@treeseed/sdk 0.13.0-rc.3 → 0.13.0-rc.30

package/dist/deployment/schemas.d.ts

@@ -0,0 +1,4674 @@
+import { z } from 'zod';
+export declare const deploymentTrackSchema: z.ZodEnum<["stable", "development"]>;
+export declare const hostRoleSchema: z.ZodUnion<[z.ZodEnum<["integrated", "capacity-provider", "control-plane", "knowledge", "ai-gpu", "edge"]>, z.ZodString]>;
+export declare const hostConnectionBindingSchema: z.ZodEffects<z.ZodUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"local">;
+    componentId: z.ZodString;
+    serviceId: z.ZodString;
+    endpointId: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    kind: "local";
+    componentId: string;
+    serviceId: string;
+    endpointId: string;
+}, {
+    kind: "local";
+    componentId: string;
+    serviceId: string;
+    endpointId: string;
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"remote">;
+    url: z.ZodEffects<z.ZodString, string, string>;
+    audience: z.ZodString;
+    tls: z.ZodEffects<z.ZodObject<{
+        trust: z.ZodEnum<["system", "secret", "spki"]>;
+        serverName: z.ZodOptional<z.ZodString>;
+        caSecretRef: z.ZodOptional<z.ZodString>;
+        spkiSha256: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        trust: "system" | "secret" | "spki";
+        serverName?: string | undefined;
+        caSecretRef?: string | undefined;
+        spkiSha256?: string | undefined;
+    }, {
+        trust: "system" | "secret" | "spki";
+        serverName?: string | undefined;
+        caSecretRef?: string | undefined;
+        spkiSha256?: string | undefined;
+    }>, {
+        trust: "system" | "secret" | "spki";
+        serverName?: string | undefined;
+        caSecretRef?: string | undefined;
+        spkiSha256?: string | undefined;
+    }, {
+        trust: "system" | "secret" | "spki";
+        serverName?: string | undefined;
+        caSecretRef?: string | undefined;
+        spkiSha256?: string | undefined;
+    }>;
+    authentication: z.ZodObject<{
+        mode: z.ZodEnum<["none", "application", "bearer", "mtls"]>;
+        secretRef: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        mode: "none" | "application" | "bearer" | "mtls";
+        secretRef?: string | undefined;
+    }, {
+        mode: "none" | "application" | "bearer" | "mtls";
+        secretRef?: string | undefined;
+    }>;
+    healthGate: z.ZodObject<{
+        protocol: z.ZodEnum<["http", "https", "tcp"]>;
+        path: z.ZodOptional<z.ZodString>;
+        timeoutSeconds: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    }, {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    kind: "remote";
+    url: string;
+    audience: string;
+    tls: {
+        trust: "system" | "secret" | "spki";
+        serverName?: string | undefined;
+        caSecretRef?: string | undefined;
+        spkiSha256?: string | undefined;
+    };
+    authentication: {
+        mode: "none" | "application" | "bearer" | "mtls";
+        secretRef?: string | undefined;
+    };
+    healthGate: {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    };
+}, {
+    kind: "remote";
+    url: string;
+    audience: string;
+    tls: {
+        trust: "system" | "secret" | "spki";
+        serverName?: string | undefined;
+        caSecretRef?: string | undefined;
+        spkiSha256?: string | undefined;
+    };
+    authentication: {
+        mode: "none" | "application" | "bearer" | "mtls";
+        secretRef?: string | undefined;
+    };
+    healthGate: {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    };
+}>]>, {
+    kind: "local";
+    componentId: string;
+    serviceId: string;
+    endpointId: string;
+} | {
+    kind: "remote";
+    url: string;
+    audience: string;
+    tls: {
+        trust: "system" | "secret" | "spki";
+        serverName?: string | undefined;
+        caSecretRef?: string | undefined;
+        spkiSha256?: string | undefined;
+    };
+    authentication: {
+        mode: "none" | "application" | "bearer" | "mtls";
+        secretRef?: string | undefined;
+    };
+    healthGate: {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    };
+}, {
+    kind: "local";
+    componentId: string;
+    serviceId: string;
+    endpointId: string;
+} | {
+    kind: "remote";
+    url: string;
+    audience: string;
+    tls: {
+        trust: "system" | "secret" | "spki";
+        serverName?: string | undefined;
+        caSecretRef?: string | undefined;
+        spkiSha256?: string | undefined;
+    };
+    authentication: {
+        mode: "none" | "application" | "bearer" | "mtls";
+        secretRef?: string | undefined;
+    };
+    healthGate: {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    };
+}>;
+export declare const hostComponentSchema: z.ZodObject<{
+    enabled: z.ZodBoolean;
+    track: z.ZodEnum<["stable", "development"]>;
+    profile: z.ZodOptional<z.ZodString>;
+    aliases: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    configuration: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    resources: z.ZodDefault<z.ZodObject<{
+        cpuCores: z.ZodOptional<z.ZodNumber>;
+        memoryBytes: z.ZodOptional<z.ZodNumber>;
+        storageBytes: z.ZodOptional<z.ZodNumber>;
+        gpuDevices: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        gpuDevices: string[];
+        cpuCores?: number | undefined;
+        memoryBytes?: number | undefined;
+        storageBytes?: number | undefined;
+    }, {
+        cpuCores?: number | undefined;
+        memoryBytes?: number | undefined;
+        storageBytes?: number | undefined;
+        gpuDevices?: string[] | undefined;
+    }>>;
+    connections: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"local">;
+        componentId: z.ZodString;
+        serviceId: z.ZodString;
+        endpointId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        kind: "local";
+        componentId: string;
+        serviceId: string;
+        endpointId: string;
+    }, {
+        kind: "local";
+        componentId: string;
+        serviceId: string;
+        endpointId: string;
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"remote">;
+        url: z.ZodEffects<z.ZodString, string, string>;
+        audience: z.ZodString;
+        tls: z.ZodEffects<z.ZodObject<{
+            trust: z.ZodEnum<["system", "secret", "spki"]>;
+            serverName: z.ZodOptional<z.ZodString>;
+            caSecretRef: z.ZodOptional<z.ZodString>;
+            spkiSha256: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        }, {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        }>, {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        }, {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        }>;
+        authentication: z.ZodObject<{
+            mode: z.ZodEnum<["none", "application", "bearer", "mtls"]>;
+            secretRef: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            mode: "none" | "application" | "bearer" | "mtls";
+            secretRef?: string | undefined;
+        }, {
+            mode: "none" | "application" | "bearer" | "mtls";
+            secretRef?: string | undefined;
+        }>;
+        healthGate: z.ZodObject<{
+            protocol: z.ZodEnum<["http", "https", "tcp"]>;
+            path: z.ZodOptional<z.ZodString>;
+            timeoutSeconds: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            protocol: "http" | "https" | "tcp";
+            timeoutSeconds: number;
+            path?: string | undefined;
+        }, {
+            protocol: "http" | "https" | "tcp";
+            timeoutSeconds: number;
+            path?: string | undefined;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "remote";
+        url: string;
+        audience: string;
+        tls: {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        };
+        authentication: {
+            mode: "none" | "application" | "bearer" | "mtls";
+            secretRef?: string | undefined;
+        };
+        healthGate: {
+            protocol: "http" | "https" | "tcp";
+            timeoutSeconds: number;
+            path?: string | undefined;
+        };
+    }, {
+        kind: "remote";
+        url: string;
+        audience: string;
+        tls: {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        };
+        authentication: {
+            mode: "none" | "application" | "bearer" | "mtls";
+            secretRef?: string | undefined;
+        };
+        healthGate: {
+            protocol: "http" | "https" | "tcp";
+            timeoutSeconds: number;
+            path?: string | undefined;
+        };
+    }>]>, {
+        kind: "local";
+        componentId: string;
+        serviceId: string;
+        endpointId: string;
+    } | {
+        kind: "remote";
+        url: string;
+        audience: string;
+        tls: {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        };
+        authentication: {
+            mode: "none" | "application" | "bearer" | "mtls";
+            secretRef?: string | undefined;
+        };
+        healthGate: {
+            protocol: "http" | "https" | "tcp";
+            timeoutSeconds: number;
+            path?: string | undefined;
+        };
+    }, {
+        kind: "local";
+        componentId: string;
+        serviceId: string;
+        endpointId: string;
+    } | {
+        kind: "remote";
+        url: string;
+        audience: string;
+        tls: {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        };
+        authentication: {
+            mode: "none" | "application" | "bearer" | "mtls";
+            secretRef?: string | undefined;
+        };
+        healthGate: {
+            protocol: "http" | "https" | "tcp";
+            timeoutSeconds: number;
+            path?: string | undefined;
+        };
+    }>>>;
+}, "strict", z.ZodTypeAny, {
+    enabled: boolean;
+    track: "stable" | "development";
+    aliases: Record<string, string>;
+    configuration: Record<string, unknown>;
+    resources: {
+        gpuDevices: string[];
+        cpuCores?: number | undefined;
+        memoryBytes?: number | undefined;
+        storageBytes?: number | undefined;
+    };
+    connections: Record<string, {
+        kind: "local";
+        componentId: string;
+        serviceId: string;
+        endpointId: string;
+    } | {
+        kind: "remote";
+        url: string;
+        audience: string;
+        tls: {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        };
+        authentication: {
+            mode: "none" | "application" | "bearer" | "mtls";
+            secretRef?: string | undefined;
+        };
+        healthGate: {
+            protocol: "http" | "https" | "tcp";
+            timeoutSeconds: number;
+            path?: string | undefined;
+        };
+    }>;
+    profile?: string | undefined;
+}, {
+    enabled: boolean;
+    track: "stable" | "development";
+    profile?: string | undefined;
+    aliases?: Record<string, string> | undefined;
+    configuration?: Record<string, unknown> | undefined;
+    resources?: {
+        cpuCores?: number | undefined;
+        memoryBytes?: number | undefined;
+        storageBytes?: number | undefined;
+        gpuDevices?: string[] | undefined;
+    } | undefined;
+    connections?: Record<string, {
+        kind: "local";
+        componentId: string;
+        serviceId: string;
+        endpointId: string;
+    } | {
+        kind: "remote";
+        url: string;
+        audience: string;
+        tls: {
+            trust: "system" | "secret" | "spki";
+            serverName?: string | undefined;
+            caSecretRef?: string | undefined;
+            spkiSha256?: string | undefined;
+        };
+        authentication: {
+            mode: "none" | "application" | "bearer" | "mtls";
+            secretRef?: string | undefined;
+        };
+        healthGate: {
+            protocol: "http" | "https" | "tcp";
+            timeoutSeconds: number;
+            path?: string | undefined;
+        };
+    }> | undefined;
+}>;
+export declare const hostConfigurationSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.host/v1">;
+    configurationId: z.ZodString;
+    generation: z.ZodNumber;
+    host: z.ZodObject<{
+        id: z.ZodString;
+        role: z.ZodUnion<[z.ZodEnum<["integrated", "capacity-provider", "control-plane", "knowledge", "ai-gpu", "edge"]>, z.ZodString]>;
+        architecture: z.ZodLiteral<"amd64">;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        role: string;
+        architecture: "amd64";
+    }, {
+        id: string;
+        role: string;
+        architecture: "amd64";
+    }>;
+    runtime: z.ZodObject<{
+        management: z.ZodEnum<["managed", "external"]>;
+    }, "strict", z.ZodTypeAny, {
+        management: "managed" | "external";
+    }, {
+        management: "managed" | "external";
+    }>;
+    updates: z.ZodObject<{
+        defaultTrack: z.ZodEnum<["stable", "development"]>;
+        stable: z.ZodObject<{
+            metadataPollSeconds: z.ZodNumber;
+            maintenanceWindow: z.ZodObject<{
+                weekday: z.ZodEnum<["monday", "tuesday", "wednesday", "thursday", "friday", "saturday", "sunday"]>;
+                localTime: z.ZodString;
+                jitterMinutes: z.ZodNumber;
+            }, "strict", z.ZodTypeAny, {
+                weekday: "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday" | "sunday";
+                localTime: string;
+                jitterMinutes: number;
+            }, {
+                weekday: "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday" | "sunday";
+                localTime: string;
+                jitterMinutes: number;
+            }>;
+        }, "strict", z.ZodTypeAny, {
+            metadataPollSeconds: number;
+            maintenanceWindow: {
+                weekday: "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday" | "sunday";
+                localTime: string;
+                jitterMinutes: number;
+            };
+        }, {
+            metadataPollSeconds: number;
+            maintenanceWindow: {
+                weekday: "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday" | "sunday";
+                localTime: string;
+                jitterMinutes: number;
+            };
+        }>;
+        development: z.ZodObject<{
+            pollSeconds: z.ZodLiteral<60>;
+        }, "strict", z.ZodTypeAny, {
+            pollSeconds: 60;
+        }, {
+            pollSeconds: 60;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        stable: {
+            metadataPollSeconds: number;
+            maintenanceWindow: {
+                weekday: "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday" | "sunday";
+                localTime: string;
+                jitterMinutes: number;
+            };
+        };
+        development: {
+            pollSeconds: 60;
+        };
+        defaultTrack: "stable" | "development";
+    }, {
+        stable: {
+            metadataPollSeconds: number;
+            maintenanceWindow: {
+                weekday: "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday" | "sunday";
+                localTime: string;
+                jitterMinutes: number;
+            };
+        };
+        development: {
+            pollSeconds: 60;
+        };
+        defaultTrack: "stable" | "development";
+    }>;
+    components: z.ZodRecord<z.ZodString, z.ZodObject<{
+        enabled: z.ZodBoolean;
+        track: z.ZodEnum<["stable", "development"]>;
+        profile: z.ZodOptional<z.ZodString>;
+        aliases: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+        configuration: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        resources: z.ZodDefault<z.ZodObject<{
+            cpuCores: z.ZodOptional<z.ZodNumber>;
+            memoryBytes: z.ZodOptional<z.ZodNumber>;
+            storageBytes: z.ZodOptional<z.ZodNumber>;
+            gpuDevices: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            gpuDevices: string[];
+            cpuCores?: number | undefined;
+            memoryBytes?: number | undefined;
+            storageBytes?: number | undefined;
+        }, {
+            cpuCores?: number | undefined;
+            memoryBytes?: number | undefined;
+            storageBytes?: number | undefined;
+            gpuDevices?: string[] | undefined;
+        }>>;
+        connections: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEffects<z.ZodUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"local">;
+            componentId: z.ZodString;
+            serviceId: z.ZodString;
+            endpointId: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            kind: "local";
+            componentId: string;
+            serviceId: string;
+            endpointId: string;
+        }, {
+            kind: "local";
+            componentId: string;
+            serviceId: string;
+            endpointId: string;
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"remote">;
+            url: z.ZodEffects<z.ZodString, string, string>;
+            audience: z.ZodString;
+            tls: z.ZodEffects<z.ZodObject<{
+                trust: z.ZodEnum<["system", "secret", "spki"]>;
+                serverName: z.ZodOptional<z.ZodString>;
+                caSecretRef: z.ZodOptional<z.ZodString>;
+                spkiSha256: z.ZodOptional<z.ZodString>;
+            }, "strict", z.ZodTypeAny, {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            }, {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            }>, {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            }, {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            }>;
+            authentication: z.ZodObject<{
+                mode: z.ZodEnum<["none", "application", "bearer", "mtls"]>;
+                secretRef: z.ZodOptional<z.ZodString>;
+            }, "strict", z.ZodTypeAny, {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            }, {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            }>;
+            healthGate: z.ZodObject<{
+                protocol: z.ZodEnum<["http", "https", "tcp"]>;
+                path: z.ZodOptional<z.ZodString>;
+                timeoutSeconds: z.ZodNumber;
+            }, "strict", z.ZodTypeAny, {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            }, {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            }>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "remote";
+            url: string;
+            audience: string;
+            tls: {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            };
+            authentication: {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            };
+            healthGate: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            };
+        }, {
+            kind: "remote";
+            url: string;
+            audience: string;
+            tls: {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            };
+            authentication: {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            };
+            healthGate: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            };
+        }>]>, {
+            kind: "local";
+            componentId: string;
+            serviceId: string;
+            endpointId: string;
+        } | {
+            kind: "remote";
+            url: string;
+            audience: string;
+            tls: {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            };
+            authentication: {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            };
+            healthGate: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            };
+        }, {
+            kind: "local";
+            componentId: string;
+            serviceId: string;
+            endpointId: string;
+        } | {
+            kind: "remote";
+            url: string;
+            audience: string;
+            tls: {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            };
+            authentication: {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            };
+            healthGate: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            };
+        }>>>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        track: "stable" | "development";
+        aliases: Record<string, string>;
+        configuration: Record<string, unknown>;
+        resources: {
+            gpuDevices: string[];
+            cpuCores?: number | undefined;
+            memoryBytes?: number | undefined;
+            storageBytes?: number | undefined;
+        };
+        connections: Record<string, {
+            kind: "local";
+            componentId: string;
+            serviceId: string;
+            endpointId: string;
+        } | {
+            kind: "remote";
+            url: string;
+            audience: string;
+            tls: {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            };
+            authentication: {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            };
+            healthGate: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            };
+        }>;
+        profile?: string | undefined;
+    }, {
+        enabled: boolean;
+        track: "stable" | "development";
+        profile?: string | undefined;
+        aliases?: Record<string, string> | undefined;
+        configuration?: Record<string, unknown> | undefined;
+        resources?: {
+            cpuCores?: number | undefined;
+            memoryBytes?: number | undefined;
+            storageBytes?: number | undefined;
+            gpuDevices?: string[] | undefined;
+        } | undefined;
+        connections?: Record<string, {
+            kind: "local";
+            componentId: string;
+            serviceId: string;
+            endpointId: string;
+        } | {
+            kind: "remote";
+            url: string;
+            audience: string;
+            tls: {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            };
+            authentication: {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            };
+            healthGate: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            };
+        }> | undefined;
+    }>>;
+    network: z.ZodObject<{
+        manager: z.ZodObject<{
+            binding: z.ZodString;
+            aliases: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            sans: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            trustedLanCidrs: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            aliases: string[];
+            binding: string;
+            sans: string[];
+            trustedLanCidrs: string[];
+        }, {
+            binding: string;
+            aliases?: string[] | undefined;
+            sans?: string[] | undefined;
+            trustedLanCidrs?: string[] | undefined;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        manager: {
+            aliases: string[];
+            binding: string;
+            sans: string[];
+            trustedLanCidrs: string[];
+        };
+    }, {
+        manager: {
+            binding: string;
+            aliases?: string[] | undefined;
+            sans?: string[] | undefined;
+            trustedLanCidrs?: string[] | undefined;
+        };
+    }>;
+    fleet: z.ZodEffects<z.ZodObject<{
+        rolloutGroup: z.ZodString;
+        receiptReporting: z.ZodObject<{
+            enabled: z.ZodBoolean;
+            connection: z.ZodOptional<z.ZodEffects<z.ZodUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"local">;
+                componentId: z.ZodString;
+                serviceId: z.ZodString;
+                endpointId: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            }, {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            }>, z.ZodObject<{
+                kind: z.ZodLiteral<"remote">;
+                url: z.ZodEffects<z.ZodString, string, string>;
+                audience: z.ZodString;
+                tls: z.ZodEffects<z.ZodObject<{
+                    trust: z.ZodEnum<["system", "secret", "spki"]>;
+                    serverName: z.ZodOptional<z.ZodString>;
+                    caSecretRef: z.ZodOptional<z.ZodString>;
+                    spkiSha256: z.ZodOptional<z.ZodString>;
+                }, "strict", z.ZodTypeAny, {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                }, {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                }>, {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                }, {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                }>;
+                authentication: z.ZodObject<{
+                    mode: z.ZodEnum<["none", "application", "bearer", "mtls"]>;
+                    secretRef: z.ZodOptional<z.ZodString>;
+                }, "strict", z.ZodTypeAny, {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                }, {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                }>;
+                healthGate: z.ZodObject<{
+                    protocol: z.ZodEnum<["http", "https", "tcp"]>;
+                    path: z.ZodOptional<z.ZodString>;
+                    timeoutSeconds: z.ZodNumber;
+                }, "strict", z.ZodTypeAny, {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                }, {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                }>;
+            }, "strict", z.ZodTypeAny, {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            }, {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            }>]>, {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            }, {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            }>>;
+            intervalSeconds: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            enabled: boolean;
+            intervalSeconds: number;
+            connection?: {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            } | undefined;
+        }, {
+            enabled: boolean;
+            intervalSeconds: number;
+            connection?: {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            } | undefined;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        rolloutGroup: string;
+        receiptReporting: {
+            enabled: boolean;
+            intervalSeconds: number;
+            connection?: {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            } | undefined;
+        };
+    }, {
+        rolloutGroup: string;
+        receiptReporting: {
+            enabled: boolean;
+            intervalSeconds: number;
+            connection?: {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            } | undefined;
+        };
+    }>, {
+        rolloutGroup: string;
+        receiptReporting: {
+            enabled: boolean;
+            intervalSeconds: number;
+            connection?: {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            } | undefined;
+        };
+    }, {
+        rolloutGroup: string;
+        receiptReporting: {
+            enabled: boolean;
+            intervalSeconds: number;
+            connection?: {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            } | undefined;
+        };
+    }>;
+    secrets: z.ZodRecord<z.ZodString, z.ZodObject<{
+        provider: z.ZodEnum<["file", "systemd-credential", "vault", "aws-secrets-manager"]>;
+        reference: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        provider: "file" | "systemd-credential" | "vault" | "aws-secrets-manager";
+        reference: string;
+    }, {
+        provider: "file" | "systemd-credential" | "vault" | "aws-secrets-manager";
+        reference: string;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: "treeseed.host/v1";
+    configurationId: string;
+    generation: number;
+    host: {
+        id: string;
+        role: string;
+        architecture: "amd64";
+    };
+    runtime: {
+        management: "managed" | "external";
+    };
+    updates: {
+        stable: {
+            metadataPollSeconds: number;
+            maintenanceWindow: {
+                weekday: "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday" | "sunday";
+                localTime: string;
+                jitterMinutes: number;
+            };
+        };
+        development: {
+            pollSeconds: 60;
+        };
+        defaultTrack: "stable" | "development";
+    };
+    components: Record<string, {
+        enabled: boolean;
+        track: "stable" | "development";
+        aliases: Record<string, string>;
+        configuration: Record<string, unknown>;
+        resources: {
+            gpuDevices: string[];
+            cpuCores?: number | undefined;
+            memoryBytes?: number | undefined;
+            storageBytes?: number | undefined;
+        };
+        connections: Record<string, {
+            kind: "local";
+            componentId: string;
+            serviceId: string;
+            endpointId: string;
+        } | {
+            kind: "remote";
+            url: string;
+            audience: string;
+            tls: {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            };
+            authentication: {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            };
+            healthGate: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            };
+        }>;
+        profile?: string | undefined;
+    }>;
+    network: {
+        manager: {
+            aliases: string[];
+            binding: string;
+            sans: string[];
+            trustedLanCidrs: string[];
+        };
+    };
+    fleet: {
+        rolloutGroup: string;
+        receiptReporting: {
+            enabled: boolean;
+            intervalSeconds: number;
+            connection?: {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            } | undefined;
+        };
+    };
+    secrets: Record<string, {
+        provider: "file" | "systemd-credential" | "vault" | "aws-secrets-manager";
+        reference: string;
+    }>;
+}, {
+    schemaVersion: "treeseed.host/v1";
+    configurationId: string;
+    generation: number;
+    host: {
+        id: string;
+        role: string;
+        architecture: "amd64";
+    };
+    runtime: {
+        management: "managed" | "external";
+    };
+    updates: {
+        stable: {
+            metadataPollSeconds: number;
+            maintenanceWindow: {
+                weekday: "monday" | "tuesday" | "wednesday" | "thursday" | "friday" | "saturday" | "sunday";
+                localTime: string;
+                jitterMinutes: number;
+            };
+        };
+        development: {
+            pollSeconds: 60;
+        };
+        defaultTrack: "stable" | "development";
+    };
+    components: Record<string, {
+        enabled: boolean;
+        track: "stable" | "development";
+        profile?: string | undefined;
+        aliases?: Record<string, string> | undefined;
+        configuration?: Record<string, unknown> | undefined;
+        resources?: {
+            cpuCores?: number | undefined;
+            memoryBytes?: number | undefined;
+            storageBytes?: number | undefined;
+            gpuDevices?: string[] | undefined;
+        } | undefined;
+        connections?: Record<string, {
+            kind: "local";
+            componentId: string;
+            serviceId: string;
+            endpointId: string;
+        } | {
+            kind: "remote";
+            url: string;
+            audience: string;
+            tls: {
+                trust: "system" | "secret" | "spki";
+                serverName?: string | undefined;
+                caSecretRef?: string | undefined;
+                spkiSha256?: string | undefined;
+            };
+            authentication: {
+                mode: "none" | "application" | "bearer" | "mtls";
+                secretRef?: string | undefined;
+            };
+            healthGate: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            };
+        }> | undefined;
+    }>;
+    network: {
+        manager: {
+            binding: string;
+            aliases?: string[] | undefined;
+            sans?: string[] | undefined;
+            trustedLanCidrs?: string[] | undefined;
+        };
+    };
+    fleet: {
+        rolloutGroup: string;
+        receiptReporting: {
+            enabled: boolean;
+            intervalSeconds: number;
+            connection?: {
+                kind: "local";
+                componentId: string;
+                serviceId: string;
+                endpointId: string;
+            } | {
+                kind: "remote";
+                url: string;
+                audience: string;
+                tls: {
+                    trust: "system" | "secret" | "spki";
+                    serverName?: string | undefined;
+                    caSecretRef?: string | undefined;
+                    spkiSha256?: string | undefined;
+                };
+                authentication: {
+                    mode: "none" | "application" | "bearer" | "mtls";
+                    secretRef?: string | undefined;
+                };
+                healthGate: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                };
+            } | undefined;
+        };
+    };
+    secrets: Record<string, {
+        provider: "file" | "systemd-credential" | "vault" | "aws-secrets-manager";
+        reference: string;
+    }>;
+}>;
+export declare const packageEndpointSchema: z.ZodEffects<z.ZodObject<{
+    id: z.ZodString;
+    protocol: z.ZodEnum<["http", "https", "tcp"]>;
+    port: z.ZodNumber;
+    visibility: z.ZodEnum<["private", "host"]>;
+    defaultAlias: z.ZodOptional<z.ZodString>;
+    aliasOverride: z.ZodDefault<z.ZodBoolean>;
+    tls: z.ZodEnum<["edge", "passthrough", "none"]>;
+    authentication: z.ZodEnum<["none", "application", "mtls"]>;
+    healthGate: z.ZodOptional<z.ZodObject<{
+        protocol: z.ZodEnum<["http", "https", "tcp"]>;
+        path: z.ZodOptional<z.ZodString>;
+        timeoutSeconds: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    }, {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    protocol: "http" | "https" | "tcp";
+    tls: "edge" | "passthrough" | "none";
+    authentication: "none" | "application" | "mtls";
+    id: string;
+    port: number;
+    visibility: "host" | "private";
+    aliasOverride: boolean;
+    healthGate?: {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    } | undefined;
+    defaultAlias?: string | undefined;
+}, {
+    protocol: "http" | "https" | "tcp";
+    tls: "edge" | "passthrough" | "none";
+    authentication: "none" | "application" | "mtls";
+    id: string;
+    port: number;
+    visibility: "host" | "private";
+    healthGate?: {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    } | undefined;
+    defaultAlias?: string | undefined;
+    aliasOverride?: boolean | undefined;
+}>, {
+    protocol: "http" | "https" | "tcp";
+    tls: "edge" | "passthrough" | "none";
+    authentication: "none" | "application" | "mtls";
+    id: string;
+    port: number;
+    visibility: "host" | "private";
+    aliasOverride: boolean;
+    healthGate?: {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    } | undefined;
+    defaultAlias?: string | undefined;
+}, {
+    protocol: "http" | "https" | "tcp";
+    tls: "edge" | "passthrough" | "none";
+    authentication: "none" | "application" | "mtls";
+    id: string;
+    port: number;
+    visibility: "host" | "private";
+    healthGate?: {
+        protocol: "http" | "https" | "tcp";
+        timeoutSeconds: number;
+        path?: string | undefined;
+    } | undefined;
+    defaultAlias?: string | undefined;
+    aliasOverride?: boolean | undefined;
+}>;
+export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.package-runtime/v1">;
+    componentId: z.ZodString;
+    version: z.ZodString;
+    compose: z.ZodObject<{
+        projectName: z.ZodString;
+        files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            digest: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            path: string;
+            digest: string;
+        }, {
+            path: string;
+            digest: string;
+        }>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        projectName: string;
+        files: {
+            path: string;
+            digest: string;
+        }[];
+    }, {
+        projectName: string;
+        files: {
+            path: string;
+            digest: string;
+        }[];
+    }>;
+    services: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        composeService: z.ZodString;
+        endpoints: z.ZodArray<z.ZodEffects<z.ZodObject<{
+            id: z.ZodString;
+            protocol: z.ZodEnum<["http", "https", "tcp"]>;
+            port: z.ZodNumber;
+            visibility: z.ZodEnum<["private", "host"]>;
+            defaultAlias: z.ZodOptional<z.ZodString>;
+            aliasOverride: z.ZodDefault<z.ZodBoolean>;
+            tls: z.ZodEnum<["edge", "passthrough", "none"]>;
+            authentication: z.ZodEnum<["none", "application", "mtls"]>;
+            healthGate: z.ZodOptional<z.ZodObject<{
+                protocol: z.ZodEnum<["http", "https", "tcp"]>;
+                path: z.ZodOptional<z.ZodString>;
+                timeoutSeconds: z.ZodNumber;
+            }, "strict", z.ZodTypeAny, {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            }, {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            }>>;
+        }, "strict", z.ZodTypeAny, {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            aliasOverride: boolean;
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+        }, {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+            aliasOverride?: boolean | undefined;
+        }>, {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            aliasOverride: boolean;
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+        }, {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+            aliasOverride?: boolean | undefined;
+        }>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        composeService: string;
+        endpoints: {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            aliasOverride: boolean;
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+        }[];
+    }, {
+        id: string;
+        composeService: string;
+        endpoints: {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+            aliasOverride?: boolean | undefined;
+        }[];
+    }>, "many">;
+    stateVolumes: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        volume: z.ZodString;
+        backup: z.ZodEnum<["required", "optional", "none"]>;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        volume: string;
+        backup: "none" | "required" | "optional";
+    }, {
+        id: string;
+        volume: string;
+        backup: "none" | "required" | "optional";
+    }>, "many">;
+    migrations: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        order: z.ZodNumber;
+        backupRequired: z.ZodBoolean;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        order: number;
+        backupRequired: boolean;
+    }, {
+        id: string;
+        order: number;
+        backupRequired: boolean;
+    }>, "many">;
+    requiredCapabilities: z.ZodArray<z.ZodString, "many">;
+    dependencies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        capability: z.ZodString;
+        locality: z.ZodEnum<["local", "remote", "either"]>;
+        optional: z.ZodDefault<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        optional: boolean;
+        capability: string;
+        locality: "local" | "remote" | "either";
+    }, {
+        id: string;
+        capability: string;
+        locality: "local" | "remote" | "either";
+        optional?: boolean | undefined;
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    componentId: string;
+    schemaVersion: "treeseed.package-runtime/v1";
+    version: string;
+    compose: {
+        projectName: string;
+        files: {
+            path: string;
+            digest: string;
+        }[];
+    };
+    services: {
+        id: string;
+        composeService: string;
+        endpoints: {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            aliasOverride: boolean;
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+        }[];
+    }[];
+    stateVolumes: {
+        id: string;
+        volume: string;
+        backup: "none" | "required" | "optional";
+    }[];
+    migrations: {
+        id: string;
+        order: number;
+        backupRequired: boolean;
+    }[];
+    requiredCapabilities: string[];
+    dependencies: {
+        id: string;
+        optional: boolean;
+        capability: string;
+        locality: "local" | "remote" | "either";
+    }[];
+}, {
+    componentId: string;
+    schemaVersion: "treeseed.package-runtime/v1";
+    version: string;
+    compose: {
+        projectName: string;
+        files: {
+            path: string;
+            digest: string;
+        }[];
+    };
+    services: {
+        id: string;
+        composeService: string;
+        endpoints: {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+            aliasOverride?: boolean | undefined;
+        }[];
+    }[];
+    stateVolumes: {
+        id: string;
+        volume: string;
+        backup: "none" | "required" | "optional";
+    }[];
+    migrations: {
+        id: string;
+        order: number;
+        backupRequired: boolean;
+    }[];
+    requiredCapabilities: string[];
+    dependencies?: {
+        id: string;
+        capability: string;
+        locality: "local" | "remote" | "either";
+        optional?: boolean | undefined;
+    }[] | undefined;
+}>, {
+    componentId: string;
+    schemaVersion: "treeseed.package-runtime/v1";
+    version: string;
+    compose: {
+        projectName: string;
+        files: {
+            path: string;
+            digest: string;
+        }[];
+    };
+    services: {
+        id: string;
+        composeService: string;
+        endpoints: {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            aliasOverride: boolean;
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+        }[];
+    }[];
+    stateVolumes: {
+        id: string;
+        volume: string;
+        backup: "none" | "required" | "optional";
+    }[];
+    migrations: {
+        id: string;
+        order: number;
+        backupRequired: boolean;
+    }[];
+    requiredCapabilities: string[];
+    dependencies: {
+        id: string;
+        optional: boolean;
+        capability: string;
+        locality: "local" | "remote" | "either";
+    }[];
+}, {
+    componentId: string;
+    schemaVersion: "treeseed.package-runtime/v1";
+    version: string;
+    compose: {
+        projectName: string;
+        files: {
+            path: string;
+            digest: string;
+        }[];
+    };
+    services: {
+        id: string;
+        composeService: string;
+        endpoints: {
+            protocol: "http" | "https" | "tcp";
+            tls: "edge" | "passthrough" | "none";
+            authentication: "none" | "application" | "mtls";
+            id: string;
+            port: number;
+            visibility: "host" | "private";
+            healthGate?: {
+                protocol: "http" | "https" | "tcp";
+                timeoutSeconds: number;
+                path?: string | undefined;
+            } | undefined;
+            defaultAlias?: string | undefined;
+            aliasOverride?: boolean | undefined;
+        }[];
+    }[];
+    stateVolumes: {
+        id: string;
+        volume: string;
+        backup: "none" | "required" | "optional";
+    }[];
+    migrations: {
+        id: string;
+        order: number;
+        backupRequired: boolean;
+    }[];
+    requiredCapabilities: string[];
+    dependencies?: {
+        id: string;
+        capability: string;
+        locality: "local" | "remote" | "either";
+        optional?: boolean | undefined;
+    }[] | undefined;
+}>;
+export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.component-release/v1">;
+    componentId: z.ZodString;
+    release: z.ZodString;
+    applicationVersion: z.ZodString;
+    revision: z.ZodNumber;
+    track: z.ZodEnum<["stable", "development"]>;
+    source: z.ZodObject<{
+        repository: z.ZodString;
+        commit: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        repository: string;
+        commit: string;
+    }, {
+        repository: string;
+        commit: string;
+    }>;
+    stableBase: z.ZodNullable<z.ZodObject<{
+        releaseRange: z.ZodString;
+        compatibilityId: z.ZodString;
+        catalogDigest: z.ZodNullable<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        releaseRange: string;
+        compatibilityId: string;
+        catalogDigest: string | null;
+    }, {
+        releaseRange: string;
+        compatibilityId: string;
+        catalogDigest: string | null;
+    }>>;
+    packages: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        architecture: z.ZodEnum<["amd64", "all"]>;
+        origin: z.ZodLiteral<"TreeSeed Deployment">;
+        order: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }, {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }>, "many">;
+    images: z.ZodArray<z.ZodObject<{
+        role: z.ZodString;
+        repository: z.ZodString;
+        digest: z.ZodString;
+        platforms: z.ZodArray<z.ZodEnum<["linux/amd64", "linux/arm64"]>, "many">;
+        consumers: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }, {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }>, "many">;
+    runtime: z.ZodEffects<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"treeseed.package-runtime/v1">;
+        componentId: z.ZodString;
+        version: z.ZodString;
+        compose: z.ZodObject<{
+            projectName: z.ZodString;
+            files: z.ZodArray<z.ZodObject<{
+                path: z.ZodString;
+                digest: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                path: string;
+                digest: string;
+            }, {
+                path: string;
+                digest: string;
+            }>, "many">;
+        }, "strict", z.ZodTypeAny, {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        }, {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        }>;
+        services: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            composeService: z.ZodString;
+            endpoints: z.ZodArray<z.ZodEffects<z.ZodObject<{
+                id: z.ZodString;
+                protocol: z.ZodEnum<["http", "https", "tcp"]>;
+                port: z.ZodNumber;
+                visibility: z.ZodEnum<["private", "host"]>;
+                defaultAlias: z.ZodOptional<z.ZodString>;
+                aliasOverride: z.ZodDefault<z.ZodBoolean>;
+                tls: z.ZodEnum<["edge", "passthrough", "none"]>;
+                authentication: z.ZodEnum<["none", "application", "mtls"]>;
+                healthGate: z.ZodOptional<z.ZodObject<{
+                    protocol: z.ZodEnum<["http", "https", "tcp"]>;
+                    path: z.ZodOptional<z.ZodString>;
+                    timeoutSeconds: z.ZodNumber;
+                }, "strict", z.ZodTypeAny, {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                }, {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                }>>;
+            }, "strict", z.ZodTypeAny, {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                aliasOverride: boolean;
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+            }, {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+                aliasOverride?: boolean | undefined;
+            }>, {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                aliasOverride: boolean;
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+            }, {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+                aliasOverride?: boolean | undefined;
+            }>, "many">;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                aliasOverride: boolean;
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+            }[];
+        }, {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+                aliasOverride?: boolean | undefined;
+            }[];
+        }>, "many">;
+        stateVolumes: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            volume: z.ZodString;
+            backup: z.ZodEnum<["required", "optional", "none"]>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }, {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }>, "many">;
+        migrations: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            order: z.ZodNumber;
+            backupRequired: z.ZodBoolean;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }, {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }>, "many">;
+        requiredCapabilities: z.ZodArray<z.ZodString, "many">;
+        dependencies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            capability: z.ZodString;
+            locality: z.ZodEnum<["local", "remote", "either"]>;
+            optional: z.ZodDefault<z.ZodBoolean>;
+        }, "strict", z.ZodTypeAny, {
+            id: string;
+            optional: boolean;
+            capability: string;
+            locality: "local" | "remote" | "either";
+        }, {
+            id: string;
+            capability: string;
+            locality: "local" | "remote" | "either";
+            optional?: boolean | undefined;
+        }>, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        componentId: string;
+        schemaVersion: "treeseed.package-runtime/v1";
+        version: string;
+        compose: {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        };
+        services: {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                aliasOverride: boolean;
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+            }[];
+        }[];
+        stateVolumes: {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }[];
+        migrations: {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }[];
+        requiredCapabilities: string[];
+        dependencies: {
+            id: string;
+            optional: boolean;
+            capability: string;
+            locality: "local" | "remote" | "either";
+        }[];
+    }, {
+        componentId: string;
+        schemaVersion: "treeseed.package-runtime/v1";
+        version: string;
+        compose: {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        };
+        services: {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+                aliasOverride?: boolean | undefined;
+            }[];
+        }[];
+        stateVolumes: {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }[];
+        migrations: {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }[];
+        requiredCapabilities: string[];
+        dependencies?: {
+            id: string;
+            capability: string;
+            locality: "local" | "remote" | "either";
+            optional?: boolean | undefined;
+        }[] | undefined;
+    }>, {
+        componentId: string;
+        schemaVersion: "treeseed.package-runtime/v1";
+        version: string;
+        compose: {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        };
+        services: {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                aliasOverride: boolean;
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+            }[];
+        }[];
+        stateVolumes: {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }[];
+        migrations: {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }[];
+        requiredCapabilities: string[];
+        dependencies: {
+            id: string;
+            optional: boolean;
+            capability: string;
+            locality: "local" | "remote" | "either";
+        }[];
+    }, {
+        componentId: string;
+        schemaVersion: "treeseed.package-runtime/v1";
+        version: string;
+        compose: {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        };
+        services: {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+                aliasOverride?: boolean | undefined;
+            }[];
+        }[];
+        stateVolumes: {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }[];
+        migrations: {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }[];
+        requiredCapabilities: string[];
+        dependencies?: {
+            id: string;
+            capability: string;
+            locality: "local" | "remote" | "either";
+            optional?: boolean | undefined;
+        }[] | undefined;
+    }>;
+    runtimeDigest: z.ZodString;
+    rollback: z.ZodObject<{
+        compatible: z.ZodBoolean;
+        requiresBackup: z.ZodBoolean;
+    }, "strict", z.ZodTypeAny, {
+        compatible: boolean;
+        requiresBackup: boolean;
+    }, {
+        compatible: boolean;
+        requiresBackup: boolean;
+    }>;
+    evidence: z.ZodObject<{
+        provenance: z.ZodArray<z.ZodString, "many">;
+        sboms: z.ZodArray<z.ZodString, "many">;
+        vulnerabilities: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        provenance: string[];
+        sboms: string[];
+        vulnerabilities: string[];
+    }, {
+        provenance: string[];
+        sboms: string[];
+        vulnerabilities: string[];
+    }>;
+}, "strict", z.ZodTypeAny, {
+    componentId: string;
+    track: "stable" | "development";
+    schemaVersion: "treeseed.component-release/v1";
+    runtime: {
+        componentId: string;
+        schemaVersion: "treeseed.package-runtime/v1";
+        version: string;
+        compose: {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        };
+        services: {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                aliasOverride: boolean;
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+            }[];
+        }[];
+        stateVolumes: {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }[];
+        migrations: {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }[];
+        requiredCapabilities: string[];
+        dependencies: {
+            id: string;
+            optional: boolean;
+            capability: string;
+            locality: "local" | "remote" | "either";
+        }[];
+    };
+    release: string;
+    applicationVersion: string;
+    revision: number;
+    source: {
+        repository: string;
+        commit: string;
+    };
+    stableBase: {
+        releaseRange: string;
+        compatibilityId: string;
+        catalogDigest: string | null;
+    } | null;
+    packages: {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }[];
+    images: {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }[];
+    runtimeDigest: string;
+    rollback: {
+        compatible: boolean;
+        requiresBackup: boolean;
+    };
+    evidence: {
+        provenance: string[];
+        sboms: string[];
+        vulnerabilities: string[];
+    };
+}, {
+    componentId: string;
+    track: "stable" | "development";
+    schemaVersion: "treeseed.component-release/v1";
+    runtime: {
+        componentId: string;
+        schemaVersion: "treeseed.package-runtime/v1";
+        version: string;
+        compose: {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        };
+        services: {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+                aliasOverride?: boolean | undefined;
+            }[];
+        }[];
+        stateVolumes: {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }[];
+        migrations: {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }[];
+        requiredCapabilities: string[];
+        dependencies?: {
+            id: string;
+            capability: string;
+            locality: "local" | "remote" | "either";
+            optional?: boolean | undefined;
+        }[] | undefined;
+    };
+    release: string;
+    applicationVersion: string;
+    revision: number;
+    source: {
+        repository: string;
+        commit: string;
+    };
+    stableBase: {
+        releaseRange: string;
+        compatibilityId: string;
+        catalogDigest: string | null;
+    } | null;
+    packages: {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }[];
+    images: {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }[];
+    runtimeDigest: string;
+    rollback: {
+        compatible: boolean;
+        requiresBackup: boolean;
+    };
+    evidence: {
+        provenance: string[];
+        sboms: string[];
+        vulnerabilities: string[];
+    };
+}>, {
+    componentId: string;
+    track: "stable" | "development";
+    schemaVersion: "treeseed.component-release/v1";
+    runtime: {
+        componentId: string;
+        schemaVersion: "treeseed.package-runtime/v1";
+        version: string;
+        compose: {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        };
+        services: {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                aliasOverride: boolean;
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+            }[];
+        }[];
+        stateVolumes: {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }[];
+        migrations: {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }[];
+        requiredCapabilities: string[];
+        dependencies: {
+            id: string;
+            optional: boolean;
+            capability: string;
+            locality: "local" | "remote" | "either";
+        }[];
+    };
+    release: string;
+    applicationVersion: string;
+    revision: number;
+    source: {
+        repository: string;
+        commit: string;
+    };
+    stableBase: {
+        releaseRange: string;
+        compatibilityId: string;
+        catalogDigest: string | null;
+    } | null;
+    packages: {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }[];
+    images: {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }[];
+    runtimeDigest: string;
+    rollback: {
+        compatible: boolean;
+        requiresBackup: boolean;
+    };
+    evidence: {
+        provenance: string[];
+        sboms: string[];
+        vulnerabilities: string[];
+    };
+}, {
+    componentId: string;
+    track: "stable" | "development";
+    schemaVersion: "treeseed.component-release/v1";
+    runtime: {
+        componentId: string;
+        schemaVersion: "treeseed.package-runtime/v1";
+        version: string;
+        compose: {
+            projectName: string;
+            files: {
+                path: string;
+                digest: string;
+            }[];
+        };
+        services: {
+            id: string;
+            composeService: string;
+            endpoints: {
+                protocol: "http" | "https" | "tcp";
+                tls: "edge" | "passthrough" | "none";
+                authentication: "none" | "application" | "mtls";
+                id: string;
+                port: number;
+                visibility: "host" | "private";
+                healthGate?: {
+                    protocol: "http" | "https" | "tcp";
+                    timeoutSeconds: number;
+                    path?: string | undefined;
+                } | undefined;
+                defaultAlias?: string | undefined;
+                aliasOverride?: boolean | undefined;
+            }[];
+        }[];
+        stateVolumes: {
+            id: string;
+            volume: string;
+            backup: "none" | "required" | "optional";
+        }[];
+        migrations: {
+            id: string;
+            order: number;
+            backupRequired: boolean;
+        }[];
+        requiredCapabilities: string[];
+        dependencies?: {
+            id: string;
+            capability: string;
+            locality: "local" | "remote" | "either";
+            optional?: boolean | undefined;
+        }[] | undefined;
+    };
+    release: string;
+    applicationVersion: string;
+    revision: number;
+    source: {
+        repository: string;
+        commit: string;
+    };
+    stableBase: {
+        releaseRange: string;
+        compatibilityId: string;
+        catalogDigest: string | null;
+    } | null;
+    packages: {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }[];
+    images: {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }[];
+    runtimeDigest: string;
+    rollback: {
+        compatible: boolean;
+        requiresBackup: boolean;
+    };
+    evidence: {
+        provenance: string[];
+        sboms: string[];
+        vulnerabilities: string[];
+    };
+}>;
+export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.integration-release/v1">;
+    release: z.ZodString;
+    generation: z.ZodNumber;
+    track: z.ZodEnum<["stable", "development"]>;
+    compatibilityId: z.ZodString;
+    platform: z.ZodObject<{
+        repository: z.ZodLiteral<"treeseed-ai/platform">;
+        commit: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        repository: "treeseed-ai/platform";
+        commit: string;
+    }, {
+        repository: "treeseed-ai/platform";
+        commit: string;
+    }>;
+    deployment: z.ZodObject<{
+        repository: z.ZodLiteral<"treeseed-ai/deployment">;
+        commit: z.ZodString;
+        tag: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        repository: "treeseed-ai/deployment";
+        commit: string;
+        tag: string;
+    }, {
+        repository: "treeseed-ai/deployment";
+        commit: string;
+        tag: string;
+    }>;
+    hostPayloads: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        packageName: z.ZodString;
+        version: z.ZodString;
+        artifact: z.ZodObject<{
+            url: z.ZodString;
+            sha256: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            url: string;
+            sha256: string;
+        }, {
+            url: string;
+            sha256: string;
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        version: string;
+        packageName: string;
+        artifact: {
+            url: string;
+            sha256: string;
+        };
+    }, {
+        id: string;
+        version: string;
+        packageName: string;
+        artifact: {
+            url: string;
+            sha256: string;
+        };
+    }>, "many">;
+    components: z.ZodArray<z.ZodObject<{
+        componentId: z.ZodString;
+        release: z.ZodString;
+        manifest: z.ZodObject<{
+            url: z.ZodString;
+            sha256: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            url: string;
+            sha256: string;
+        }, {
+            url: string;
+            sha256: string;
+        }>;
+        files: z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            artifact: z.ZodObject<{
+                url: z.ZodString;
+                sha256: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                url: string;
+                sha256: string;
+            }, {
+                url: string;
+                sha256: string;
+            }>;
+        }, "strict", z.ZodTypeAny, {
+            path: string;
+            artifact: {
+                url: string;
+                sha256: string;
+            };
+        }, {
+            path: string;
+            artifact: {
+                url: string;
+                sha256: string;
+            };
+        }>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        componentId: string;
+        files: {
+            path: string;
+            artifact: {
+                url: string;
+                sha256: string;
+            };
+        }[];
+        release: string;
+        manifest: {
+            url: string;
+            sha256: string;
+        };
+    }, {
+        componentId: string;
+        files: {
+            path: string;
+            artifact: {
+                url: string;
+                sha256: string;
+            };
+        }[];
+        release: string;
+        manifest: {
+            url: string;
+            sha256: string;
+        };
+    }>, "many">;
+    createdAt: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.integration-release/v1";
+    generation: number;
+    components: {
+        componentId: string;
+        files: {
+            path: string;
+            artifact: {
+                url: string;
+                sha256: string;
+            };
+        }[];
+        release: string;
+        manifest: {
+            url: string;
+            sha256: string;
+        };
+    }[];
+    release: string;
+    compatibilityId: string;
+    platform: {
+        repository: "treeseed-ai/platform";
+        commit: string;
+    };
+    deployment: {
+        repository: "treeseed-ai/deployment";
+        commit: string;
+        tag: string;
+    };
+    hostPayloads: {
+        id: string;
+        version: string;
+        packageName: string;
+        artifact: {
+            url: string;
+            sha256: string;
+        };
+    }[];
+    createdAt: string;
+}, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.integration-release/v1";
+    generation: number;
+    components: {
+        componentId: string;
+        files: {
+            path: string;
+            artifact: {
+                url: string;
+                sha256: string;
+            };
+        }[];
+        release: string;
+        manifest: {
+            url: string;
+            sha256: string;
+        };
+    }[];
+    release: string;
+    compatibilityId: string;
+    platform: {
+        repository: "treeseed-ai/platform";
+        commit: string;
+    };
+    deployment: {
+        repository: "treeseed-ai/deployment";
+        commit: string;
+        tag: string;
+    };
+    hostPayloads: {
+        id: string;
+        version: string;
+        packageName: string;
+        artifact: {
+            url: string;
+            sha256: string;
+        };
+    }[];
+    createdAt: string;
+}>, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.integration-release/v1";
+    generation: number;
+    components: {
+        componentId: string;
+        files: {
+            path: string;
+            artifact: {
+                url: string;
+                sha256: string;
+            };
+        }[];
+        release: string;
+        manifest: {
+            url: string;
+            sha256: string;
+        };
+    }[];
+    release: string;
+    compatibilityId: string;
+    platform: {
+        repository: "treeseed-ai/platform";
+        commit: string;
+    };
+    deployment: {
+        repository: "treeseed-ai/deployment";
+        commit: string;
+        tag: string;
+    };
+    hostPayloads: {
+        id: string;
+        version: string;
+        packageName: string;
+        artifact: {
+            url: string;
+            sha256: string;
+        };
+    }[];
+    createdAt: string;
+}, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.integration-release/v1";
+    generation: number;
+    components: {
+        componentId: string;
+        files: {
+            path: string;
+            artifact: {
+                url: string;
+                sha256: string;
+            };
+        }[];
+        release: string;
+        manifest: {
+            url: string;
+            sha256: string;
+        };
+    }[];
+    release: string;
+    compatibilityId: string;
+    platform: {
+        repository: "treeseed-ai/platform";
+        commit: string;
+    };
+    deployment: {
+        repository: "treeseed-ai/deployment";
+        commit: string;
+        tag: string;
+    };
+    hostPayloads: {
+        id: string;
+        version: string;
+        packageName: string;
+        artifact: {
+            url: string;
+            sha256: string;
+        };
+    }[];
+    createdAt: string;
+}>;
+export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.release-catalog/v1">;
+    release: z.ZodString;
+    generation: z.ZodNumber;
+    track: z.ZodEnum<["stable", "development"]>;
+    compatibilityId: z.ZodString;
+    catalogDigest: z.ZodString;
+    stableBase: z.ZodNullable<z.ZodObject<{
+        release: z.ZodString;
+        catalogDigest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        release: string;
+        catalogDigest: string;
+    }, {
+        release: string;
+        catalogDigest: string;
+    }>>;
+    components: z.ZodArray<z.ZodEffects<z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"treeseed.component-release/v1">;
+        componentId: z.ZodString;
+        release: z.ZodString;
+        applicationVersion: z.ZodString;
+        revision: z.ZodNumber;
+        track: z.ZodEnum<["stable", "development"]>;
+        source: z.ZodObject<{
+            repository: z.ZodString;
+            commit: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            repository: string;
+            commit: string;
+        }, {
+            repository: string;
+            commit: string;
+        }>;
+        stableBase: z.ZodNullable<z.ZodObject<{
+            releaseRange: z.ZodString;
+            compatibilityId: z.ZodString;
+            catalogDigest: z.ZodNullable<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        }, {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        }>>;
+        packages: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            version: z.ZodString;
+            architecture: z.ZodEnum<["amd64", "all"]>;
+            origin: z.ZodLiteral<"TreeSeed Deployment">;
+            order: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }, {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }>, "many">;
+        images: z.ZodArray<z.ZodObject<{
+            role: z.ZodString;
+            repository: z.ZodString;
+            digest: z.ZodString;
+            platforms: z.ZodArray<z.ZodEnum<["linux/amd64", "linux/arm64"]>, "many">;
+            consumers: z.ZodArray<z.ZodString, "many">;
+        }, "strict", z.ZodTypeAny, {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }, {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }>, "many">;
+        runtime: z.ZodEffects<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<"treeseed.package-runtime/v1">;
+            componentId: z.ZodString;
+            version: z.ZodString;
+            compose: z.ZodObject<{
+                projectName: z.ZodString;
+                files: z.ZodArray<z.ZodObject<{
+                    path: z.ZodString;
+                    digest: z.ZodString;
+                }, "strict", z.ZodTypeAny, {
+                    path: string;
+                    digest: string;
+                }, {
+                    path: string;
+                    digest: string;
+                }>, "many">;
+            }, "strict", z.ZodTypeAny, {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            }, {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            }>;
+            services: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                composeService: z.ZodString;
+                endpoints: z.ZodArray<z.ZodEffects<z.ZodObject<{
+                    id: z.ZodString;
+                    protocol: z.ZodEnum<["http", "https", "tcp"]>;
+                    port: z.ZodNumber;
+                    visibility: z.ZodEnum<["private", "host"]>;
+                    defaultAlias: z.ZodOptional<z.ZodString>;
+                    aliasOverride: z.ZodDefault<z.ZodBoolean>;
+                    tls: z.ZodEnum<["edge", "passthrough", "none"]>;
+                    authentication: z.ZodEnum<["none", "application", "mtls"]>;
+                    healthGate: z.ZodOptional<z.ZodObject<{
+                        protocol: z.ZodEnum<["http", "https", "tcp"]>;
+                        path: z.ZodOptional<z.ZodString>;
+                        timeoutSeconds: z.ZodNumber;
+                    }, "strict", z.ZodTypeAny, {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    }, {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    }>>;
+                }, "strict", z.ZodTypeAny, {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    aliasOverride: boolean;
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                }, {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                    aliasOverride?: boolean | undefined;
+                }>, {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    aliasOverride: boolean;
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                }, {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                    aliasOverride?: boolean | undefined;
+                }>, "many">;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    aliasOverride: boolean;
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                }[];
+            }, {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                    aliasOverride?: boolean | undefined;
+                }[];
+            }>, "many">;
+            stateVolumes: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                volume: z.ZodString;
+                backup: z.ZodEnum<["required", "optional", "none"]>;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }, {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }>, "many">;
+            migrations: z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                order: z.ZodNumber;
+                backupRequired: z.ZodBoolean;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }, {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }>, "many">;
+            requiredCapabilities: z.ZodArray<z.ZodString, "many">;
+            dependencies: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                id: z.ZodString;
+                capability: z.ZodString;
+                locality: z.ZodEnum<["local", "remote", "either"]>;
+                optional: z.ZodDefault<z.ZodBoolean>;
+            }, "strict", z.ZodTypeAny, {
+                id: string;
+                optional: boolean;
+                capability: string;
+                locality: "local" | "remote" | "either";
+            }, {
+                id: string;
+                capability: string;
+                locality: "local" | "remote" | "either";
+                optional?: boolean | undefined;
+            }>, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    aliasOverride: boolean;
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies: {
+                id: string;
+                optional: boolean;
+                capability: string;
+                locality: "local" | "remote" | "either";
+            }[];
+        }, {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                    aliasOverride?: boolean | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies?: {
+                id: string;
+                capability: string;
+                locality: "local" | "remote" | "either";
+                optional?: boolean | undefined;
+            }[] | undefined;
+        }>, {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    aliasOverride: boolean;
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies: {
+                id: string;
+                optional: boolean;
+                capability: string;
+                locality: "local" | "remote" | "either";
+            }[];
+        }, {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                    aliasOverride?: boolean | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies?: {
+                id: string;
+                capability: string;
+                locality: "local" | "remote" | "either";
+                optional?: boolean | undefined;
+            }[] | undefined;
+        }>;
+        runtimeDigest: z.ZodString;
+        rollback: z.ZodObject<{
+            compatible: z.ZodBoolean;
+            requiresBackup: z.ZodBoolean;
+        }, "strict", z.ZodTypeAny, {
+            compatible: boolean;
+            requiresBackup: boolean;
+        }, {
+            compatible: boolean;
+            requiresBackup: boolean;
+        }>;
+        evidence: z.ZodObject<{
+            provenance: z.ZodArray<z.ZodString, "many">;
+            sboms: z.ZodArray<z.ZodString, "many">;
+            vulnerabilities: z.ZodArray<z.ZodString, "many">;
+        }, "strict", z.ZodTypeAny, {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        }, {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        }>;
+    }, "strict", z.ZodTypeAny, {
+        componentId: string;
+        track: "stable" | "development";
+        schemaVersion: "treeseed.component-release/v1";
+        runtime: {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    aliasOverride: boolean;
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies: {
+                id: string;
+                optional: boolean;
+                capability: string;
+                locality: "local" | "remote" | "either";
+            }[];
+        };
+        release: string;
+        applicationVersion: string;
+        revision: number;
+        source: {
+            repository: string;
+            commit: string;
+        };
+        stableBase: {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        } | null;
+        packages: {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }[];
+        images: {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }[];
+        runtimeDigest: string;
+        rollback: {
+            compatible: boolean;
+            requiresBackup: boolean;
+        };
+        evidence: {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        };
+    }, {
+        componentId: string;
+        track: "stable" | "development";
+        schemaVersion: "treeseed.component-release/v1";
+        runtime: {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                    aliasOverride?: boolean | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies?: {
+                id: string;
+                capability: string;
+                locality: "local" | "remote" | "either";
+                optional?: boolean | undefined;
+            }[] | undefined;
+        };
+        release: string;
+        applicationVersion: string;
+        revision: number;
+        source: {
+            repository: string;
+            commit: string;
+        };
+        stableBase: {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        } | null;
+        packages: {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }[];
+        images: {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }[];
+        runtimeDigest: string;
+        rollback: {
+            compatible: boolean;
+            requiresBackup: boolean;
+        };
+        evidence: {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        };
+    }>, {
+        componentId: string;
+        track: "stable" | "development";
+        schemaVersion: "treeseed.component-release/v1";
+        runtime: {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    aliasOverride: boolean;
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies: {
+                id: string;
+                optional: boolean;
+                capability: string;
+                locality: "local" | "remote" | "either";
+            }[];
+        };
+        release: string;
+        applicationVersion: string;
+        revision: number;
+        source: {
+            repository: string;
+            commit: string;
+        };
+        stableBase: {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        } | null;
+        packages: {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }[];
+        images: {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }[];
+        runtimeDigest: string;
+        rollback: {
+            compatible: boolean;
+            requiresBackup: boolean;
+        };
+        evidence: {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        };
+    }, {
+        componentId: string;
+        track: "stable" | "development";
+        schemaVersion: "treeseed.component-release/v1";
+        runtime: {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                    aliasOverride?: boolean | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies?: {
+                id: string;
+                capability: string;
+                locality: "local" | "remote" | "either";
+                optional?: boolean | undefined;
+            }[] | undefined;
+        };
+        release: string;
+        applicationVersion: string;
+        revision: number;
+        source: {
+            repository: string;
+            commit: string;
+        };
+        stableBase: {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        } | null;
+        packages: {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }[];
+        images: {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }[];
+        runtimeDigest: string;
+        rollback: {
+            compatible: boolean;
+            requiresBackup: boolean;
+        };
+        evidence: {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        };
+    }>, "many">;
+    createdAt: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.release-catalog/v1";
+    generation: number;
+    components: {
+        componentId: string;
+        track: "stable" | "development";
+        schemaVersion: "treeseed.component-release/v1";
+        runtime: {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    aliasOverride: boolean;
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies: {
+                id: string;
+                optional: boolean;
+                capability: string;
+                locality: "local" | "remote" | "either";
+            }[];
+        };
+        release: string;
+        applicationVersion: string;
+        revision: number;
+        source: {
+            repository: string;
+            commit: string;
+        };
+        stableBase: {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        } | null;
+        packages: {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }[];
+        images: {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }[];
+        runtimeDigest: string;
+        rollback: {
+            compatible: boolean;
+            requiresBackup: boolean;
+        };
+        evidence: {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        };
+    }[];
+    release: string;
+    compatibilityId: string;
+    catalogDigest: string;
+    stableBase: {
+        release: string;
+        catalogDigest: string;
+    } | null;
+    createdAt: string;
+}, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.release-catalog/v1";
+    generation: number;
+    components: {
+        componentId: string;
+        track: "stable" | "development";
+        schemaVersion: "treeseed.component-release/v1";
+        runtime: {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                    aliasOverride?: boolean | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies?: {
+                id: string;
+                capability: string;
+                locality: "local" | "remote" | "either";
+                optional?: boolean | undefined;
+            }[] | undefined;
+        };
+        release: string;
+        applicationVersion: string;
+        revision: number;
+        source: {
+            repository: string;
+            commit: string;
+        };
+        stableBase: {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        } | null;
+        packages: {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }[];
+        images: {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }[];
+        runtimeDigest: string;
+        rollback: {
+            compatible: boolean;
+            requiresBackup: boolean;
+        };
+        evidence: {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        };
+    }[];
+    release: string;
+    compatibilityId: string;
+    catalogDigest: string;
+    stableBase: {
+        release: string;
+        catalogDigest: string;
+    } | null;
+    createdAt: string;
+}>, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.release-catalog/v1";
+    generation: number;
+    components: {
+        componentId: string;
+        track: "stable" | "development";
+        schemaVersion: "treeseed.component-release/v1";
+        runtime: {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    aliasOverride: boolean;
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies: {
+                id: string;
+                optional: boolean;
+                capability: string;
+                locality: "local" | "remote" | "either";
+            }[];
+        };
+        release: string;
+        applicationVersion: string;
+        revision: number;
+        source: {
+            repository: string;
+            commit: string;
+        };
+        stableBase: {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        } | null;
+        packages: {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }[];
+        images: {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }[];
+        runtimeDigest: string;
+        rollback: {
+            compatible: boolean;
+            requiresBackup: boolean;
+        };
+        evidence: {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        };
+    }[];
+    release: string;
+    compatibilityId: string;
+    catalogDigest: string;
+    stableBase: {
+        release: string;
+        catalogDigest: string;
+    } | null;
+    createdAt: string;
+}, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.release-catalog/v1";
+    generation: number;
+    components: {
+        componentId: string;
+        track: "stable" | "development";
+        schemaVersion: "treeseed.component-release/v1";
+        runtime: {
+            componentId: string;
+            schemaVersion: "treeseed.package-runtime/v1";
+            version: string;
+            compose: {
+                projectName: string;
+                files: {
+                    path: string;
+                    digest: string;
+                }[];
+            };
+            services: {
+                id: string;
+                composeService: string;
+                endpoints: {
+                    protocol: "http" | "https" | "tcp";
+                    tls: "edge" | "passthrough" | "none";
+                    authentication: "none" | "application" | "mtls";
+                    id: string;
+                    port: number;
+                    visibility: "host" | "private";
+                    healthGate?: {
+                        protocol: "http" | "https" | "tcp";
+                        timeoutSeconds: number;
+                        path?: string | undefined;
+                    } | undefined;
+                    defaultAlias?: string | undefined;
+                    aliasOverride?: boolean | undefined;
+                }[];
+            }[];
+            stateVolumes: {
+                id: string;
+                volume: string;
+                backup: "none" | "required" | "optional";
+            }[];
+            migrations: {
+                id: string;
+                order: number;
+                backupRequired: boolean;
+            }[];
+            requiredCapabilities: string[];
+            dependencies?: {
+                id: string;
+                capability: string;
+                locality: "local" | "remote" | "either";
+                optional?: boolean | undefined;
+            }[] | undefined;
+        };
+        release: string;
+        applicationVersion: string;
+        revision: number;
+        source: {
+            repository: string;
+            commit: string;
+        };
+        stableBase: {
+            releaseRange: string;
+            compatibilityId: string;
+            catalogDigest: string | null;
+        } | null;
+        packages: {
+            architecture: "amd64" | "all";
+            version: string;
+            order: number;
+            name: string;
+            origin: "TreeSeed Deployment";
+        }[];
+        images: {
+            role: string;
+            digest: string;
+            repository: string;
+            platforms: ("linux/amd64" | "linux/arm64")[];
+            consumers: string[];
+        }[];
+        runtimeDigest: string;
+        rollback: {
+            compatible: boolean;
+            requiresBackup: boolean;
+        };
+        evidence: {
+            provenance: string[];
+            sboms: string[];
+            vulnerabilities: string[];
+        };
+    }[];
+    release: string;
+    compatibilityId: string;
+    catalogDigest: string;
+    stableBase: {
+        release: string;
+        catalogDigest: string;
+    } | null;
+    createdAt: string;
+}>;
+export declare const hostPlanSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.host-plan/v1">;
+    planId: z.ZodString;
+    configurationDigest: z.ZodString;
+    catalogDigest: z.ZodString;
+    changes: z.ZodArray<z.ZodObject<{
+        componentId: z.ZodString;
+        action: z.ZodEnum<["install", "upgrade", "reconfigure", "remove", "noop"]>;
+        from: z.ZodNullable<z.ZodString>;
+        to: z.ZodNullable<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        componentId: string;
+        action: "install" | "upgrade" | "reconfigure" | "remove" | "noop";
+        from: string | null;
+        to: string | null;
+    }, {
+        componentId: string;
+        action: "install" | "upgrade" | "reconfigure" | "remove" | "noop";
+        from: string | null;
+        to: string | null;
+    }>, "many">;
+    blockers: z.ZodArray<z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        code: string;
+        message: string;
+    }, {
+        code: string;
+        message: string;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: "treeseed.host-plan/v1";
+    catalogDigest: string;
+    planId: string;
+    configurationDigest: string;
+    changes: {
+        componentId: string;
+        action: "install" | "upgrade" | "reconfigure" | "remove" | "noop";
+        from: string | null;
+        to: string | null;
+    }[];
+    blockers: {
+        code: string;
+        message: string;
+    }[];
+}, {
+    schemaVersion: "treeseed.host-plan/v1";
+    catalogDigest: string;
+    planId: string;
+    configurationDigest: string;
+    changes: {
+        componentId: string;
+        action: "install" | "upgrade" | "reconfigure" | "remove" | "noop";
+        from: string | null;
+        to: string | null;
+    }[];
+    blockers: {
+        code: string;
+        message: string;
+    }[];
+}>;
+export declare const hostBootstrapSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.host-bootstrap/v1">;
+    bootstrapId: z.ZodString;
+    configurationDigest: z.ZodString;
+    apt: z.ZodObject<{
+        origin: z.ZodLiteral<"TreeSeed Deployment">;
+        suite: z.ZodEnum<["stable", "development"]>;
+        repository: z.ZodString;
+        keyFingerprint: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        origin: "TreeSeed Deployment";
+        repository: string;
+        suite: "stable" | "development";
+        keyFingerprint: string;
+    }, {
+        origin: "TreeSeed Deployment";
+        repository: string;
+        suite: "stable" | "development";
+        keyFingerprint: string;
+    }>;
+    packages: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        architecture: z.ZodEnum<["amd64", "all"]>;
+        origin: z.ZodLiteral<"TreeSeed Deployment">;
+        order: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }, {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }>, "many">;
+    credentialPolicy: z.ZodObject<{
+        noStoreResponse: z.ZodLiteral<true>;
+        redactedLogging: z.ZodLiteral<true>;
+        ephemeralGeneration: z.ZodLiteral<true>;
+        deleteAfterInstall: z.ZodLiteral<true>;
+    }, "strict", z.ZodTypeAny, {
+        noStoreResponse: true;
+        redactedLogging: true;
+        ephemeralGeneration: true;
+        deleteAfterInstall: true;
+    }, {
+        noStoreResponse: true;
+        redactedLogging: true;
+        ephemeralGeneration: true;
+        deleteAfterInstall: true;
+    }>;
+    createdAt: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: "treeseed.host-bootstrap/v1";
+    packages: {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }[];
+    createdAt: string;
+    configurationDigest: string;
+    bootstrapId: string;
+    apt: {
+        origin: "TreeSeed Deployment";
+        repository: string;
+        suite: "stable" | "development";
+        keyFingerprint: string;
+    };
+    credentialPolicy: {
+        noStoreResponse: true;
+        redactedLogging: true;
+        ephemeralGeneration: true;
+        deleteAfterInstall: true;
+    };
+}, {
+    schemaVersion: "treeseed.host-bootstrap/v1";
+    packages: {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }[];
+    createdAt: string;
+    configurationDigest: string;
+    bootstrapId: string;
+    apt: {
+        origin: "TreeSeed Deployment";
+        repository: string;
+        suite: "stable" | "development";
+        keyFingerprint: string;
+    };
+    credentialPolicy: {
+        noStoreResponse: true;
+        redactedLogging: true;
+        ephemeralGeneration: true;
+        deleteAfterInstall: true;
+    };
+}>;
+export declare const hostUpdateSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.host-update/v1">;
+    updateId: z.ZodString;
+    track: z.ZodEnum<["stable", "development"]>;
+    fromCatalogDigest: z.ZodString;
+    toCatalogDigest: z.ZodString;
+    components: z.ZodArray<z.ZodObject<{
+        componentId: z.ZodString;
+        from: z.ZodNullable<z.ZodString>;
+        to: z.ZodString;
+        imageDigests: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        componentId: string;
+        from: string | null;
+        to: string;
+        imageDigests: string[];
+    }, {
+        componentId: string;
+        from: string | null;
+        to: string;
+        imageDigests: string[];
+    }>, "many">;
+    activation: z.ZodObject<{
+        policy: z.ZodEnum<["maintenance-window", "continuous"]>;
+        eligibleAt: z.ZodString;
+        jitterSeconds: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        policy: "maintenance-window" | "continuous";
+        eligibleAt: string;
+        jitterSeconds: number;
+    }, {
+        policy: "maintenance-window" | "continuous";
+        eligibleAt: string;
+        jitterSeconds: number;
+    }>;
+    state: z.ZodEnum<["planned", "draining", "applying", "healthy", "failed", "rolled-back"]>;
+}, "strict", z.ZodTypeAny, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.host-update/v1";
+    components: {
+        componentId: string;
+        from: string | null;
+        to: string;
+        imageDigests: string[];
+    }[];
+    updateId: string;
+    fromCatalogDigest: string;
+    toCatalogDigest: string;
+    activation: {
+        policy: "maintenance-window" | "continuous";
+        eligibleAt: string;
+        jitterSeconds: number;
+    };
+    state: "planned" | "draining" | "applying" | "healthy" | "failed" | "rolled-back";
+}, {
+    track: "stable" | "development";
+    schemaVersion: "treeseed.host-update/v1";
+    components: {
+        componentId: string;
+        from: string | null;
+        to: string;
+        imageDigests: string[];
+    }[];
+    updateId: string;
+    fromCatalogDigest: string;
+    toCatalogDigest: string;
+    activation: {
+        policy: "maintenance-window" | "continuous";
+        eligibleAt: string;
+        jitterSeconds: number;
+    };
+    state: "planned" | "draining" | "applying" | "healthy" | "failed" | "rolled-back";
+}>;
+export declare const hostReceiptSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.host-receipt/v1">;
+    receiptId: z.ZodString;
+    planId: z.ZodString;
+    state: z.ZodEnum<["known-good", "degraded", "rolled-back"]>;
+    hostId: z.ZodString;
+    role: z.ZodUnion<[z.ZodEnum<["integrated", "capacity-provider", "control-plane", "knowledge", "ai-gpu", "edge"]>, z.ZodString]>;
+    rolloutGroup: z.ZodString;
+    configurationDigest: z.ZodString;
+    catalogDigest: z.ZodString;
+    packages: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        architecture: z.ZodEnum<["amd64", "all"]>;
+        origin: z.ZodLiteral<"TreeSeed Deployment">;
+        order: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }, {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }>, "many">;
+    images: z.ZodArray<z.ZodObject<{
+        role: z.ZodString;
+        repository: z.ZodString;
+        digest: z.ZodString;
+        platforms: z.ZodArray<z.ZodEnum<["linux/amd64", "linux/arm64"]>, "many">;
+        consumers: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }, {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }>, "many">;
+    runtimes: z.ZodArray<z.ZodObject<{
+        componentId: z.ZodString;
+        release: z.ZodString;
+        runtimeDigest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        componentId: string;
+        release: string;
+        runtimeDigest: string;
+    }, {
+        componentId: string;
+        release: string;
+        runtimeDigest: string;
+    }>, "many">;
+    completedAt: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    schemaVersion: "treeseed.host-receipt/v1";
+    role: string;
+    rolloutGroup: string;
+    catalogDigest: string;
+    packages: {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }[];
+    images: {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }[];
+    planId: string;
+    configurationDigest: string;
+    state: "rolled-back" | "known-good" | "degraded";
+    receiptId: string;
+    hostId: string;
+    runtimes: {
+        componentId: string;
+        release: string;
+        runtimeDigest: string;
+    }[];
+    completedAt: string;
+}, {
+    schemaVersion: "treeseed.host-receipt/v1";
+    role: string;
+    rolloutGroup: string;
+    catalogDigest: string;
+    packages: {
+        architecture: "amd64" | "all";
+        version: string;
+        order: number;
+        name: string;
+        origin: "TreeSeed Deployment";
+    }[];
+    images: {
+        role: string;
+        digest: string;
+        repository: string;
+        platforms: ("linux/amd64" | "linux/arm64")[];
+        consumers: string[];
+    }[];
+    planId: string;
+    configurationDigest: string;
+    state: "rolled-back" | "known-good" | "degraded";
+    receiptId: string;
+    hostId: string;
+    runtimes: {
+        componentId: string;
+        release: string;
+        runtimeDigest: string;
+    }[];
+    completedAt: string;
+}>;
+export declare const hostBackupSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.host-backup/v1">;
+    backupId: z.ZodString;
+    componentId: z.ZodString;
+    generation: z.ZodNumber;
+    state: z.ZodEnum<["pending", "complete", "failed", "verified"]>;
+    artifacts: z.ZodArray<z.ZodObject<{
+        volumeId: z.ZodString;
+        location: z.ZodString;
+        digest: z.ZodString;
+        encrypted: z.ZodBoolean;
+    }, "strict", z.ZodTypeAny, {
+        digest: string;
+        volumeId: string;
+        location: string;
+        encrypted: boolean;
+    }, {
+        digest: string;
+        volumeId: string;
+        location: string;
+        encrypted: boolean;
+    }>, "many">;
+    createdAt: z.ZodString;
+    verifiedAt: z.ZodNullable<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    componentId: string;
+    schemaVersion: "treeseed.host-backup/v1";
+    generation: number;
+    createdAt: string;
+    state: "failed" | "pending" | "complete" | "verified";
+    backupId: string;
+    artifacts: {
+        digest: string;
+        volumeId: string;
+        location: string;
+        encrypted: boolean;
+    }[];
+    verifiedAt: string | null;
+}, {
+    componentId: string;
+    schemaVersion: "treeseed.host-backup/v1";
+    generation: number;
+    createdAt: string;
+    state: "failed" | "pending" | "complete" | "verified";
+    backupId: string;
+    artifacts: {
+        digest: string;
+        volumeId: string;
+        location: string;
+        encrypted: boolean;
+    }[];
+    verifiedAt: string | null;
+}>;
+export declare const hostMigrationSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.host-migration/v1">;
+    migrationId: z.ZodString;
+    componentId: z.ZodString;
+    operation: z.ZodString;
+    fromGeneration: z.ZodNumber;
+    toGeneration: z.ZodNumber;
+    backupId: z.ZodNullable<z.ZodString>;
+    state: z.ZodEnum<["pending", "quiesced", "copied", "verified", "activated", "failed", "rolled-back"]>;
+    sourceWritersStopped: z.ZodBoolean;
+    completedAt: z.ZodNullable<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    componentId: string;
+    schemaVersion: "treeseed.host-migration/v1";
+    state: "failed" | "rolled-back" | "pending" | "verified" | "quiesced" | "copied" | "activated";
+    completedAt: string | null;
+    backupId: string | null;
+    migrationId: string;
+    operation: string;
+    fromGeneration: number;
+    toGeneration: number;
+    sourceWritersStopped: boolean;
+}, {
+    componentId: string;
+    schemaVersion: "treeseed.host-migration/v1";
+    state: "failed" | "rolled-back" | "pending" | "verified" | "quiesced" | "copied" | "activated";
+    completedAt: string | null;
+    backupId: string | null;
+    migrationId: string;
+    operation: string;
+    fromGeneration: number;
+    toGeneration: number;
+    sourceWritersStopped: boolean;
+}>;
+export declare const hostRecoverySchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"treeseed.host-recovery/v1">;
+    recoveryId: z.ZodString;
+    receiptId: z.ZodString;
+    componentId: z.ZodNullable<z.ZodString>;
+    trigger: z.ZodEnum<["health-gate", "operator", "boot", "interrupted-update"]>;
+    action: z.ZodEnum<["retry", "rollback", "restore"]>;
+    targetGeneration: z.ZodNumber;
+    state: z.ZodEnum<["pending", "running", "healthy", "failed"]>;
+    backupId: z.ZodNullable<z.ZodString>;
+    completedAt: z.ZodNullable<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    componentId: string | null;
+    schemaVersion: "treeseed.host-recovery/v1";
+    action: "rollback" | "retry" | "restore";
+    state: "healthy" | "failed" | "pending" | "running";
+    receiptId: string;
+    completedAt: string | null;
+    backupId: string | null;
+    recoveryId: string;
+    trigger: "health-gate" | "operator" | "boot" | "interrupted-update";
+    targetGeneration: number;
+}, {
+    componentId: string | null;
+    schemaVersion: "treeseed.host-recovery/v1";
+    action: "rollback" | "retry" | "restore";
+    state: "healthy" | "failed" | "pending" | "running";
+    receiptId: string;
+    completedAt: string | null;
+    backupId: string | null;
+    recoveryId: string;
+    trigger: "health-gate" | "operator" | "boot" | "interrupted-update";
+    targetGeneration: number;
+}>;
+export type DeploymentTrack = z.infer<typeof deploymentTrackSchema>;
+export type HostRole = z.infer<typeof hostRoleSchema>;
+export type HostConnectionBinding = z.infer<typeof hostConnectionBindingSchema>;
+export type HostConfiguration = z.infer<typeof hostConfigurationSchema>;
+export type PackageRuntime = z.infer<typeof packageRuntimeSchema>;
+export type PackageEndpoint = z.infer<typeof packageEndpointSchema>;
+export type ComponentRelease = z.infer<typeof componentReleaseSchema>;
+export type ReleaseCatalog = z.infer<typeof releaseCatalogSchema>;
+export type IntegrationRelease = z.infer<typeof integrationReleaseSchema>;
+export type HostPlan = z.infer<typeof hostPlanSchema>;
+export type HostBootstrap = z.infer<typeof hostBootstrapSchema>;
+export type HostUpdate = z.infer<typeof hostUpdateSchema>;
+export type HostReceipt = z.infer<typeof hostReceiptSchema>;
+export type HostBackup = z.infer<typeof hostBackupSchema>;
+export type HostMigration = z.infer<typeof hostMigrationSchema>;
+export type HostRecovery = z.infer<typeof hostRecoverySchema>;