/**
 * The four delivery phases of the blueprint's "Project Delivery and Scaled
 * Rollout Roadmap". `bootstrap` composes the WORKSTATION-scoped capabilities
 * (certs / hardware / vdi / telemetry) under these phase headers; the cloud-only
 * milestones (Phase 3 SSO MCP gateway, Phase 4 MDM distribution) are emitted as
 * guidance, never executed — that keeps the harness on the local side of the
 * boundary.
 *
 * `objective` is quoted verbatim from the blueprint so the generated header is a
 * faithful restatement of the milestone, not a paraphrase.
 */
export interface PhaseMeta {
    /** "1".."4" — matches `--phase`. */
    id: string;
    /** Blueprint phase title. */
    title: string;
    /** Blueprint milestone objective (verbatim). */
    objective: string;
    /** Workstation capabilities composed under this phase, in order. */
    capabilities: readonly ("certs" | "hardware" | "vdi" | "telemetry")[];
}
export declare const PHASES: readonly PhaseMeta[];
/** Render a phase banner: title + objective, used as the per-phase `doc` header. */
export declare function phaseHeader(meta: PhaseMeta): string;
/**
 * Phase 3 is a CLOUD milestone: Entra ID / Okta application registration and the
 * agentgateway control plane live off-workstation, so the whole phase is doc-only
 * guidance (exact commands, never run). The workstation-local half of Phase 3
 * (thin adapters, CRISPY, MCP servers) is laid down by `aih init`, not here.
 */
export declare function ssoGatewayDoc(): string;
/**
 * Phase 4's distribution half is also off-workstation: global steering configs go
 * out through an MDM solution (Intune / Jamf / Workspace ONE) to every endpoint.
 * Doc-only — the SCA copyleft gate is likewise a CI concern, documented not run.
 */
export declare function mdmDistributionDoc(): string;