@treeseed/sdk 0.13.0-rc.53 → 0.13.0-rc.55

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (43) hide show
  1. package/README.md +4 -0
  2. package/dist/agent-capacity/authority/agent-authority-presets.js +2 -1
  3. package/dist/agent-capacity/contracts/configuration/configuration.js +1 -1
  4. package/dist/agent-capacity/validation/agent-definition-schema.d.ts +240 -240
  5. package/dist/agent-capacity/validation/agent-lab-forensics-schema.d.ts +1 -1
  6. package/dist/capacity-provider/client.d.ts +18 -3
  7. package/dist/capacity-provider/client.js +6 -0
  8. package/dist/capacity-provider/contracts/governance.d.ts +28 -1
  9. package/dist/capacity-provider/index.d.ts +1 -0
  10. package/dist/capacity-provider/index.js +1 -0
  11. package/dist/capacity-provider/sandbox-contracts.d.ts +422 -0
  12. package/dist/capacity-provider/sandbox-contracts.js +71 -0
  13. package/dist/capacity-provider/validation.d.ts +2 -1
  14. package/dist/capacity-provider/validation.js +23 -0
  15. package/dist/content/validation/agent-operational-content-schemas.d.ts +76 -76
  16. package/dist/content/validation/auxiliary-content-schemas.d.ts +20 -20
  17. package/dist/content/validation/content-model-schemas.d.ts +570 -570
  18. package/dist/content/validation/portable-content-data.d.ts +61 -61
  19. package/dist/deployment/ai-mode.d.ts +4 -4
  20. package/dist/deployment/schemas.d.ts +418 -100
  21. package/dist/deployment/schemas.js +23 -1
  22. package/dist/development/schemas.d.ts +22 -22
  23. package/dist/operator-contracts/canonical-command-tree.js +63 -3
  24. package/dist/operator-contracts/catalog/communication-operations.d.ts +300 -33
  25. package/dist/operator-contracts/catalog/communication-operations.js +56 -2
  26. package/dist/operator-contracts/catalog/inbox-operations.d.ts +261 -0
  27. package/dist/operator-contracts/catalog/inbox-operations.js +36 -0
  28. package/dist/operator-contracts/communication/contracts.d.ts +1261 -71
  29. package/dist/operator-contracts/communication/contracts.js +99 -7
  30. package/dist/operator-contracts/control-plane-operations.d.ts +592 -66
  31. package/dist/operator-contracts/control-plane-operations.js +4 -1
  32. package/dist/operator-contracts/inbox/contracts.d.ts +1099 -0
  33. package/dist/operator-contracts/inbox/contracts.js +134 -0
  34. package/dist/operator-contracts/index.d.ts +1 -0
  35. package/dist/operator-contracts/index.js +1 -0
  36. package/dist/operator-contracts/mcp.js +1 -1
  37. package/dist/security/encrypted-envelope.d.ts +177 -0
  38. package/dist/security/encrypted-envelope.js +34 -0
  39. package/dist/security/envelope-codec.d.ts +38 -0
  40. package/dist/security/envelope-codec.js +96 -0
  41. package/dist/security/index.d.ts +2 -0
  42. package/dist/security/index.js +2 -0
  43. package/package.json +5 -1
package/dist/deployment/schemas.d.ts CHANGED
@@ -1148,13 +1148,167 @@ export declare const hostConfigurationSchema: z.ZodObject<{
1148
1148
  provider: "file" | "systemd-credential" | "vault" | "aws-secrets-manager";
1149
1149
  reference: string;
1150
1150
  }>>;
1151
+ security: z.ZodOptional<z.ZodObject<{
1152
+ sandbox: z.ZodObject<{
1153
+ required: z.ZodBoolean;
1154
+ runtime: z.ZodLiteral<"kata-runtime-rs-qemu">;
1155
+ brokerSocket: z.ZodString;
1156
+ modelGateway: z.ZodObject<{
1157
+ provider: z.ZodLiteral<"openai">;
1158
+ upstreamBaseUrl: z.ZodLiteral<"https://api.openai.com">;
1159
+ allowedModels: z.ZodArray<z.ZodString, "many">;
1160
+ }, "strict", z.ZodTypeAny, {
1161
+ provider: "openai";
1162
+ upstreamBaseUrl: "https://api.openai.com";
1163
+ allowedModels: string[];
1164
+ }, {
1165
+ provider: "openai";
1166
+ upstreamBaseUrl: "https://api.openai.com";
1167
+ allowedModels: string[];
1168
+ }>;
1169
+ profiles: z.ZodArray<z.ZodObject<{
1170
+ id: z.ZodEnum<["read", "unit", "integration", "platform", "connected"]>;
1171
+ guestImage: z.ZodString;
1172
+ guestImageDigest: z.ZodString;
1173
+ }, "strict", z.ZodTypeAny, {
1174
+ id: "read" | "unit" | "integration" | "platform" | "connected";
1175
+ guestImage: string;
1176
+ guestImageDigest: string;
1177
+ }, {
1178
+ id: "read" | "unit" | "integration" | "platform" | "connected";
1179
+ guestImage: string;
1180
+ guestImageDigest: string;
1181
+ }>, "many">;
1182
+ }, "strict", z.ZodTypeAny, {
1183
+ runtime: "kata-runtime-rs-qemu";
1184
+ required: boolean;
1185
+ brokerSocket: string;
1186
+ modelGateway: {
1187
+ provider: "openai";
1188
+ upstreamBaseUrl: "https://api.openai.com";
1189
+ allowedModels: string[];
1190
+ };
1191
+ profiles: {
1192
+ id: "read" | "unit" | "integration" | "platform" | "connected";
1193
+ guestImage: string;
1194
+ guestImageDigest: string;
1195
+ }[];
1196
+ }, {
1197
+ runtime: "kata-runtime-rs-qemu";
1198
+ required: boolean;
1199
+ brokerSocket: string;
1200
+ modelGateway: {
1201
+ provider: "openai";
1202
+ upstreamBaseUrl: "https://api.openai.com";
1203
+ allowedModels: string[];
1204
+ };
1205
+ profiles: {
1206
+ id: "read" | "unit" | "integration" | "platform" | "connected";
1207
+ guestImage: string;
1208
+ guestImageDigest: string;
1209
+ }[];
1210
+ }>;
1211
+ providerVolume: z.ZodObject<{
1212
+ encryption: z.ZodLiteral<"luks2">;
1213
+ backingPath: z.ZodString;
1214
+ mountPath: z.ZodString;
1215
+ sizeBytes: z.ZodNumber;
1216
+ unlock: z.ZodEnum<["tpm2", "systemd-credential"]>;
1217
+ recoveryRequired: z.ZodLiteral<true>;
1218
+ }, "strict", z.ZodTypeAny, {
1219
+ encryption: "luks2";
1220
+ backingPath: string;
1221
+ mountPath: string;
1222
+ sizeBytes: number;
1223
+ unlock: "systemd-credential" | "tpm2";
1224
+ recoveryRequired: true;
1225
+ }, {
1226
+ encryption: "luks2";
1227
+ backingPath: string;
1228
+ mountPath: string;
1229
+ sizeBytes: number;
1230
+ unlock: "systemd-credential" | "tpm2";
1231
+ recoveryRequired: true;
1232
+ }>;
1233
+ applicationEncryption: z.ZodObject<{
1234
+ provider: z.ZodLiteral<"systemd-credential">;
1235
+ activeKeyVersion: z.ZodNumber;
1236
+ diagnosticsKeyVersion: z.ZodNumber;
1237
+ }, "strict", z.ZodTypeAny, {
1238
+ provider: "systemd-credential";
1239
+ activeKeyVersion: number;
1240
+ diagnosticsKeyVersion: number;
1241
+ }, {
1242
+ provider: "systemd-credential";
1243
+ activeKeyVersion: number;
1244
+ diagnosticsKeyVersion: number;
1245
+ }>;
1246
+ }, "strict", z.ZodTypeAny, {
1247
+ sandbox: {
1248
+ runtime: "kata-runtime-rs-qemu";
1249
+ required: boolean;
1250
+ brokerSocket: string;
1251
+ modelGateway: {
1252
+ provider: "openai";
1253
+ upstreamBaseUrl: "https://api.openai.com";
1254
+ allowedModels: string[];
1255
+ };
1256
+ profiles: {
1257
+ id: "read" | "unit" | "integration" | "platform" | "connected";
1258
+ guestImage: string;
1259
+ guestImageDigest: string;
1260
+ }[];
1261
+ };
1262
+ providerVolume: {
1263
+ encryption: "luks2";
1264
+ backingPath: string;
1265
+ mountPath: string;
1266
+ sizeBytes: number;
1267
+ unlock: "systemd-credential" | "tpm2";
1268
+ recoveryRequired: true;
1269
+ };
1270
+ applicationEncryption: {
1271
+ provider: "systemd-credential";
1272
+ activeKeyVersion: number;
1273
+ diagnosticsKeyVersion: number;
1274
+ };
1275
+ }, {
1276
+ sandbox: {
1277
+ runtime: "kata-runtime-rs-qemu";
1278
+ required: boolean;
1279
+ brokerSocket: string;
1280
+ modelGateway: {
1281
+ provider: "openai";
1282
+ upstreamBaseUrl: "https://api.openai.com";
1283
+ allowedModels: string[];
1284
+ };
1285
+ profiles: {
1286
+ id: "read" | "unit" | "integration" | "platform" | "connected";
1287
+ guestImage: string;
1288
+ guestImageDigest: string;
1289
+ }[];
1290
+ };
1291
+ providerVolume: {
1292
+ encryption: "luks2";
1293
+ backingPath: string;
1294
+ mountPath: string;
1295
+ sizeBytes: number;
1296
+ unlock: "systemd-credential" | "tpm2";
1297
+ recoveryRequired: true;
1298
+ };
1299
+ applicationEncryption: {
1300
+ provider: "systemd-credential";
1301
+ activeKeyVersion: number;
1302
+ diagnosticsKeyVersion: number;
1303
+ };
1304
+ }>>;
1151
1305
  }, "strict", z.ZodTypeAny, {
1306
+ schemaVersion: "treeseed.host/v1";
1152
1307
  host: {
1153
1308
  id: string;
1154
1309
  role: string;
1155
1310
  architecture: "amd64";
1156
1311
  };
1157
- schemaVersion: "treeseed.host/v1";
1158
1312
  generation: number;
1159
1313
  configurationId: string;
1160
1314
  runtime: {
@@ -1258,13 +1412,43 @@ export declare const hostConfigurationSchema: z.ZodObject<{
1258
1412
  provider: "file" | "systemd-credential" | "vault" | "aws-secrets-manager";
1259
1413
  reference: string;
1260
1414
  }>;
1415
+ security?: {
1416
+ sandbox: {
1417
+ runtime: "kata-runtime-rs-qemu";
1418
+ required: boolean;
1419
+ brokerSocket: string;
1420
+ modelGateway: {
1421
+ provider: "openai";
1422
+ upstreamBaseUrl: "https://api.openai.com";
1423
+ allowedModels: string[];
1424
+ };
1425
+ profiles: {
1426
+ id: "read" | "unit" | "integration" | "platform" | "connected";
1427
+ guestImage: string;
1428
+ guestImageDigest: string;
1429
+ }[];
1430
+ };
1431
+ providerVolume: {
1432
+ encryption: "luks2";
1433
+ backingPath: string;
1434
+ mountPath: string;
1435
+ sizeBytes: number;
1436
+ unlock: "systemd-credential" | "tpm2";
1437
+ recoveryRequired: true;
1438
+ };
1439
+ applicationEncryption: {
1440
+ provider: "systemd-credential";
1441
+ activeKeyVersion: number;
1442
+ diagnosticsKeyVersion: number;
1443
+ };
1444
+ } | undefined;
1261
1445
  }, {
1446
+ schemaVersion: "treeseed.host/v1";
1262
1447
  host: {
1263
1448
  id: string;
1264
1449
  role: string;
1265
1450
  architecture: "amd64";
1266
1451
  };
1267
- schemaVersion: "treeseed.host/v1";
1268
1452
  generation: number;
1269
1453
  configurationId: string;
1270
1454
  runtime: {
@@ -1368,6 +1552,36 @@ export declare const hostConfigurationSchema: z.ZodObject<{
1368
1552
  provider: "file" | "systemd-credential" | "vault" | "aws-secrets-manager";
1369
1553
  reference: string;
1370
1554
  }>;
1555
+ security?: {
1556
+ sandbox: {
1557
+ runtime: "kata-runtime-rs-qemu";
1558
+ required: boolean;
1559
+ brokerSocket: string;
1560
+ modelGateway: {
1561
+ provider: "openai";
1562
+ upstreamBaseUrl: "https://api.openai.com";
1563
+ allowedModels: string[];
1564
+ };
1565
+ profiles: {
1566
+ id: "read" | "unit" | "integration" | "platform" | "connected";
1567
+ guestImage: string;
1568
+ guestImageDigest: string;
1569
+ }[];
1570
+ };
1571
+ providerVolume: {
1572
+ encryption: "luks2";
1573
+ backingPath: string;
1574
+ mountPath: string;
1575
+ sizeBytes: number;
1576
+ unlock: "systemd-credential" | "tpm2";
1577
+ recoveryRequired: true;
1578
+ };
1579
+ applicationEncryption: {
1580
+ provider: "systemd-credential";
1581
+ activeKeyVersion: number;
1582
+ diagnosticsKeyVersion: number;
1583
+ };
1584
+ } | undefined;
1371
1585
  }>;
1372
1586
  export declare const packageEndpointSchema: z.ZodEffects<z.ZodObject<{
1373
1587
  id: z.ZodString;
@@ -1397,7 +1611,7 @@ export declare const packageEndpointSchema: z.ZodEffects<z.ZodObject<{
1397
1611
  port: number;
1398
1612
  visibility: "host" | "private";
1399
1613
  authentication: "none" | "application" | "mtls";
1400
- tls: "none" | "passthrough" | "edge";
1614
+ tls: "passthrough" | "none" | "edge";
1401
1615
  aliasOverride: boolean;
1402
1616
  healthGate?: {
1403
1617
  timeoutSeconds: number;
@@ -1411,7 +1625,7 @@ export declare const packageEndpointSchema: z.ZodEffects<z.ZodObject<{
1411
1625
  port: number;
1412
1626
  visibility: "host" | "private";
1413
1627
  authentication: "none" | "application" | "mtls";
1414
- tls: "none" | "passthrough" | "edge";
1628
+ tls: "passthrough" | "none" | "edge";
1415
1629
  healthGate?: {
1416
1630
  timeoutSeconds: number;
1417
1631
  protocol: "http" | "tcp" | "https";
@@ -1425,7 +1639,7 @@ export declare const packageEndpointSchema: z.ZodEffects<z.ZodObject<{
1425
1639
  port: number;
1426
1640
  visibility: "host" | "private";
1427
1641
  authentication: "none" | "application" | "mtls";
1428
- tls: "none" | "passthrough" | "edge";
1642
+ tls: "passthrough" | "none" | "edge";
1429
1643
  aliasOverride: boolean;
1430
1644
  healthGate?: {
1431
1645
  timeoutSeconds: number;
@@ -1439,7 +1653,7 @@ export declare const packageEndpointSchema: z.ZodEffects<z.ZodObject<{
1439
1653
  port: number;
1440
1654
  visibility: "host" | "private";
1441
1655
  authentication: "none" | "application" | "mtls";
1442
- tls: "none" | "passthrough" | "edge";
1656
+ tls: "passthrough" | "none" | "edge";
1443
1657
  healthGate?: {
1444
1658
  timeoutSeconds: number;
1445
1659
  protocol: "http" | "tcp" | "https";
@@ -1663,7 +1877,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
1663
1877
  port: number;
1664
1878
  visibility: "host" | "private";
1665
1879
  authentication: "none" | "application" | "mtls";
1666
- tls: "none" | "passthrough" | "edge";
1880
+ tls: "passthrough" | "none" | "edge";
1667
1881
  aliasOverride: boolean;
1668
1882
  healthGate?: {
1669
1883
  timeoutSeconds: number;
@@ -1677,7 +1891,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
1677
1891
  port: number;
1678
1892
  visibility: "host" | "private";
1679
1893
  authentication: "none" | "application" | "mtls";
1680
- tls: "none" | "passthrough" | "edge";
1894
+ tls: "passthrough" | "none" | "edge";
1681
1895
  healthGate?: {
1682
1896
  timeoutSeconds: number;
1683
1897
  protocol: "http" | "tcp" | "https";
@@ -1691,7 +1905,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
1691
1905
  port: number;
1692
1906
  visibility: "host" | "private";
1693
1907
  authentication: "none" | "application" | "mtls";
1694
- tls: "none" | "passthrough" | "edge";
1908
+ tls: "passthrough" | "none" | "edge";
1695
1909
  aliasOverride: boolean;
1696
1910
  healthGate?: {
1697
1911
  timeoutSeconds: number;
@@ -1705,7 +1919,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
1705
1919
  port: number;
1706
1920
  visibility: "host" | "private";
1707
1921
  authentication: "none" | "application" | "mtls";
1708
- tls: "none" | "passthrough" | "edge";
1922
+ tls: "passthrough" | "none" | "edge";
1709
1923
  healthGate?: {
1710
1924
  timeoutSeconds: number;
1711
1925
  protocol: "http" | "tcp" | "https";
@@ -1722,7 +1936,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
1722
1936
  port: number;
1723
1937
  visibility: "host" | "private";
1724
1938
  authentication: "none" | "application" | "mtls";
1725
- tls: "none" | "passthrough" | "edge";
1939
+ tls: "passthrough" | "none" | "edge";
1726
1940
  aliasOverride: boolean;
1727
1941
  healthGate?: {
1728
1942
  timeoutSeconds: number;
@@ -1740,7 +1954,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
1740
1954
  port: number;
1741
1955
  visibility: "host" | "private";
1742
1956
  authentication: "none" | "application" | "mtls";
1743
- tls: "none" | "passthrough" | "edge";
1957
+ tls: "passthrough" | "none" | "edge";
1744
1958
  healthGate?: {
1745
1959
  timeoutSeconds: number;
1746
1960
  protocol: "http" | "tcp" | "https";
@@ -1869,13 +2083,13 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
1869
2083
  } | undefined;
1870
2084
  }>>;
1871
2085
  }, "strict", z.ZodTypeAny, {
2086
+ schemaVersion: "treeseed.package-runtime/v1";
1872
2087
  dependencies: {
1873
2088
  id: string;
1874
2089
  capability: string;
1875
2090
  locality: "local" | "remote" | "either";
1876
2091
  optional: boolean;
1877
2092
  }[];
1878
- schemaVersion: "treeseed.package-runtime/v1";
1879
2093
  compose: {
1880
2094
  files: {
1881
2095
  path: string;
@@ -1916,7 +2130,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
1916
2130
  port: number;
1917
2131
  visibility: "host" | "private";
1918
2132
  authentication: "none" | "application" | "mtls";
1919
- tls: "none" | "passthrough" | "edge";
2133
+ tls: "passthrough" | "none" | "edge";
1920
2134
  aliasOverride: boolean;
1921
2135
  healthGate?: {
1922
2136
  timeoutSeconds: number;
@@ -1975,7 +2189,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
1975
2189
  port: number;
1976
2190
  visibility: "host" | "private";
1977
2191
  authentication: "none" | "application" | "mtls";
1978
- tls: "none" | "passthrough" | "edge";
2192
+ tls: "passthrough" | "none" | "edge";
1979
2193
  healthGate?: {
1980
2194
  timeoutSeconds: number;
1981
2195
  protocol: "http" | "tcp" | "https";
@@ -2045,13 +2259,13 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
2045
2259
  } | undefined;
2046
2260
  } | undefined;
2047
2261
  }>, {
2262
+ schemaVersion: "treeseed.package-runtime/v1";
2048
2263
  dependencies: {
2049
2264
  id: string;
2050
2265
  capability: string;
2051
2266
  locality: "local" | "remote" | "either";
2052
2267
  optional: boolean;
2053
2268
  }[];
2054
- schemaVersion: "treeseed.package-runtime/v1";
2055
2269
  compose: {
2056
2270
  files: {
2057
2271
  path: string;
@@ -2092,7 +2306,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
2092
2306
  port: number;
2093
2307
  visibility: "host" | "private";
2094
2308
  authentication: "none" | "application" | "mtls";
2095
- tls: "none" | "passthrough" | "edge";
2309
+ tls: "passthrough" | "none" | "edge";
2096
2310
  aliasOverride: boolean;
2097
2311
  healthGate?: {
2098
2312
  timeoutSeconds: number;
@@ -2151,7 +2365,7 @@ export declare const packageRuntimeSchema: z.ZodEffects<z.ZodObject<{
2151
2365
  port: number;
2152
2366
  visibility: "host" | "private";
2153
2367
  authentication: "none" | "application" | "mtls";
2154
- tls: "none" | "passthrough" | "edge";
2368
+ tls: "passthrough" | "none" | "edge";
2155
2369
  healthGate?: {
2156
2370
  timeoutSeconds: number;
2157
2371
  protocol: "http" | "tcp" | "https";
@@ -2504,7 +2718,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2504
2718
  port: number;
2505
2719
  visibility: "host" | "private";
2506
2720
  authentication: "none" | "application" | "mtls";
2507
- tls: "none" | "passthrough" | "edge";
2721
+ tls: "passthrough" | "none" | "edge";
2508
2722
  aliasOverride: boolean;
2509
2723
  healthGate?: {
2510
2724
  timeoutSeconds: number;
@@ -2518,7 +2732,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2518
2732
  port: number;
2519
2733
  visibility: "host" | "private";
2520
2734
  authentication: "none" | "application" | "mtls";
2521
- tls: "none" | "passthrough" | "edge";
2735
+ tls: "passthrough" | "none" | "edge";
2522
2736
  healthGate?: {
2523
2737
  timeoutSeconds: number;
2524
2738
  protocol: "http" | "tcp" | "https";
@@ -2532,7 +2746,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2532
2746
  port: number;
2533
2747
  visibility: "host" | "private";
2534
2748
  authentication: "none" | "application" | "mtls";
2535
- tls: "none" | "passthrough" | "edge";
2749
+ tls: "passthrough" | "none" | "edge";
2536
2750
  aliasOverride: boolean;
2537
2751
  healthGate?: {
2538
2752
  timeoutSeconds: number;
@@ -2546,7 +2760,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2546
2760
  port: number;
2547
2761
  visibility: "host" | "private";
2548
2762
  authentication: "none" | "application" | "mtls";
2549
- tls: "none" | "passthrough" | "edge";
2763
+ tls: "passthrough" | "none" | "edge";
2550
2764
  healthGate?: {
2551
2765
  timeoutSeconds: number;
2552
2766
  protocol: "http" | "tcp" | "https";
@@ -2563,7 +2777,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2563
2777
  port: number;
2564
2778
  visibility: "host" | "private";
2565
2779
  authentication: "none" | "application" | "mtls";
2566
- tls: "none" | "passthrough" | "edge";
2780
+ tls: "passthrough" | "none" | "edge";
2567
2781
  aliasOverride: boolean;
2568
2782
  healthGate?: {
2569
2783
  timeoutSeconds: number;
@@ -2581,7 +2795,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2581
2795
  port: number;
2582
2796
  visibility: "host" | "private";
2583
2797
  authentication: "none" | "application" | "mtls";
2584
- tls: "none" | "passthrough" | "edge";
2798
+ tls: "passthrough" | "none" | "edge";
2585
2799
  healthGate?: {
2586
2800
  timeoutSeconds: number;
2587
2801
  protocol: "http" | "tcp" | "https";
@@ -2710,13 +2924,13 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2710
2924
  } | undefined;
2711
2925
  }>>;
2712
2926
  }, "strict", z.ZodTypeAny, {
2927
+ schemaVersion: "treeseed.package-runtime/v1";
2713
2928
  dependencies: {
2714
2929
  id: string;
2715
2930
  capability: string;
2716
2931
  locality: "local" | "remote" | "either";
2717
2932
  optional: boolean;
2718
2933
  }[];
2719
- schemaVersion: "treeseed.package-runtime/v1";
2720
2934
  compose: {
2721
2935
  files: {
2722
2936
  path: string;
@@ -2757,7 +2971,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2757
2971
  port: number;
2758
2972
  visibility: "host" | "private";
2759
2973
  authentication: "none" | "application" | "mtls";
2760
- tls: "none" | "passthrough" | "edge";
2974
+ tls: "passthrough" | "none" | "edge";
2761
2975
  aliasOverride: boolean;
2762
2976
  healthGate?: {
2763
2977
  timeoutSeconds: number;
@@ -2816,7 +3030,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2816
3030
  port: number;
2817
3031
  visibility: "host" | "private";
2818
3032
  authentication: "none" | "application" | "mtls";
2819
- tls: "none" | "passthrough" | "edge";
3033
+ tls: "passthrough" | "none" | "edge";
2820
3034
  healthGate?: {
2821
3035
  timeoutSeconds: number;
2822
3036
  protocol: "http" | "tcp" | "https";
@@ -2886,13 +3100,13 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2886
3100
  } | undefined;
2887
3101
  } | undefined;
2888
3102
  }>, {
3103
+ schemaVersion: "treeseed.package-runtime/v1";
2889
3104
  dependencies: {
2890
3105
  id: string;
2891
3106
  capability: string;
2892
3107
  locality: "local" | "remote" | "either";
2893
3108
  optional: boolean;
2894
3109
  }[];
2895
- schemaVersion: "treeseed.package-runtime/v1";
2896
3110
  compose: {
2897
3111
  files: {
2898
3112
  path: string;
@@ -2933,7 +3147,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2933
3147
  port: number;
2934
3148
  visibility: "host" | "private";
2935
3149
  authentication: "none" | "application" | "mtls";
2936
- tls: "none" | "passthrough" | "edge";
3150
+ tls: "passthrough" | "none" | "edge";
2937
3151
  aliasOverride: boolean;
2938
3152
  healthGate?: {
2939
3153
  timeoutSeconds: number;
@@ -2992,7 +3206,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
2992
3206
  port: number;
2993
3207
  visibility: "host" | "private";
2994
3208
  authentication: "none" | "application" | "mtls";
2995
- tls: "none" | "passthrough" | "edge";
3209
+ tls: "passthrough" | "none" | "edge";
2996
3210
  healthGate?: {
2997
3211
  timeoutSeconds: number;
2998
3212
  protocol: "http" | "tcp" | "https";
@@ -3106,13 +3320,13 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
3106
3320
  componentId: string;
3107
3321
  track: "stable" | "development";
3108
3322
  runtime: {
3323
+ schemaVersion: "treeseed.package-runtime/v1";
3109
3324
  dependencies: {
3110
3325
  id: string;
3111
3326
  capability: string;
3112
3327
  locality: "local" | "remote" | "either";
3113
3328
  optional: boolean;
3114
3329
  }[];
3115
- schemaVersion: "treeseed.package-runtime/v1";
3116
3330
  compose: {
3117
3331
  files: {
3118
3332
  path: string;
@@ -3153,7 +3367,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
3153
3367
  port: number;
3154
3368
  visibility: "host" | "private";
3155
3369
  authentication: "none" | "application" | "mtls";
3156
- tls: "none" | "passthrough" | "edge";
3370
+ tls: "passthrough" | "none" | "edge";
3157
3371
  aliasOverride: boolean;
3158
3372
  healthGate?: {
3159
3373
  timeoutSeconds: number;
@@ -3253,7 +3467,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
3253
3467
  port: number;
3254
3468
  visibility: "host" | "private";
3255
3469
  authentication: "none" | "application" | "mtls";
3256
- tls: "none" | "passthrough" | "edge";
3470
+ tls: "passthrough" | "none" | "edge";
3257
3471
  healthGate?: {
3258
3472
  timeoutSeconds: number;
3259
3473
  protocol: "http" | "tcp" | "https";
@@ -3364,13 +3578,13 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
3364
3578
  componentId: string;
3365
3579
  track: "stable" | "development";
3366
3580
  runtime: {
3581
+ schemaVersion: "treeseed.package-runtime/v1";
3367
3582
  dependencies: {
3368
3583
  id: string;
3369
3584
  capability: string;
3370
3585
  locality: "local" | "remote" | "either";
3371
3586
  optional: boolean;
3372
3587
  }[];
3373
- schemaVersion: "treeseed.package-runtime/v1";
3374
3588
  compose: {
3375
3589
  files: {
3376
3590
  path: string;
@@ -3411,7 +3625,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
3411
3625
  port: number;
3412
3626
  visibility: "host" | "private";
3413
3627
  authentication: "none" | "application" | "mtls";
3414
- tls: "none" | "passthrough" | "edge";
3628
+ tls: "passthrough" | "none" | "edge";
3415
3629
  aliasOverride: boolean;
3416
3630
  healthGate?: {
3417
3631
  timeoutSeconds: number;
@@ -3511,7 +3725,7 @@ export declare const componentReleaseSchema: z.ZodEffects<z.ZodObject<{
3511
3725
  port: number;
3512
3726
  visibility: "host" | "private";
3513
3727
  authentication: "none" | "application" | "mtls";
3514
- tls: "none" | "passthrough" | "edge";
3728
+ tls: "passthrough" | "none" | "edge";
3515
3729
  healthGate?: {
3516
3730
  timeoutSeconds: number;
3517
3731
  protocol: "http" | "tcp" | "https";
@@ -3640,27 +3854,27 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3640
3854
  url: z.ZodString;
3641
3855
  sha256: z.ZodString;
3642
3856
  }, "strict", z.ZodTypeAny, {
3643
- url: string;
3644
3857
  sha256: string;
3645
- }, {
3646
3858
  url: string;
3859
+ }, {
3647
3860
  sha256: string;
3861
+ url: string;
3648
3862
  }>;
3649
3863
  }, "strict", z.ZodTypeAny, {
3650
3864
  id: string;
3651
3865
  version: string;
3652
3866
  packageName: string;
3653
3867
  artifact: {
3654
- url: string;
3655
3868
  sha256: string;
3869
+ url: string;
3656
3870
  };
3657
3871
  }, {
3658
3872
  id: string;
3659
3873
  version: string;
3660
3874
  packageName: string;
3661
3875
  artifact: {
3662
- url: string;
3663
3876
  sha256: string;
3877
+ url: string;
3664
3878
  };
3665
3879
  }>, "many">;
3666
3880
  components: z.ZodArray<z.ZodObject<{
@@ -3670,11 +3884,11 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3670
3884
  url: z.ZodString;
3671
3885
  sha256: z.ZodString;
3672
3886
  }, "strict", z.ZodTypeAny, {
3673
- url: string;
3674
3887
  sha256: string;
3675
- }, {
3676
3888
  url: string;
3889
+ }, {
3677
3890
  sha256: string;
3891
+ url: string;
3678
3892
  }>;
3679
3893
  files: z.ZodArray<z.ZodObject<{
3680
3894
  path: z.ZodString;
@@ -3682,23 +3896,23 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3682
3896
  url: z.ZodString;
3683
3897
  sha256: z.ZodString;
3684
3898
  }, "strict", z.ZodTypeAny, {
3685
- url: string;
3686
3899
  sha256: string;
3687
- }, {
3688
3900
  url: string;
3901
+ }, {
3689
3902
  sha256: string;
3903
+ url: string;
3690
3904
  }>;
3691
3905
  }, "strict", z.ZodTypeAny, {
3692
3906
  path: string;
3693
3907
  artifact: {
3694
- url: string;
3695
3908
  sha256: string;
3909
+ url: string;
3696
3910
  };
3697
3911
  }, {
3698
3912
  path: string;
3699
3913
  artifact: {
3700
- url: string;
3701
3914
  sha256: string;
3915
+ url: string;
3702
3916
  };
3703
3917
  }>, "many">;
3704
3918
  }, "strict", z.ZodTypeAny, {
@@ -3706,28 +3920,28 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3706
3920
  files: {
3707
3921
  path: string;
3708
3922
  artifact: {
3709
- url: string;
3710
3923
  sha256: string;
3924
+ url: string;
3711
3925
  };
3712
3926
  }[];
3713
3927
  release: string;
3714
3928
  manifest: {
3715
- url: string;
3716
3929
  sha256: string;
3930
+ url: string;
3717
3931
  };
3718
3932
  }, {
3719
3933
  componentId: string;
3720
3934
  files: {
3721
3935
  path: string;
3722
3936
  artifact: {
3723
- url: string;
3724
3937
  sha256: string;
3938
+ url: string;
3725
3939
  };
3726
3940
  }[];
3727
3941
  release: string;
3728
3942
  manifest: {
3729
- url: string;
3730
3943
  sha256: string;
3944
+ url: string;
3731
3945
  };
3732
3946
  }>, "many">;
3733
3947
  createdAt: z.ZodString;
@@ -3741,22 +3955,22 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3741
3955
  files: {
3742
3956
  path: string;
3743
3957
  artifact: {
3744
- url: string;
3745
3958
  sha256: string;
3959
+ url: string;
3746
3960
  };
3747
3961
  }[];
3748
3962
  release: string;
3749
3963
  manifest: {
3750
- url: string;
3751
3964
  sha256: string;
3965
+ url: string;
3752
3966
  };
3753
3967
  }[];
3754
- release: string;
3755
- compatibilityId: string;
3756
3968
  platform: {
3757
3969
  repository: "treeseed-ai/platform";
3758
3970
  commit: string;
3759
3971
  };
3972
+ release: string;
3973
+ compatibilityId: string;
3760
3974
  deployment: {
3761
3975
  repository: "treeseed-ai/deployment";
3762
3976
  commit: string;
@@ -3767,8 +3981,8 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3767
3981
  version: string;
3768
3982
  packageName: string;
3769
3983
  artifact: {
3770
- url: string;
3771
3984
  sha256: string;
3985
+ url: string;
3772
3986
  };
3773
3987
  }[];
3774
3988
  }, {
@@ -3781,22 +3995,22 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3781
3995
  files: {
3782
3996
  path: string;
3783
3997
  artifact: {
3784
- url: string;
3785
3998
  sha256: string;
3999
+ url: string;
3786
4000
  };
3787
4001
  }[];
3788
4002
  release: string;
3789
4003
  manifest: {
3790
- url: string;
3791
4004
  sha256: string;
4005
+ url: string;
3792
4006
  };
3793
4007
  }[];
3794
- release: string;
3795
- compatibilityId: string;
3796
4008
  platform: {
3797
4009
  repository: "treeseed-ai/platform";
3798
4010
  commit: string;
3799
4011
  };
4012
+ release: string;
4013
+ compatibilityId: string;
3800
4014
  deployment: {
3801
4015
  repository: "treeseed-ai/deployment";
3802
4016
  commit: string;
@@ -3807,8 +4021,8 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3807
4021
  version: string;
3808
4022
  packageName: string;
3809
4023
  artifact: {
3810
- url: string;
3811
4024
  sha256: string;
4025
+ url: string;
3812
4026
  };
3813
4027
  }[];
3814
4028
  }>, {
@@ -3821,22 +4035,22 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3821
4035
  files: {
3822
4036
  path: string;
3823
4037
  artifact: {
3824
- url: string;
3825
4038
  sha256: string;
4039
+ url: string;
3826
4040
  };
3827
4041
  }[];
3828
4042
  release: string;
3829
4043
  manifest: {
3830
- url: string;
3831
4044
  sha256: string;
4045
+ url: string;
3832
4046
  };
3833
4047
  }[];
3834
- release: string;
3835
- compatibilityId: string;
3836
4048
  platform: {
3837
4049
  repository: "treeseed-ai/platform";
3838
4050
  commit: string;
3839
4051
  };
4052
+ release: string;
4053
+ compatibilityId: string;
3840
4054
  deployment: {
3841
4055
  repository: "treeseed-ai/deployment";
3842
4056
  commit: string;
@@ -3847,8 +4061,8 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3847
4061
  version: string;
3848
4062
  packageName: string;
3849
4063
  artifact: {
3850
- url: string;
3851
4064
  sha256: string;
4065
+ url: string;
3852
4066
  };
3853
4067
  }[];
3854
4068
  }, {
@@ -3861,22 +4075,22 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3861
4075
  files: {
3862
4076
  path: string;
3863
4077
  artifact: {
3864
- url: string;
3865
4078
  sha256: string;
4079
+ url: string;
3866
4080
  };
3867
4081
  }[];
3868
4082
  release: string;
3869
4083
  manifest: {
3870
- url: string;
3871
4084
  sha256: string;
4085
+ url: string;
3872
4086
  };
3873
4087
  }[];
3874
- release: string;
3875
- compatibilityId: string;
3876
4088
  platform: {
3877
4089
  repository: "treeseed-ai/platform";
3878
4090
  commit: string;
3879
4091
  };
4092
+ release: string;
4093
+ compatibilityId: string;
3880
4094
  deployment: {
3881
4095
  repository: "treeseed-ai/deployment";
3882
4096
  commit: string;
@@ -3887,8 +4101,8 @@ export declare const integrationReleaseSchema: z.ZodEffects<z.ZodObject<{
3887
4101
  version: string;
3888
4102
  packageName: string;
3889
4103
  artifact: {
3890
- url: string;
3891
4104
  sha256: string;
4105
+ url: string;
3892
4106
  };
3893
4107
  }[];
3894
4108
  }>;
@@ -4192,7 +4406,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4192
4406
  port: number;
4193
4407
  visibility: "host" | "private";
4194
4408
  authentication: "none" | "application" | "mtls";
4195
- tls: "none" | "passthrough" | "edge";
4409
+ tls: "passthrough" | "none" | "edge";
4196
4410
  aliasOverride: boolean;
4197
4411
  healthGate?: {
4198
4412
  timeoutSeconds: number;
@@ -4206,7 +4420,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4206
4420
  port: number;
4207
4421
  visibility: "host" | "private";
4208
4422
  authentication: "none" | "application" | "mtls";
4209
- tls: "none" | "passthrough" | "edge";
4423
+ tls: "passthrough" | "none" | "edge";
4210
4424
  healthGate?: {
4211
4425
  timeoutSeconds: number;
4212
4426
  protocol: "http" | "tcp" | "https";
@@ -4220,7 +4434,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4220
4434
  port: number;
4221
4435
  visibility: "host" | "private";
4222
4436
  authentication: "none" | "application" | "mtls";
4223
- tls: "none" | "passthrough" | "edge";
4437
+ tls: "passthrough" | "none" | "edge";
4224
4438
  aliasOverride: boolean;
4225
4439
  healthGate?: {
4226
4440
  timeoutSeconds: number;
@@ -4234,7 +4448,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4234
4448
  port: number;
4235
4449
  visibility: "host" | "private";
4236
4450
  authentication: "none" | "application" | "mtls";
4237
- tls: "none" | "passthrough" | "edge";
4451
+ tls: "passthrough" | "none" | "edge";
4238
4452
  healthGate?: {
4239
4453
  timeoutSeconds: number;
4240
4454
  protocol: "http" | "tcp" | "https";
@@ -4251,7 +4465,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4251
4465
  port: number;
4252
4466
  visibility: "host" | "private";
4253
4467
  authentication: "none" | "application" | "mtls";
4254
- tls: "none" | "passthrough" | "edge";
4468
+ tls: "passthrough" | "none" | "edge";
4255
4469
  aliasOverride: boolean;
4256
4470
  healthGate?: {
4257
4471
  timeoutSeconds: number;
@@ -4269,7 +4483,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4269
4483
  port: number;
4270
4484
  visibility: "host" | "private";
4271
4485
  authentication: "none" | "application" | "mtls";
4272
- tls: "none" | "passthrough" | "edge";
4486
+ tls: "passthrough" | "none" | "edge";
4273
4487
  healthGate?: {
4274
4488
  timeoutSeconds: number;
4275
4489
  protocol: "http" | "tcp" | "https";
@@ -4398,13 +4612,13 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4398
4612
  } | undefined;
4399
4613
  }>>;
4400
4614
  }, "strict", z.ZodTypeAny, {
4615
+ schemaVersion: "treeseed.package-runtime/v1";
4401
4616
  dependencies: {
4402
4617
  id: string;
4403
4618
  capability: string;
4404
4619
  locality: "local" | "remote" | "either";
4405
4620
  optional: boolean;
4406
4621
  }[];
4407
- schemaVersion: "treeseed.package-runtime/v1";
4408
4622
  compose: {
4409
4623
  files: {
4410
4624
  path: string;
@@ -4445,7 +4659,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4445
4659
  port: number;
4446
4660
  visibility: "host" | "private";
4447
4661
  authentication: "none" | "application" | "mtls";
4448
- tls: "none" | "passthrough" | "edge";
4662
+ tls: "passthrough" | "none" | "edge";
4449
4663
  aliasOverride: boolean;
4450
4664
  healthGate?: {
4451
4665
  timeoutSeconds: number;
@@ -4504,7 +4718,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4504
4718
  port: number;
4505
4719
  visibility: "host" | "private";
4506
4720
  authentication: "none" | "application" | "mtls";
4507
- tls: "none" | "passthrough" | "edge";
4721
+ tls: "passthrough" | "none" | "edge";
4508
4722
  healthGate?: {
4509
4723
  timeoutSeconds: number;
4510
4724
  protocol: "http" | "tcp" | "https";
@@ -4574,13 +4788,13 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4574
4788
  } | undefined;
4575
4789
  } | undefined;
4576
4790
  }>, {
4791
+ schemaVersion: "treeseed.package-runtime/v1";
4577
4792
  dependencies: {
4578
4793
  id: string;
4579
4794
  capability: string;
4580
4795
  locality: "local" | "remote" | "either";
4581
4796
  optional: boolean;
4582
4797
  }[];
4583
- schemaVersion: "treeseed.package-runtime/v1";
4584
4798
  compose: {
4585
4799
  files: {
4586
4800
  path: string;
@@ -4621,7 +4835,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4621
4835
  port: number;
4622
4836
  visibility: "host" | "private";
4623
4837
  authentication: "none" | "application" | "mtls";
4624
- tls: "none" | "passthrough" | "edge";
4838
+ tls: "passthrough" | "none" | "edge";
4625
4839
  aliasOverride: boolean;
4626
4840
  healthGate?: {
4627
4841
  timeoutSeconds: number;
@@ -4680,7 +4894,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4680
4894
  port: number;
4681
4895
  visibility: "host" | "private";
4682
4896
  authentication: "none" | "application" | "mtls";
4683
- tls: "none" | "passthrough" | "edge";
4897
+ tls: "passthrough" | "none" | "edge";
4684
4898
  healthGate?: {
4685
4899
  timeoutSeconds: number;
4686
4900
  protocol: "http" | "tcp" | "https";
@@ -4794,13 +5008,13 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4794
5008
  componentId: string;
4795
5009
  track: "stable" | "development";
4796
5010
  runtime: {
5011
+ schemaVersion: "treeseed.package-runtime/v1";
4797
5012
  dependencies: {
4798
5013
  id: string;
4799
5014
  capability: string;
4800
5015
  locality: "local" | "remote" | "either";
4801
5016
  optional: boolean;
4802
5017
  }[];
4803
- schemaVersion: "treeseed.package-runtime/v1";
4804
5018
  compose: {
4805
5019
  files: {
4806
5020
  path: string;
@@ -4841,7 +5055,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4841
5055
  port: number;
4842
5056
  visibility: "host" | "private";
4843
5057
  authentication: "none" | "application" | "mtls";
4844
- tls: "none" | "passthrough" | "edge";
5058
+ tls: "passthrough" | "none" | "edge";
4845
5059
  aliasOverride: boolean;
4846
5060
  healthGate?: {
4847
5061
  timeoutSeconds: number;
@@ -4941,7 +5155,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
4941
5155
  port: number;
4942
5156
  visibility: "host" | "private";
4943
5157
  authentication: "none" | "application" | "mtls";
4944
- tls: "none" | "passthrough" | "edge";
5158
+ tls: "passthrough" | "none" | "edge";
4945
5159
  healthGate?: {
4946
5160
  timeoutSeconds: number;
4947
5161
  protocol: "http" | "tcp" | "https";
@@ -5052,13 +5266,13 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
5052
5266
  componentId: string;
5053
5267
  track: "stable" | "development";
5054
5268
  runtime: {
5269
+ schemaVersion: "treeseed.package-runtime/v1";
5055
5270
  dependencies: {
5056
5271
  id: string;
5057
5272
  capability: string;
5058
5273
  locality: "local" | "remote" | "either";
5059
5274
  optional: boolean;
5060
5275
  }[];
5061
- schemaVersion: "treeseed.package-runtime/v1";
5062
5276
  compose: {
5063
5277
  files: {
5064
5278
  path: string;
@@ -5099,7 +5313,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
5099
5313
  port: number;
5100
5314
  visibility: "host" | "private";
5101
5315
  authentication: "none" | "application" | "mtls";
5102
- tls: "none" | "passthrough" | "edge";
5316
+ tls: "passthrough" | "none" | "edge";
5103
5317
  aliasOverride: boolean;
5104
5318
  healthGate?: {
5105
5319
  timeoutSeconds: number;
@@ -5199,7 +5413,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
5199
5413
  port: number;
5200
5414
  visibility: "host" | "private";
5201
5415
  authentication: "none" | "application" | "mtls";
5202
- tls: "none" | "passthrough" | "edge";
5416
+ tls: "passthrough" | "none" | "edge";
5203
5417
  healthGate?: {
5204
5418
  timeoutSeconds: number;
5205
5419
  protocol: "http" | "tcp" | "https";
@@ -5317,13 +5531,13 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
5317
5531
  componentId: string;
5318
5532
  track: "stable" | "development";
5319
5533
  runtime: {
5534
+ schemaVersion: "treeseed.package-runtime/v1";
5320
5535
  dependencies: {
5321
5536
  id: string;
5322
5537
  capability: string;
5323
5538
  locality: "local" | "remote" | "either";
5324
5539
  optional: boolean;
5325
5540
  }[];
5326
- schemaVersion: "treeseed.package-runtime/v1";
5327
5541
  compose: {
5328
5542
  files: {
5329
5543
  path: string;
@@ -5364,7 +5578,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
5364
5578
  port: number;
5365
5579
  visibility: "host" | "private";
5366
5580
  authentication: "none" | "application" | "mtls";
5367
- tls: "none" | "passthrough" | "edge";
5581
+ tls: "passthrough" | "none" | "edge";
5368
5582
  aliasOverride: boolean;
5369
5583
  healthGate?: {
5370
5584
  timeoutSeconds: number;
@@ -5477,7 +5691,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
5477
5691
  port: number;
5478
5692
  visibility: "host" | "private";
5479
5693
  authentication: "none" | "application" | "mtls";
5480
- tls: "none" | "passthrough" | "edge";
5694
+ tls: "passthrough" | "none" | "edge";
5481
5695
  healthGate?: {
5482
5696
  timeoutSeconds: number;
5483
5697
  protocol: "http" | "tcp" | "https";
@@ -5601,13 +5815,13 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
5601
5815
  componentId: string;
5602
5816
  track: "stable" | "development";
5603
5817
  runtime: {
5818
+ schemaVersion: "treeseed.package-runtime/v1";
5604
5819
  dependencies: {
5605
5820
  id: string;
5606
5821
  capability: string;
5607
5822
  locality: "local" | "remote" | "either";
5608
5823
  optional: boolean;
5609
5824
  }[];
5610
- schemaVersion: "treeseed.package-runtime/v1";
5611
5825
  compose: {
5612
5826
  files: {
5613
5827
  path: string;
@@ -5648,7 +5862,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
5648
5862
  port: number;
5649
5863
  visibility: "host" | "private";
5650
5864
  authentication: "none" | "application" | "mtls";
5651
- tls: "none" | "passthrough" | "edge";
5865
+ tls: "passthrough" | "none" | "edge";
5652
5866
  aliasOverride: boolean;
5653
5867
  healthGate?: {
5654
5868
  timeoutSeconds: number;
@@ -5761,7 +5975,7 @@ export declare const releaseCatalogSchema: z.ZodEffects<z.ZodObject<{
5761
5975
  port: number;
5762
5976
  visibility: "host" | "private";
5763
5977
  authentication: "none" | "application" | "mtls";
5764
- tls: "none" | "passthrough" | "edge";
5978
+ tls: "passthrough" | "none" | "edge";
5765
5979
  healthGate?: {
5766
5980
  timeoutSeconds: number;
5767
5981
  protocol: "http" | "tcp" | "https";
@@ -6249,28 +6463,28 @@ export declare const hostBackupSchema: z.ZodObject<{
6249
6463
  createdAt: z.ZodString;
6250
6464
  verifiedAt: z.ZodNullable<z.ZodString>;
6251
6465
  }, "strict", z.ZodTypeAny, {
6466
+ schemaVersion: "treeseed.host-backup/v1";
6467
+ createdAt: string;
6252
6468
  artifacts: {
6253
6469
  digest: string;
6254
6470
  volumeId: string;
6255
6471
  location: string;
6256
6472
  encrypted: boolean;
6257
6473
  }[];
6258
- schemaVersion: "treeseed.host-backup/v1";
6259
- createdAt: string;
6260
6474
  generation: number;
6261
6475
  state: "pending" | "failed" | "complete" | "verified";
6262
6476
  componentId: string;
6263
6477
  backupId: string;
6264
6478
  verifiedAt: string | null;
6265
6479
  }, {
6480
+ schemaVersion: "treeseed.host-backup/v1";
6481
+ createdAt: string;
6266
6482
  artifacts: {
6267
6483
  digest: string;
6268
6484
  volumeId: string;
6269
6485
  location: string;
6270
6486
  encrypted: boolean;
6271
6487
  }[];
6272
- schemaVersion: "treeseed.host-backup/v1";
6273
- createdAt: string;
6274
6488
  generation: number;
6275
6489
  state: "pending" | "failed" | "complete" | "verified";
6276
6490
  componentId: string;
@@ -6289,8 +6503,8 @@ export declare const hostMigrationSchema: z.ZodObject<{
6289
6503
  sourceWritersStopped: z.ZodBoolean;
6290
6504
  completedAt: z.ZodNullable<z.ZodString>;
6291
6505
  }, "strict", z.ZodTypeAny, {
6292
- operation: string;
6293
6506
  schemaVersion: "treeseed.host-migration/v1";
6507
+ operation: string;
6294
6508
  state: "pending" | "failed" | "rolled-back" | "verified" | "quiesced" | "copied" | "activated";
6295
6509
  completedAt: string | null;
6296
6510
  componentId: string;
@@ -6300,8 +6514,8 @@ export declare const hostMigrationSchema: z.ZodObject<{
6300
6514
  toGeneration: number;
6301
6515
  sourceWritersStopped: boolean;
6302
6516
  }, {
6303
- operation: string;
6304
6517
  schemaVersion: "treeseed.host-migration/v1";
6518
+ operation: string;
6305
6519
  state: "pending" | "failed" | "rolled-back" | "verified" | "quiesced" | "copied" | "activated";
6306
6520
  completedAt: string | null;
6307
6521
  componentId: string;
@@ -6361,3 +6575,107 @@ export type HostReceipt = z.infer<typeof hostReceiptSchema>;
6361
6575
  export type HostBackup = z.infer<typeof hostBackupSchema>;
6362
6576
  export type HostMigration = z.infer<typeof hostMigrationSchema>;
6363
6577
  export type HostRecovery = z.infer<typeof hostRecoverySchema>;
6578
+ export declare const hostSecurityReceiptSchema: z.ZodObject<{
6579
+ schemaVersion: z.ZodLiteral<"treeseed.host-security-receipt/v1">;
6580
+ receiptId: z.ZodString;
6581
+ hostId: z.ZodString;
6582
+ sandbox: z.ZodObject<{
6583
+ runtime: z.ZodLiteral<"kata-runtime-rs-qemu">;
6584
+ kvmReady: z.ZodBoolean;
6585
+ brokerReady: z.ZodBoolean;
6586
+ guestImageDigests: z.ZodArray<z.ZodString, "many">;
6587
+ }, "strict", z.ZodTypeAny, {
6588
+ runtime: "kata-runtime-rs-qemu";
6589
+ kvmReady: boolean;
6590
+ brokerReady: boolean;
6591
+ guestImageDigests: string[];
6592
+ }, {
6593
+ runtime: "kata-runtime-rs-qemu";
6594
+ kvmReady: boolean;
6595
+ brokerReady: boolean;
6596
+ guestImageDigests: string[];
6597
+ }>;
6598
+ providerVolume: z.ZodObject<{
6599
+ encrypted: z.ZodBoolean;
6600
+ format: z.ZodLiteral<"luks2">;
6601
+ mountPath: z.ZodString;
6602
+ unlock: z.ZodEnum<["tpm2", "systemd-credential"]>;
6603
+ }, "strict", z.ZodTypeAny, {
6604
+ mountPath: string;
6605
+ unlock: "systemd-credential" | "tpm2";
6606
+ encrypted: boolean;
6607
+ format: "luks2";
6608
+ }, {
6609
+ mountPath: string;
6610
+ unlock: "systemd-credential" | "tpm2";
6611
+ encrypted: boolean;
6612
+ format: "luks2";
6613
+ }>;
6614
+ keys: z.ZodObject<{
6615
+ provider: z.ZodLiteral<"systemd-credential">;
6616
+ activeCredentialVersion: z.ZodNumber;
6617
+ activeDiagnosticsVersion: z.ZodNumber;
6618
+ recoveryBundleVerified: z.ZodBoolean;
6619
+ }, "strict", z.ZodTypeAny, {
6620
+ provider: "systemd-credential";
6621
+ activeCredentialVersion: number;
6622
+ activeDiagnosticsVersion: number;
6623
+ recoveryBundleVerified: boolean;
6624
+ }, {
6625
+ provider: "systemd-credential";
6626
+ activeCredentialVersion: number;
6627
+ activeDiagnosticsVersion: number;
6628
+ recoveryBundleVerified: boolean;
6629
+ }>;
6630
+ state: z.ZodEnum<["planned", "migrating", "known-good", "blocked"]>;
6631
+ completedAt: z.ZodString;
6632
+ }, "strict", z.ZodTypeAny, {
6633
+ schemaVersion: "treeseed.host-security-receipt/v1";
6634
+ keys: {
6635
+ provider: "systemd-credential";
6636
+ activeCredentialVersion: number;
6637
+ activeDiagnosticsVersion: number;
6638
+ recoveryBundleVerified: boolean;
6639
+ };
6640
+ hostId: string;
6641
+ state: "planned" | "known-good" | "migrating" | "blocked";
6642
+ completedAt: string;
6643
+ sandbox: {
6644
+ runtime: "kata-runtime-rs-qemu";
6645
+ kvmReady: boolean;
6646
+ brokerReady: boolean;
6647
+ guestImageDigests: string[];
6648
+ };
6649
+ providerVolume: {
6650
+ mountPath: string;
6651
+ unlock: "systemd-credential" | "tpm2";
6652
+ encrypted: boolean;
6653
+ format: "luks2";
6654
+ };
6655
+ receiptId: string;
6656
+ }, {
6657
+ schemaVersion: "treeseed.host-security-receipt/v1";
6658
+ keys: {
6659
+ provider: "systemd-credential";
6660
+ activeCredentialVersion: number;
6661
+ activeDiagnosticsVersion: number;
6662
+ recoveryBundleVerified: boolean;
6663
+ };
6664
+ hostId: string;
6665
+ state: "planned" | "known-good" | "migrating" | "blocked";
6666
+ completedAt: string;
6667
+ sandbox: {
6668
+ runtime: "kata-runtime-rs-qemu";
6669
+ kvmReady: boolean;
6670
+ brokerReady: boolean;
6671
+ guestImageDigests: string[];
6672
+ };
6673
+ providerVolume: {
6674
+ mountPath: string;
6675
+ unlock: "systemd-credential" | "tpm2";
6676
+ encrypted: boolean;
6677
+ format: "luks2";
6678
+ };
6679
+ receiptId: string;
6680
+ }>;
6681
+ export type HostSecurityReceipt = z.infer<typeof hostSecurityReceiptSchema>;