struct<{
+    from_secret: typeof Schema.String;
+}>, Schema.Struct<{
+    from_resource: typeof Schema.String;
+    attr: typeof Schema.String;
+}>]>;
+export type ManifestEnvValue = typeof ManifestEnvValue.Type;
+export declare const ManifestDomainSection: Schema.Struct<{
+    hostname: Schema.filter<typeof Schema.String>;
+    /** Which service in [[services]] handles requests for this hostname. */
+    service: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+    /** Force HTTPS redirect at the Gateway API listener. */
+    redirect_https: Schema.optional<typeof Schema.Boolean>;
+    /** WWW-apex redirect policy. */
+    www_redirect: Schema.optional<Schema.Literal<["apex", "www", "none"]>>;
+    /** Alternate names (e.g. marketing domains pointing here). */
+    aliases: Schema.optional<Schema.Array$<typeof Schema.String>>;
+}>;
+export type ManifestDomainSection = typeof ManifestDomainSection.Type;
+export declare const PostgresTier: Schema.Literal<["nano", "micro", "standard", "large", "xl"]>;
+export type PostgresTier = typeof PostgresTier.Type;
+export declare const RedisTier: Schema.Literal<["micro", "standard", "large"]>;
+export type RedisTier = typeof RedisTier.Type;
+export declare const PostgresVersion: Schema.Literal<["15", "16", "17"]>;
+export type PostgresVersion = typeof PostgresVersion.Type;
+export declare const BlobVisibility: Schema.Literal<["private", "public"]>;
+export type BlobVisibility = typeof BlobVisibility.Type;
+export declare const VolumeAccess: Schema.Literal<["ReadWriteOnce", "ReadWriteMany"]>;
+export type VolumeAccess = typeof VolumeAccess.Type;
+export declare const SearchTier: Schema.Literal<["micro", "standard"]>;
+export type SearchTier = typeof SearchTier.Type;
+export declare const ManifestPostgresResource: Schema.Struct<{
+    /** CNPG tier; IMMUTABLE after creation. */
+    tier: Schema.Literal<["nano", "micro", "standard", "large", "xl"]>;
+    storage_gb: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    version: Schema.optional<Schema.Literal<["15", "16", "17"]>>;
+    /** Enable CNPG read-replica(s). */
+    replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    /** Branch-per-preview (P0 gap #4 sibling). */
+    branch_on_preview: Schema.optional<typeof Schema.Boolean>;
+}>;
+export type ManifestPostgresResource = typeof ManifestPostgresResource.Type;
+export declare const ManifestRedisResource: Schema.Struct<{
+    tier: Schema.Literal<["micro", "standard", "large"]>;
+}>;
+export type ManifestRedisResource = typeof ManifestRedisResource.Type;
+export declare const ManifestBlobResource: Schema.Struct<{
+    /** Ceph S3 bucket, auto-provisioned. `public` maps to presigned-URL-only. */
+    visibility: Schema.Literal<["private", "public"]>;
+}>;
+export type ManifestBlobResource = typeof ManifestBlobResource.Type;
+export declare const ManifestVolumeResource: Schema.Struct<{
+    name: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+    /** GROW-ONLY — server rejects shrink with `409 immutable_volume_shrink`. */
+    size_gb: Schema.filter<Schema.filter<typeof Schema.Number>>;
+    /** ReadWriteOnce → rook-ceph-block; ReadWriteMany → rook-cephfs. */
+    access: Schema.Literal<["ReadWriteOnce", "ReadWriteMany"]>;
+    mount: typeof Schema.String;
+}>;
+export type ManifestVolumeResource = typeof ManifestVolumeResource.Type;
+export declare const ManifestSearchResource: Schema.Struct<{
+    tier: Schema.Literal<["micro", "standard"]>;
+}>;
+export type ManifestSearchResource = typeof ManifestSearchResource.Type;
+export declare const ManifestResourcesSection: Schema.Struct<{
+    postgres: Schema.optional<Schema.Struct<{
+        /** CNPG tier; IMMUTABLE after creation. */
+        tier: Schema.Literal<["nano", "micro", "standard", "large", "xl"]>;
+        storage_gb: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        version: Schema.optional<Schema.Literal<["15", "16", "17"]>>;
+        /** Enable CNPG read-replica(s). */
+        replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        /** Branch-per-preview (P0 gap #4 sibling). */
+        branch_on_preview: Schema.optional<typeof Schema.Boolean>;
+    }>>;
+    redis: Schema.optional<Schema.Struct<{
+        tier: Schema.Literal<["micro", "standard", "large"]>;
+    }>>;
+    blob: Schema.optional<Schema.Struct<{
+        /** Ceph S3 bucket, auto-provisioned. `public` maps to presigned-URL-only. */
+        visibility: Schema.Literal<["private", "public"]>;
+    }>>;
+    volume: Schema.optional<Schema.Array$<Schema.Struct<{
+        name: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        /** GROW-ONLY — server rejects shrink with `409 immutable_volume_shrink`. */
+        size_gb: Schema.filter<Schema.filter<typeof Schema.Number>>;
+        /** ReadWriteOnce → rook-ceph-block; ReadWriteMany → rook-cephfs. */
+        access: Schema.Literal<["ReadWriteOnce", "ReadWriteMany"]>;
+        mount: typeof Schema.String;
+    }>>>;
+    search: Schema.optional<Schema.Struct<{
+        tier: Schema.Literal<["micro", "standard"]>;
+    }>>;
+}>;
+export type ManifestResourcesSection = typeof ManifestResourcesSection.Type;
+export declare const ManifestCiSection: Schema.Struct<{
+    on_push: Schema.optional<typeof Schema.Boolean>;
+    preview_deploys: Schema.optional<typeof Schema.Boolean>;
+    pr_comment: Schema.optional<typeof Schema.Boolean>;
+    /** Regex of branches that auto-deploy to production. */
+    production_branches: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    /** Which runner tier to request from the managed runner pool. */
+    runner: Schema.optional<Schema.Literal<["standard", "large", "xlarge"]>>;
+    /** Paths whose changes should not trigger a deploy. */
+    ignore_paths: Schema.optional<Schema.Array$<typeof Schema.String>>;
+}>;
+export type ManifestCiSection = typeof ManifestCiSection.Type;
+/**
+ * Sparse service override keyed by `name`. Only `name` is required;
+ * every other field is optional and shallow-merges onto the top-level
+ * `[[services]]` entry with the matching name. Arrays replace, scalars/
+ * structs merge.
+ */
+export declare const ManifestServiceOverride: Schema.Struct<{
+    name: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+    type: Schema.optional<Schema.Literal<["web", "worker", "cron", "function"]>>;
+    command: Schema.optional<typeof Schema.String>;
+    port: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    internal_port: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    instance_type: Schema.optional<Schema.Literal<["nano", "micro", "small", "standard", "large", "xlarge"]>>;
+    cron_schedule: Schema.optional<typeof Schema.String>;
+    regions: Schema.optional<Schema.Array$<Schema.Literal<["fsn1", "nbg1", "hel1", "ash1", "hil1"]>>>;
+    scale_to_zero: Schema.optional<typeof Schema.Boolean>;
+    idle_timeout_seconds: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    min_replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    env: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    resources: Schema.optional<Schema.Array$<Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>>>;
+}>;
+export type ManifestServiceOverride = typeof ManifestServiceOverride.Type;
+export declare const ManifestEnvironmentOverride: Schema.Struct<{
+    /** Shallow-merge over top-level [env]. */
+    env: Schema.optional<Schema.Record$<typeof Schema.String, Schema.Union<[Schema.Struct<{
+        value: typeof Schema.String;
+    }>, Schema.Struct<{
+        from_secret: typeof Schema.String;
+    }>, Schema.Struct<{
+        from_resource: typeof Schema.String;
+        attr: typeof Schema.String;
+    }>]>>>;
+    /** Override build for this env. */
+    build: Schema.optional<Schema.Struct<{
+        /**
+         * Override buildpack auto-detection. Unset → auto-detect from
+         * package.json / Gemfile / requirements.txt / Dockerfile.
+         */
+        buildpack: Schema.optional<Schema.Literal<["auto", "ruby", "node", "python", "static", "dockerfile"]>>;
+        /** Override path to Dockerfile (implies buildpack=dockerfile). */
+        dockerfile: Schema.optional<typeof Schema.String>;
+        /** Docker build context path (default: repo root). */
+        docker_context: Schema.optional<typeof Schema.String>;
+        /** Custom build command; overrides buildpack default. */
+        build_command: Schema.optional<typeof Schema.String>;
+        /** Glob patterns to exclude from build context (.dockerignore-style). */
+        ignore: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        /** CI build machine tier per `buildMachineType` field on Project. */
+        machine_type: Schema.optional<Schema.Literal<["standard", "large", "xlarge"]>>;
+        /** Reserved for reproducible-builds (ADR-069) metadata. */
+        reproducible: Schema.optional<typeof Schema.Boolean>;
+    }>>;
+    /** Override deploy for this env. */
+    deploy: Schema.optional<Schema.Struct<{
+        /**
+         * Command run before traffic cutover (DB migrations via expand-and-
+         * contract). Runs as an ArgoCD PreSync Job (sync-wave "-1"). ADR-066.2.
+         */
+        release_command: Schema.optional<typeof Schema.String>;
+        /** HTTP path for K8s readinessProbe. */
+        health_check_path: Schema.optional<typeof Schema.String>;
+        /** Timeout in seconds. */
+        health_check_timeout: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        /** Deploy strategy; Sylphx default is rolling. */
+        strategy: Schema.optional<Schema.Literal<["rolling", "blue-green", "immediate"]>>;
+        /** Grace period before SIGKILL (seconds). */
+        graceful_shutdown: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    }>>;
+    /** Sparse service overrides; entries match by `name`. */
+    services: Schema.optional<Schema.Array$<Schema.Struct<{
+        name: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        type: Schema.optional<Schema.Literal<["web", "worker", "cron", "function"]>>;
+        command: Schema.optional<typeof Schema.String>;
+        port: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        internal_port: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        instance_type: Schema.optional<Schema.Literal<["nano", "micro", "small", "standard", "large", "xlarge"]>>;
+        cron_schedule: Schema.optional<typeof Schema.String>;
+        regions: Schema.optional<Schema.Array$<Schema.Literal<["fsn1", "nbg1", "hel1", "ash1", "hil1"]>>>;
+        scale_to_zero: Schema.optional<typeof Schema.Boolean>;
+        idle_timeout_seconds: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        min_replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        env: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        resources: Schema.optional<Schema.Array$<Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>>>;
+    }>>>;
+    /** Per-env region override. */
+    region: Schema.optional<Schema.Literal<["fsn1", "nbg1", "hel1", "ash1", "hil1"]>>;
+    /** Domain overrides; typically for preview-only hostnames. */
+    domains: Schema.optional<Schema.Array$<Schema.Struct<{
+        hostname: Schema.filter<typeof Schema.String>;
+        /** Which service in [[services]] handles requests for this hostname. */
+        service: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        /** Force HTTPS redirect at the Gateway API listener. */
+        redirect_https: Schema.optional<typeof Schema.Boolean>;
+        /** WWW-apex redirect policy. */
+        www_redirect: Schema.optional<Schema.Literal<["apex", "www", "none"]>>;
+        /** Alternate names (e.g. marketing domains pointing here). */
+        aliases: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    }>>>;
+}>;
+export type ManifestEnvironmentOverride = typeof ManifestEnvironmentOverride.Type;
+/**
+ * Map of environment overrides — keys must be in `ManifestEnvName`
+ * (production | staging | preview | development) and are all optional.
+ * `partialWith` on a fixed-key `Struct` enforces "only these keys, each
+ * optional" — stricter than `Record(EnvName, …)` (which Effect treats
+ * as an exhaustive record demanding every key) yet still flexible.
+ */
+export declare const ManifestEnvironmentsMap: Schema.SchemaClass<{
+    readonly development?: {
+        readonly domains?: readonly {
+            readonly service: string;
+            readonly hostname: string;
+            readonly redirect_https?: boolean | undefined;
+            readonly www_redirect?: "none" | "apex" | "www" | undefined;
+            readonly aliases?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly services?: readonly {
+            readonly name: string;
+            readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+            readonly port?: number | undefined;
+            readonly env?: readonly string[] | undefined;
+            readonly replicas?: number | undefined;
+            readonly command?: string | undefined;
+            readonly internal_port?: number | undefined;
+            readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+            readonly cron_schedule?: string | undefined;
+            readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+            readonly scale_to_zero?: boolean | undefined;
+            readonly idle_timeout_seconds?: number | undefined;
+            readonly min_replicas?: number | undefined;
+            readonly resources?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+        readonly env?: {
+            readonly [x: string]: {
+                readonly value: string;
+            } | {
+                readonly from_secret: string;
+            } | {
+                readonly from_resource: string;
+                readonly attr: string;
+            };
+        } | undefined;
+        readonly build?: {
+            readonly dockerfile?: string | undefined;
+            readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+            readonly docker_context?: string | undefined;
+            readonly build_command?: string | undefined;
+            readonly ignore?: readonly string[] | undefined;
+            readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+            readonly reproducible?: boolean | undefined;
+        } | undefined;
+        readonly deploy?: {
+            readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+            readonly release_command?: string | undefined;
+            readonly health_check_path?: string | undefined;
+            readonly health_check_timeout?: number | undefined;
+            readonly graceful_shutdown?: number | undefined;
+        } | undefined;
+    };
+    readonly staging?: {
+        readonly domains?: readonly {
+            readonly service: string;
+            readonly hostname: string;
+            readonly redirect_https?: boolean | undefined;
+            readonly www_redirect?: "none" | "apex" | "www" | undefined;
+            readonly aliases?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly services?: readonly {
+            readonly name: string;
+            readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+            readonly port?: number | undefined;
+            readonly env?: readonly string[] | undefined;
+            readonly replicas?: number | undefined;
+            readonly command?: string | undefined;
+            readonly internal_port?: number | undefined;
+            readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+            readonly cron_schedule?: string | undefined;
+            readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+            readonly scale_to_zero?: boolean | undefined;
+            readonly idle_timeout_seconds?: number | undefined;
+            readonly min_replicas?: number | undefined;
+            readonly resources?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+        readonly env?: {
+            readonly [x: string]: {
+                readonly value: string;
+            } | {
+                readonly from_secret: string;
+            } | {
+                readonly from_resource: string;
+                readonly attr: string;
+            };
+        } | undefined;
+        readonly build?: {
+            readonly dockerfile?: string | undefined;
+            readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+            readonly docker_context?: string | undefined;
+            readonly build_command?: string | undefined;
+            readonly ignore?: readonly string[] | undefined;
+            readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+            readonly reproducible?: boolean | undefined;
+        } | undefined;
+        readonly deploy?: {
+            readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+            readonly release_command?: string | undefined;
+            readonly health_check_path?: string | undefined;
+            readonly health_check_timeout?: number | undefined;
+            readonly graceful_shutdown?: number | undefined;
+        } | undefined;
+    };
+    readonly production?: {
+        readonly domains?: readonly {
+            readonly service: string;
+            readonly hostname: string;
+            readonly redirect_https?: boolean | undefined;
+            readonly www_redirect?: "none" | "apex" | "www" | undefined;
+            readonly aliases?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly services?: readonly {
+            readonly name: string;
+            readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+            readonly port?: number | undefined;
+            readonly env?: readonly string[] | undefined;
+            readonly replicas?: number | undefined;
+            readonly command?: string | undefined;
+            readonly internal_port?: number | undefined;
+            readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+            readonly cron_schedule?: string | undefined;
+            readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+            readonly scale_to_zero?: boolean | undefined;
+            readonly idle_timeout_seconds?: number | undefined;
+            readonly min_replicas?: number | undefined;
+            readonly resources?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+        readonly env?: {
+            readonly [x: string]: {
+                readonly value: string;
+            } | {
+                readonly from_secret: string;
+            } | {
+                readonly from_resource: string;
+                readonly attr: string;
+            };
+        } | undefined;
+        readonly build?: {
+            readonly dockerfile?: string | undefined;
+            readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+            readonly docker_context?: string | undefined;
+            readonly build_command?: string | undefined;
+            readonly ignore?: readonly string[] | undefined;
+            readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+            readonly reproducible?: boolean | undefined;
+        } | undefined;
+        readonly deploy?: {
+            readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+            readonly release_command?: string | undefined;
+            readonly health_check_path?: string | undefined;
+            readonly health_check_timeout?: number | undefined;
+            readonly graceful_shutdown?: number | undefined;
+        } | undefined;
+    };
+    readonly preview?: {
+        readonly domains?: readonly {
+            readonly service: string;
+            readonly hostname: string;
+            readonly redirect_https?: boolean | undefined;
+            readonly www_redirect?: "none" | "apex" | "www" | undefined;
+            readonly aliases?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly services?: readonly {
+            readonly name: string;
+            readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+            readonly port?: number | undefined;
+            readonly env?: readonly string[] | undefined;
+            readonly replicas?: number | undefined;
+            readonly command?: string | undefined;
+            readonly internal_port?: number | undefined;
+            readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+            readonly cron_schedule?: string | undefined;
+            readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+            readonly scale_to_zero?: boolean | undefined;
+            readonly idle_timeout_seconds?: number | undefined;
+            readonly min_replicas?: number | undefined;
+            readonly resources?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+        readonly env?: {
+            readonly [x: string]: {
+                readonly value: string;
+            } | {
+                readonly from_secret: string;
+            } | {
+                readonly from_resource: string;
+                readonly attr: string;
+            };
+        } | undefined;
+        readonly build?: {
+            readonly dockerfile?: string | undefined;
+            readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+            readonly docker_context?: string | undefined;
+            readonly build_command?: string | undefined;
+            readonly ignore?: readonly string[] | undefined;
+            readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+            readonly reproducible?: boolean | undefined;
+        } | undefined;
+        readonly deploy?: {
+            readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+            readonly release_command?: string | undefined;
+            readonly health_check_path?: string | undefined;
+            readonly health_check_timeout?: number | undefined;
+            readonly graceful_shutdown?: number | undefined;
+        } | undefined;
+    };
+}, {
+    readonly development?: {
+        readonly domains?: readonly {
+            readonly service: string;
+            readonly hostname: string;
+            readonly redirect_https?: boolean | undefined;
+            readonly www_redirect?: "none" | "apex" | "www" | undefined;
+            readonly aliases?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly services?: readonly {
+            readonly name: string;
+            readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+            readonly port?: number | undefined;
+            readonly env?: readonly string[] | undefined;
+            readonly replicas?: number | undefined;
+            readonly command?: string | undefined;
+            readonly internal_port?: number | undefined;
+            readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+            readonly cron_schedule?: string | undefined;
+            readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+            readonly scale_to_zero?: boolean | undefined;
+            readonly idle_timeout_seconds?: number | undefined;
+            readonly min_replicas?: number | undefined;
+            readonly resources?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+        readonly env?: {
+            readonly [x: string]: {
+                readonly value: string;
+            } | {
+                readonly from_secret: string;
+            } | {
+                readonly from_resource: string;
+                readonly attr: string;
+            };
+        } | undefined;
+        readonly build?: {
+            readonly dockerfile?: string | undefined;
+            readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+            readonly docker_context?: string | undefined;
+            readonly build_command?: string | undefined;
+            readonly ignore?: readonly string[] | undefined;
+            readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+            readonly reproducible?: boolean | undefined;
+        } | undefined;
+        readonly deploy?: {
+            readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+            readonly release_command?: string | undefined;
+            readonly health_check_path?: string | undefined;
+            readonly health_check_timeout?: number | undefined;
+            readonly graceful_shutdown?: number | undefined;
+        } | undefined;
+    };
+    readonly staging?: {
+        readonly domains?: readonly {
+            readonly service: string;
+            readonly hostname: string;
+            readonly redirect_https?: boolean | undefined;
+            readonly www_redirect?: "none" | "apex" | "www" | undefined;
+            readonly aliases?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly services?: readonly {
+            readonly name: string;
+            readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+            readonly port?: number | undefined;
+            readonly env?: readonly string[] | undefined;
+            readonly replicas?: number | undefined;
+            readonly command?: string | undefined;
+            readonly internal_port?: number | undefined;
+            readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+            readonly cron_schedule?: string | undefined;
+            readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+            readonly scale_to_zero?: boolean | undefined;
+            readonly idle_timeout_seconds?: number | undefined;
+            readonly min_replicas?: number | undefined;
+            readonly resources?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+        readonly env?: {
+            readonly [x: string]: {
+                readonly value: string;
+            } | {
+                readonly from_secret: string;
+            } | {
+                readonly from_resource: string;
+                readonly attr: string;
+            };
+        } | undefined;
+        readonly build?: {
+            readonly dockerfile?: string | undefined;
+            readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+            readonly docker_context?: string | undefined;
+            readonly build_command?: string | undefined;
+            readonly ignore?: readonly string[] | undefined;
+            readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+            readonly reproducible?: boolean | undefined;
+        } | undefined;
+        readonly deploy?: {
+            readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+            readonly release_command?: string | undefined;
+            readonly health_check_path?: string | undefined;
+            readonly health_check_timeout?: number | undefined;
+            readonly graceful_shutdown?: number | undefined;
+        } | undefined;
+    };
+    readonly production?: {
+        readonly domains?: readonly {
+            readonly service: string;
+            readonly hostname: string;
+            readonly redirect_https?: boolean | undefined;
+            readonly www_redirect?: "none" | "apex" | "www" | undefined;
+            readonly aliases?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly services?: readonly {
+            readonly name: string;
+            readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+            readonly port?: number | undefined;
+            readonly env?: readonly string[] | undefined;
+            readonly replicas?: number | undefined;
+            readonly command?: string | undefined;
+            readonly internal_port?: number | undefined;
+            readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+            readonly cron_schedule?: string | undefined;
+            readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+            readonly scale_to_zero?: boolean | undefined;
+            readonly idle_timeout_seconds?: number | undefined;
+            readonly min_replicas?: number | undefined;
+            readonly resources?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+        readonly env?: {
+            readonly [x: string]: {
+                readonly value: string;
+            } | {
+                readonly from_secret: string;
+            } | {
+                readonly from_resource: string;
+                readonly attr: string;
+            };
+        } | undefined;
+        readonly build?: {
+            readonly dockerfile?: string | undefined;
+            readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+            readonly docker_context?: string | undefined;
+            readonly build_command?: string | undefined;
+            readonly ignore?: readonly string[] | undefined;
+            readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+            readonly reproducible?: boolean | undefined;
+        } | undefined;
+        readonly deploy?: {
+            readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+            readonly release_command?: string | undefined;
+            readonly health_check_path?: string | undefined;
+            readonly health_check_timeout?: number | undefined;
+            readonly graceful_shutdown?: number | undefined;
+        } | undefined;
+    };
+    readonly preview?: {
+        readonly domains?: readonly {
+            readonly service: string;
+            readonly hostname: string;
+            readonly redirect_https?: boolean | undefined;
+            readonly www_redirect?: "none" | "apex" | "www" | undefined;
+            readonly aliases?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly services?: readonly {
+            readonly name: string;
+            readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+            readonly port?: number | undefined;
+            readonly env?: readonly string[] | undefined;
+            readonly replicas?: number | undefined;
+            readonly command?: string | undefined;
+            readonly internal_port?: number | undefined;
+            readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+            readonly cron_schedule?: string | undefined;
+            readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+            readonly scale_to_zero?: boolean | undefined;
+            readonly idle_timeout_seconds?: number | undefined;
+            readonly min_replicas?: number | undefined;
+            readonly resources?: readonly string[] | undefined;
+        }[] | undefined;
+        readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+        readonly env?: {
+            readonly [x: string]: {
+                readonly value: string;
+            } | {
+                readonly from_secret: string;
+            } | {
+                readonly from_resource: string;
+                readonly attr: string;
+            };
+        } | undefined;
+        readonly build?: {
+            readonly dockerfile?: string | undefined;
+            readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+            readonly docker_context?: string | undefined;
+            readonly build_command?: string | undefined;
+            readonly ignore?: readonly string[] | undefined;
+            readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+            readonly reproducible?: boolean | undefined;
+        } | undefined;
+        readonly deploy?: {
+            readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+            readonly release_command?: string | undefined;
+            readonly health_check_path?: string | undefined;
+            readonly health_check_timeout?: number | undefined;
+            readonly graceful_shutdown?: number | undefined;
+        } | undefined;
+    };
+}, never>;
+export type ManifestEnvironmentsMap = typeof ManifestEnvironmentsMap.Type;
+/**
+ * Complete `sylphx.toml` manifest. Version starts at `"1"`; future
+ * breaking changes bump the major. Additive minor changes leave `"1"`
+ * alone and feature-detect.
+ */
+export declare const SylphxManifest: Schema.Struct<{
+    version: Schema.Literal<["1"]>;
+    project: Schema.Struct<{
+        /** Human-readable name; mutable, displayed in Console. */
+        name: Schema.filter<Schema.filter<typeof Schema.String>>;
+        /**
+         * DNS-safe slug; **immutable** per ADR-055. Drives `{slug}.sylphx.app`,
+         * `{slug}.sylphx.net`. Server rejects slug change with `409 immutable_slug`.
+         */
+        slug: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        /** Owner org slug (ADR-055). Resolved to OrgId server-side. */
+        org: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        /** Default deployment region. Multi-region is services-level. */
+        region: Schema.optional<Schema.Literal<["fsn1", "nbg1", "hel1", "ash1", "hil1"]>>;
+        /** Optional description surfaced in Console header. */
+        description: Schema.optional<Schema.filter<typeof Schema.String>>;
+    }>;
+    build: Schema.optional<Schema.Struct<{
+        /**
+         * Override buildpack auto-detection. Unset → auto-detect from
+         * package.json / Gemfile / requirements.txt / Dockerfile.
+         */
+        buildpack: Schema.optional<Schema.Literal<["auto", "ruby", "node", "python", "static", "dockerfile"]>>;
+        /** Override path to Dockerfile (implies buildpack=dockerfile). */
+        dockerfile: Schema.optional<typeof Schema.String>;
+        /** Docker build context path (default: repo root). */
+        docker_context: Schema.optional<typeof Schema.String>;
+        /** Custom build command; overrides buildpack default. */
+        build_command: Schema.optional<typeof Schema.String>;
+        /** Glob patterns to exclude from build context (.dockerignore-style). */
+        ignore: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        /** CI build machine tier per `buildMachineType` field on Project. */
+        machine_type: Schema.optional<Schema.Literal<["standard", "large", "xlarge"]>>;
+        /** Reserved for reproducible-builds (ADR-069) metadata. */
+        reproducible: Schema.optional<typeof Schema.Boolean>;
+    }>>;
+    deploy: Schema.optional<Schema.Struct<{
+        /**
+         * Command run before traffic cutover (DB migrations via expand-and-
+         * contract). Runs as an ArgoCD PreSync Job (sync-wave "-1"). ADR-066.2.
+         */
+        release_command: Schema.optional<typeof Schema.String>;
+        /** HTTP path for K8s readinessProbe. */
+        health_check_path: Schema.optional<typeof Schema.String>;
+        /** Timeout in seconds. */
+        health_check_timeout: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        /** Deploy strategy; Sylphx default is rolling. */
+        strategy: Schema.optional<Schema.Literal<["rolling", "blue-green", "immediate"]>>;
+        /** Grace period before SIGKILL (seconds). */
+        graceful_shutdown: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+    }>>;
+    services: Schema.optional<Schema.Array$<Schema.Struct<{
+        /** Service name — unique within project. Used as K8s Deployment name. */
+        name: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        type: Schema.Literal<["web", "worker", "cron", "function"]>;
+        /** Container start command. */
+        command: Schema.optional<typeof Schema.String>;
+        /** Internal container port; required for `web`. */
+        port: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        /**
+         * Public HTTP port (Gateway API listener). Defaults to 443 for web.
+         * Most users leave unset.
+         */
+        internal_port: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        /** Replica count. Ignored for `cron`. */
+        replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        /** Compute size; maps to per-service K8s resources.requests/limits. */
+        instance_type: Schema.optional<Schema.Literal<["nano", "micro", "small", "standard", "large", "xlarge"]>>;
+        /** Required when type=cron. Standard 5-field cron expression. */
+        cron_schedule: Schema.optional<typeof Schema.String>;
+        /** Optional per-service region override. */
+        regions: Schema.optional<Schema.Array$<Schema.Literal<["fsn1", "nbg1", "hel1", "ash1", "hil1"]>>>;
+        /**
+         * Scale-to-zero (KEDA). `false` (default) = pinned at `min_replicas >= 1`;
+         * `true` = the reconciler emits a KEDA ScaledObject and lets KEDA drive
+         * the replica count from 0 → N on incoming traffic (docs/design/scale-to-zero.md).
+         */
+        scale_to_zero: Schema.optional<typeof Schema.Boolean>;
+        /**
+         * Seconds of no traffic before KEDA scales the Deployment down to 0.
+         * Maps to KEDA `cooldownPeriod`. Only meaningful when `scale_to_zero=true`.
+         * Range: 60s–3600s. Default: 300 (5 min).
+         */
+        idle_timeout_seconds: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        /**
+         * Minimum replica count. Default: `0` when `scale_to_zero=true`, else `1`.
+         * Setting `min_replicas=1` alongside `scale_to_zero=true` keeps a warm
+         * floor while still letting KEDA scale horizontally beyond 1.
+         */
+        min_replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+        /** Per-service env var merge — refs entries from top-level [env]. */
+        env: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        /** Per-service resource bindings (by resource name). */
+        resources: Schema.optional<Schema.Array$<Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>>>;
+    }>>>;
+    env: Schema.optional<Schema.Record$<typeof Schema.String, Schema.Union<[Schema.Struct<{
+        value: typeof Schema.String;
+    }>, Schema.Struct<{
+        from_secret: typeof Schema.String;
+    }>, Schema.Struct<{
+        from_resource: typeof Schema.String;
+        attr: typeof Schema.String;
+    }>]>>>;
+    domains: Schema.optional<Schema.Array$<Schema.Struct<{
+        hostname: Schema.filter<typeof Schema.String>;
+        /** Which service in [[services]] handles requests for this hostname. */
+        service: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+        /** Force HTTPS redirect at the Gateway API listener. */
+        redirect_https: Schema.optional<typeof Schema.Boolean>;
+        /** WWW-apex redirect policy. */
+        www_redirect: Schema.optional<Schema.Literal<["apex", "www", "none"]>>;
+        /** Alternate names (e.g. marketing domains pointing here). */
+        aliases: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    }>>>;
+    environments: Schema.optional<Schema.SchemaClass<{
+        readonly development?: {
+            readonly domains?: readonly {
+                readonly service: string;
+                readonly hostname: string;
+                readonly redirect_https?: boolean | undefined;
+                readonly www_redirect?: "none" | "apex" | "www" | undefined;
+                readonly aliases?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly services?: readonly {
+                readonly name: string;
+                readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+                readonly port?: number | undefined;
+                readonly env?: readonly string[] | undefined;
+                readonly replicas?: number | undefined;
+                readonly command?: string | undefined;
+                readonly internal_port?: number | undefined;
+                readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+                readonly cron_schedule?: string | undefined;
+                readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+                readonly scale_to_zero?: boolean | undefined;
+                readonly idle_timeout_seconds?: number | undefined;
+                readonly min_replicas?: number | undefined;
+                readonly resources?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+            readonly env?: {
+                readonly [x: string]: {
+                    readonly value: string;
+                } | {
+                    readonly from_secret: string;
+                } | {
+                    readonly from_resource: string;
+                    readonly attr: string;
+                };
+            } | undefined;
+            readonly build?: {
+                readonly dockerfile?: string | undefined;
+                readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+                readonly docker_context?: string | undefined;
+                readonly build_command?: string | undefined;
+                readonly ignore?: readonly string[] | undefined;
+                readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+                readonly reproducible?: boolean | undefined;
+            } | undefined;
+            readonly deploy?: {
+                readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+                readonly release_command?: string | undefined;
+                readonly health_check_path?: string | undefined;
+                readonly health_check_timeout?: number | undefined;
+                readonly graceful_shutdown?: number | undefined;
+            } | undefined;
+        };
+        readonly staging?: {
+            readonly domains?: readonly {
+                readonly service: string;
+                readonly hostname: string;
+                readonly redirect_https?: boolean | undefined;
+                readonly www_redirect?: "none" | "apex" | "www" | undefined;
+                readonly aliases?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly services?: readonly {
+                readonly name: string;
+                readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+                readonly port?: number | undefined;
+                readonly env?: readonly string[] | undefined;
+                readonly replicas?: number | undefined;
+                readonly command?: string | undefined;
+                readonly internal_port?: number | undefined;
+                readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+                readonly cron_schedule?: string | undefined;
+                readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+                readonly scale_to_zero?: boolean | undefined;
+                readonly idle_timeout_seconds?: number | undefined;
+                readonly min_replicas?: number | undefined;
+                readonly resources?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+            readonly env?: {
+                readonly [x: string]: {
+                    readonly value: string;
+                } | {
+                    readonly from_secret: string;
+                } | {
+                    readonly from_resource: string;
+                    readonly attr: string;
+                };
+            } | undefined;
+            readonly build?: {
+                readonly dockerfile?: string | undefined;
+                readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+                readonly docker_context?: string | undefined;
+                readonly build_command?: string | undefined;
+                readonly ignore?: readonly string[] | undefined;
+                readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+                readonly reproducible?: boolean | undefined;
+            } | undefined;
+            readonly deploy?: {
+                readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+                readonly release_command?: string | undefined;
+                readonly health_check_path?: string | undefined;
+                readonly health_check_timeout?: number | undefined;
+                readonly graceful_shutdown?: number | undefined;
+            } | undefined;
+        };
+        readonly production?: {
+            readonly domains?: readonly {
+                readonly service: string;
+                readonly hostname: string;
+                readonly redirect_https?: boolean | undefined;
+                readonly www_redirect?: "none" | "apex" | "www" | undefined;
+                readonly aliases?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly services?: readonly {
+                readonly name: string;
+                readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+                readonly port?: number | undefined;
+                readonly env?: readonly string[] | undefined;
+                readonly replicas?: number | undefined;
+                readonly command?: string | undefined;
+                readonly internal_port?: number | undefined;
+                readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+                readonly cron_schedule?: string | undefined;
+                readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+                readonly scale_to_zero?: boolean | undefined;
+                readonly idle_timeout_seconds?: number | undefined;
+                readonly min_replicas?: number | undefined;
+                readonly resources?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+            readonly env?: {
+                readonly [x: string]: {
+                    readonly value: string;
+                } | {
+                    readonly from_secret: string;
+                } | {
+                    readonly from_resource: string;
+                    readonly attr: string;
+                };
+            } | undefined;
+            readonly build?: {
+                readonly dockerfile?: string | undefined;
+                readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+                readonly docker_context?: string | undefined;
+                readonly build_command?: string | undefined;
+                readonly ignore?: readonly string[] | undefined;
+                readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+                readonly reproducible?: boolean | undefined;
+            } | undefined;
+            readonly deploy?: {
+                readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+                readonly release_command?: string | undefined;
+                readonly health_check_path?: string | undefined;
+                readonly health_check_timeout?: number | undefined;
+                readonly graceful_shutdown?: number | undefined;
+            } | undefined;
+        };
+        readonly preview?: {
+            readonly domains?: readonly {
+                readonly service: string;
+                readonly hostname: string;
+                readonly redirect_https?: boolean | undefined;
+                readonly www_redirect?: "none" | "apex" | "www" | undefined;
+                readonly aliases?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly services?: readonly {
+                readonly name: string;
+                readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+                readonly port?: number | undefined;
+                readonly env?: readonly string[] | undefined;
+                readonly replicas?: number | undefined;
+                readonly command?: string | undefined;
+                readonly internal_port?: number | undefined;
+                readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+                readonly cron_schedule?: string | undefined;
+                readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+                readonly scale_to_zero?: boolean | undefined;
+                readonly idle_timeout_seconds?: number | undefined;
+                readonly min_replicas?: number | undefined;
+                readonly resources?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+            readonly env?: {
+                readonly [x: string]: {
+                    readonly value: string;
+                } | {
+                    readonly from_secret: string;
+                } | {
+                    readonly from_resource: string;
+                    readonly attr: string;
+                };
+            } | undefined;
+            readonly build?: {
+                readonly dockerfile?: string | undefined;
+                readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+                readonly docker_context?: string | undefined;
+                readonly build_command?: string | undefined;
+                readonly ignore?: readonly string[] | undefined;
+                readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+                readonly reproducible?: boolean | undefined;
+            } | undefined;
+            readonly deploy?: {
+                readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+                readonly release_command?: string | undefined;
+                readonly health_check_path?: string | undefined;
+                readonly health_check_timeout?: number | undefined;
+                readonly graceful_shutdown?: number | undefined;
+            } | undefined;
+        };
+    }, {
+        readonly development?: {
+            readonly domains?: readonly {
+                readonly service: string;
+                readonly hostname: string;
+                readonly redirect_https?: boolean | undefined;
+                readonly www_redirect?: "none" | "apex" | "www" | undefined;
+                readonly aliases?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly services?: readonly {
+                readonly name: string;
+                readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+                readonly port?: number | undefined;
+                readonly env?: readonly string[] | undefined;
+                readonly replicas?: number | undefined;
+                readonly command?: string | undefined;
+                readonly internal_port?: number | undefined;
+                readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+                readonly cron_schedule?: string | undefined;
+                readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+                readonly scale_to_zero?: boolean | undefined;
+                readonly idle_timeout_seconds?: number | undefined;
+                readonly min_replicas?: number | undefined;
+                readonly resources?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+            readonly env?: {
+                readonly [x: string]: {
+                    readonly value: string;
+                } | {
+                    readonly from_secret: string;
+                } | {
+                    readonly from_resource: string;
+                    readonly attr: string;
+                };
+            } | undefined;
+            readonly build?: {
+                readonly dockerfile?: string | undefined;
+                readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+                readonly docker_context?: string | undefined;
+                readonly build_command?: string | undefined;
+                readonly ignore?: readonly string[] | undefined;
+                readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+                readonly reproducible?: boolean | undefined;
+            } | undefined;
+            readonly deploy?: {
+                readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+                readonly release_command?: string | undefined;
+                readonly health_check_path?: string | undefined;
+                readonly health_check_timeout?: number | undefined;
+                readonly graceful_shutdown?: number | undefined;
+            } | undefined;
+        };
+        readonly staging?: {
+            readonly domains?: readonly {
+                readonly service: string;
+                readonly hostname: string;
+                readonly redirect_https?: boolean | undefined;
+                readonly www_redirect?: "none" | "apex" | "www" | undefined;
+                readonly aliases?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly services?: readonly {
+                readonly name: string;
+                readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+                readonly port?: number | undefined;
+                readonly env?: readonly string[] | undefined;
+                readonly replicas?: number | undefined;
+                readonly command?: string | undefined;
+                readonly internal_port?: number | undefined;
+                readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+                readonly cron_schedule?: string | undefined;
+                readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+                readonly scale_to_zero?: boolean | undefined;
+                readonly idle_timeout_seconds?: number | undefined;
+                readonly min_replicas?: number | undefined;
+                readonly resources?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+            readonly env?: {
+                readonly [x: string]: {
+                    readonly value: string;
+                } | {
+                    readonly from_secret: string;
+                } | {
+                    readonly from_resource: string;
+                    readonly attr: string;
+                };
+            } | undefined;
+            readonly build?: {
+                readonly dockerfile?: string | undefined;
+                readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+                readonly docker_context?: string | undefined;
+                readonly build_command?: string | undefined;
+                readonly ignore?: readonly string[] | undefined;
+                readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+                readonly reproducible?: boolean | undefined;
+            } | undefined;
+            readonly deploy?: {
+                readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+                readonly release_command?: string | undefined;
+                readonly health_check_path?: string | undefined;
+                readonly health_check_timeout?: number | undefined;
+                readonly graceful_shutdown?: number | undefined;
+            } | undefined;
+        };
+        readonly production?: {
+            readonly domains?: readonly {
+                readonly service: string;
+                readonly hostname: string;
+                readonly redirect_https?: boolean | undefined;
+                readonly www_redirect?: "none" | "apex" | "www" | undefined;
+                readonly aliases?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly services?: readonly {
+                readonly name: string;
+                readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+                readonly port?: number | undefined;
+                readonly env?: readonly string[] | undefined;
+                readonly replicas?: number | undefined;
+                readonly command?: string | undefined;
+                readonly internal_port?: number | undefined;
+                readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+                readonly cron_schedule?: string | undefined;
+                readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+                readonly scale_to_zero?: boolean | undefined;
+                readonly idle_timeout_seconds?: number | undefined;
+                readonly min_replicas?: number | undefined;
+                readonly resources?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+            readonly env?: {
+                readonly [x: string]: {
+                    readonly value: string;
+                } | {
+                    readonly from_secret: string;
+                } | {
+                    readonly from_resource: string;
+                    readonly attr: string;
+                };
+            } | undefined;
+            readonly build?: {
+                readonly dockerfile?: string | undefined;
+                readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+                readonly docker_context?: string | undefined;
+                readonly build_command?: string | undefined;
+                readonly ignore?: readonly string[] | undefined;
+                readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+                readonly reproducible?: boolean | undefined;
+            } | undefined;
+            readonly deploy?: {
+                readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+                readonly release_command?: string | undefined;
+                readonly health_check_path?: string | undefined;
+                readonly health_check_timeout?: number | undefined;
+                readonly graceful_shutdown?: number | undefined;
+            } | undefined;
+        };
+        readonly preview?: {
+            readonly domains?: readonly {
+                readonly service: string;
+                readonly hostname: string;
+                readonly redirect_https?: boolean | undefined;
+                readonly www_redirect?: "none" | "apex" | "www" | undefined;
+                readonly aliases?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly services?: readonly {
+                readonly name: string;
+                readonly type?: "function" | "web" | "cron" | "worker" | undefined;
+                readonly port?: number | undefined;
+                readonly env?: readonly string[] | undefined;
+                readonly replicas?: number | undefined;
+                readonly command?: string | undefined;
+                readonly internal_port?: number | undefined;
+                readonly instance_type?: "standard" | "large" | "xlarge" | "nano" | "micro" | "small" | undefined;
+                readonly cron_schedule?: string | undefined;
+                readonly regions?: readonly ("fsn1" | "nbg1" | "hel1" | "ash1" | "hil1")[] | undefined;
+                readonly scale_to_zero?: boolean | undefined;
+                readonly idle_timeout_seconds?: number | undefined;
+                readonly min_replicas?: number | undefined;
+                readonly resources?: readonly string[] | undefined;
+            }[] | undefined;
+            readonly region?: "fsn1" | "nbg1" | "hel1" | "ash1" | "hil1" | undefined;
+            readonly env?: {
+                readonly [x: string]: {
+                    readonly value: string;
+                } | {
+                    readonly from_secret: string;
+                } | {
+                    readonly from_resource: string;
+                    readonly attr: string;
+                };
+            } | undefined;
+            readonly build?: {
+                readonly dockerfile?: string | undefined;
+                readonly buildpack?: "auto" | "ruby" | "node" | "python" | "static" | "dockerfile" | undefined;
+                readonly docker_context?: string | undefined;
+                readonly build_command?: string | undefined;
+                readonly ignore?: readonly string[] | undefined;
+                readonly machine_type?: "standard" | "large" | "xlarge" | undefined;
+                readonly reproducible?: boolean | undefined;
+            } | undefined;
+            readonly deploy?: {
+                readonly strategy?: "immediate" | "rolling" | "blue-green" | undefined;
+                readonly release_command?: string | undefined;
+                readonly health_check_path?: string | undefined;
+                readonly health_check_timeout?: number | undefined;
+                readonly graceful_shutdown?: number | undefined;
+            } | undefined;
+        };
+    }, never>>;
+    resources: Schema.optional<Schema.Struct<{
+        postgres: Schema.optional<Schema.Struct<{
+            /** CNPG tier; IMMUTABLE after creation. */
+            tier: Schema.Literal<["nano", "micro", "standard", "large", "xl"]>;
+            storage_gb: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+            version: Schema.optional<Schema.Literal<["15", "16", "17"]>>;
+            /** Enable CNPG read-replica(s). */
+            replicas: Schema.optional<Schema.filter<Schema.filter<typeof Schema.Number>>>;
+            /** Branch-per-preview (P0 gap #4 sibling). */
+            branch_on_preview: Schema.optional<typeof Schema.Boolean>;
+        }>>;
+        redis: Schema.optional<Schema.Struct<{
+            tier: Schema.Literal<["micro", "standard", "large"]>;
+        }>>;
+        blob: Schema.optional<Schema.Struct<{
+            /** Ceph S3 bucket, auto-provisioned. `public` maps to presigned-URL-only. */
+            visibility: Schema.Literal<["private", "public"]>;
+        }>>;
+        volume: Schema.optional<Schema.Array$<Schema.Struct<{
+            name: Schema.filter<Schema.filter<Schema.filter<typeof Schema.String>>>;
+            /** GROW-ONLY — server rejects shrink with `409 immutable_volume_shrink`. */
+            size_gb: Schema.filter<Schema.filter<typeof Schema.Number>>;
+            /** ReadWriteOnce → rook-ceph-block; ReadWriteMany → rook-cephfs. */
+            access: Schema.Literal<["ReadWriteOnce", "ReadWriteMany"]>;
+            mount: typeof Schema.String;
+        }>>>;
+        search: Schema.optional<Schema.Struct<{
+            tier: Schema.Literal<["micro", "standard"]>;
+        }>>;
+    }>>;
+    ci: Schema.optional<Schema.Struct<{
+        on_push: Schema.optional<typeof Schema.Boolean>;
+        preview_deploys: Schema.optional<typeof Schema.Boolean>;
+        pr_comment: Schema.optional<typeof Schema.Boolean>;
+        /** Regex of branches that auto-deploy to production. */
+        production_branches: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        /** Which runner tier to request from the managed runner pool. */
+        runner: Schema.optional<Schema.Literal<["standard", "large", "xlarge"]>>;
+        /** Paths whose changes should not trigger a deploy. */
+        ignore_paths: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    }>>;
+}>;
+export type SylphxManifest = typeof SylphxManifest.Type;
+/**
+ * Canonical scale-to-zero snapshot, resolved from a manifest service entry
+ * or from the `project_services.scaling_config` JSONB column. Controller +
+ * CLI both call `resolveScaleToZeroDefaults()` (below) rather than
+ * hand-rolling `?? 300`/`?? 0` literals, so the defaults stay in sync with
+ * the schema above.
+ */
+export interface ResolvedScaleToZero {
+    /** Whether the service opts into KEDA-managed scale-to-zero. */
+    scaleToZero: boolean;
+    /** KEDA `cooldownPeriod` (seconds). Meaningful only when scaleToZero=true. */
+    idleTimeoutSeconds: number;
+    /** KEDA `minReplicaCount`. 0 iff `scaleToZero=true` and caller didn't pin a warm floor. */
+    minReplicas: number;
+    /** KEDA `maxReplicaCount`. Upper bound for horizontal scaling. */
+    maxReplicas: number;
+}
+/**
+ * Default values baked into `resolveScaleToZeroDefaults`. Kept here so both
+ * the API validation layer and the controller import the same constants —
+ * the defaults table in docs/design/scale-to-zero.md §3.4 lives here.
+ */
+export declare const SCALE_TO_ZERO_DEFAULTS: {
+    /** Idle timeout in seconds when caller didn't provide one. */
+    readonly idleTimeoutSeconds: 300;
+    /** Min replicas when the service opted into scale-to-zero. */
+    readonly minReplicasScaleToZero: 0;
+    /** Min replicas when the service did NOT opt in (pinned warm). */
+    readonly minReplicasWarm: 1;
+    /** Max replicas fallback when neither manifest nor compute profile specify. */
+    readonly maxReplicasDefault: 10;
+};
+/**
+ * Apply `SCALE_TO_ZERO_DEFAULTS` to a partial config. Pure function — both
+ * the controller (`keda-scaled-object.ts`) and the CLI (`programs/scale.ts`)
+ * call it so defaults stay in sync.
+ *
+ * @param input - Partial config from the manifest / DB / CLI flag.
+ *                Pass `null`/`undefined` for "no scale-to-zero".
+ * @param explicitMax - Optional per-tier ceiling (e.g. resolved from
+ *                      compute profile). Takes precedence over the static
+ *                      10-replica fallback but not over an input.maxReplicas.
+ */
+export declare function resolveScaleToZeroDefaults(input: {
+    scaleToZero?: boolean;
+    idleTimeoutSeconds?: number;
+    minReplicas?: number;
+    maxReplicas?: number;
+} | null | undefined, explicitMax?: number): ResolvedScaleToZero;
+//# sourceMappingURL=project-manifest.d.ts.map