import { z } from "zod";
import type { PlanContext } from "../internals/plan.js";
/** Fixed, regular-file-only external authority input. It is never generated from policy JSON. */
export declare const POLICY_AUTHORITY_RECEIPT_PATH = ".aih/policy-authority-receipt.json";
/** Strict external authority receipt contract; policy JSON cannot supply these facts. */
export declare const PolicyAuthorityReceiptSchema: z.ZodObject<{
    format: z.ZodLiteral<"aih-policy-authority-receipt">;
    version: z.ZodLiteral<1>;
    issuerRepository: z.ZodString;
    issuedAt: z.ZodString;
    expiresAt: z.ZodString;
    trustedIssuers: z.ZodDefault<z.ZodArray<z.ZodObject<{
        id: z.ZodString;
        githubRepository: z.ZodString;
    }, z.core.$strict>>>;
    evidence: z.ZodDefault<z.ZodArray<z.ZodObject<{
        id: z.ZodString;
        candidate: z.ZodString;
        kind: z.ZodEnum<{
            framework: "framework";
            hook: "hook";
            mcp: "mcp";
        }>;
        source: z.ZodUnion<readonly [z.ZodObject<{
            type: z.ZodLiteral<"git">;
            repository: z.ZodString;
            commit: z.ZodString;
            tree: z.ZodString;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"package">;
            registry: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
            package: z.ZodString;
            version: z.ZodString;
            integrity: z.ZodString;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"command">;
            command: z.ZodString;
            args: z.ZodDefault<z.ZodArray<z.ZodString>>;
            executableDigest: z.ZodString;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"stdio">;
            resolver: z.ZodEnum<{
                npx: "npx";
                uvx: "uvx";
            }>;
            registry: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
            package: z.ZodString;
            version: z.ZodString;
            integrity: z.ZodString;
        }, z.core.$strict>, z.ZodUnion<readonly [z.ZodObject<{
            type: z.ZodLiteral<"remote">;
            origin: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
            approval: z.ZodObject<{
                approvedBy: z.ZodString;
                authenticationMode: z.ZodString;
                allowedDataClasses: z.ZodArray<z.ZodString>;
            }, z.core.$strict>;
            contentScanned: z.ZodLiteral<false>;
            administrativeStatus: z.ZodEnum<{
                approved: "approved";
                revoked: "revoked";
            }>;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"remote">;
            origin: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
            approval: z.ZodObject<{
                approvedBy: z.ZodString;
                authenticationMode: z.ZodString;
                allowedDataClasses: z.ZodArray<z.ZodString>;
            }, z.core.$strict>;
            contentScanned: z.ZodLiteral<false>;
            toolSurfaceDigest: z.ZodString;
            verdict: z.ZodEnum<{
                approved: "approved";
                drifted: "drifted";
                revoked: "revoked";
            }>;
        }, z.core.$strict>]>, z.ZodObject<{
            type: z.ZodLiteral<"mcp">;
            server: z.ZodString;
            subject: z.ZodString;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"hook">;
            handler: z.ZodLiteral<"usage-metering">;
            scriptDigest: z.ZodString;
        }, z.core.$strict>]>;
        sourceDigest: z.ZodString;
        evidenceDigest: z.ZodString;
        identityDigest: z.ZodString;
        state: z.ZodEnum<{
            failed: "failed";
            missing: "missing";
            verified: "verified";
        }>;
        waivable: z.ZodBoolean;
        detectors: z.ZodDefault<z.ZodArray<z.ZodObject<{
            id: z.ZodString;
            required: z.ZodBoolean;
            status: z.ZodEnum<{
                fail: "fail";
                missing: "missing";
                pass: "pass";
            }>;
            reportDigest: z.ZodOptional<z.ZodString>;
        }, z.core.$strict>>>;
        findings: z.ZodDefault<z.ZodArray<z.ZodEnum<{
            "auto-executing-hook": "auto-executing-hook";
            "dependency-confusion": "dependency-confusion";
            "evidence-identity-drift": "evidence-identity-drift";
            "hidden-unicode": "hidden-unicode";
            "malicious-code": "malicious-code";
            "mandatory-detector-failed": "mandatory-detector-failed";
            "missing-projector": "missing-projector";
            "normalized-collision": "normalized-collision";
            "ownership-conflict": "ownership-conflict";
            "prompt-injection": "prompt-injection";
            secrets: "secrets";
            "unpinned-source": "unpinned-source";
            "unsafe-path": "unsafe-path";
            "unsupported-target": "unsupported-target";
        }>>>;
    }, z.core.$strict>>>;
    approvals: z.ZodDefault<z.ZodArray<z.ZodObject<{
        id: z.ZodString;
        candidate: z.ZodString;
        kind: z.ZodEnum<{
            framework: "framework";
            hook: "hook";
            mcp: "mcp";
        }>;
        source: z.ZodUnion<readonly [z.ZodObject<{
            type: z.ZodLiteral<"git">;
            repository: z.ZodString;
            commit: z.ZodString;
            tree: z.ZodString;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"package">;
            registry: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
            package: z.ZodString;
            version: z.ZodString;
            integrity: z.ZodString;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"command">;
            command: z.ZodString;
            args: z.ZodDefault<z.ZodArray<z.ZodString>>;
            executableDigest: z.ZodString;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"stdio">;
            resolver: z.ZodEnum<{
                npx: "npx";
                uvx: "uvx";
            }>;
            registry: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
            package: z.ZodString;
            version: z.ZodString;
            integrity: z.ZodString;
        }, z.core.$strict>, z.ZodUnion<readonly [z.ZodObject<{
            type: z.ZodLiteral<"remote">;
            origin: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
            approval: z.ZodObject<{
                approvedBy: z.ZodString;
                authenticationMode: z.ZodString;
                allowedDataClasses: z.ZodArray<z.ZodString>;
            }, z.core.$strict>;
            contentScanned: z.ZodLiteral<false>;
            administrativeStatus: z.ZodEnum<{
                approved: "approved";
                revoked: "revoked";
            }>;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"remote">;
            origin: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
            approval: z.ZodObject<{
                approvedBy: z.ZodString;
                authenticationMode: z.ZodString;
                allowedDataClasses: z.ZodArray<z.ZodString>;
            }, z.core.$strict>;
            contentScanned: z.ZodLiteral<false>;
            toolSurfaceDigest: z.ZodString;
            verdict: z.ZodEnum<{
                approved: "approved";
                drifted: "drifted";
                revoked: "revoked";
            }>;
        }, z.core.$strict>]>, z.ZodObject<{
            type: z.ZodLiteral<"mcp">;
            server: z.ZodString;
            subject: z.ZodString;
        }, z.core.$strict>, z.ZodObject<{
            type: z.ZodLiteral<"hook">;
            handler: z.ZodLiteral<"usage-metering">;
            scriptDigest: z.ZodString;
        }, z.core.$strict>]>;
        issuer: z.ZodString;
        sourceDigest: z.ZodString;
        evidenceDigest: z.ZodString;
        projector: z.ZodEnum<{
            "framework-contract": "framework-contract";
            "hook-managed-settings": "hook-managed-settings";
            "mcp-managed-settings": "mcp-managed-settings";
            "usage-hook": "usage-hook";
        }>;
        policyVersion: z.ZodString;
        reason: z.ZodString;
        clarification: z.ZodOptional<z.ZodString>;
        scope: z.ZodArray<z.ZodEnum<{
            claude: "claude";
            codex: "codex";
            kiro: "kiro";
        }>>;
        notBefore: z.ZodString;
        expiresAt: z.ZodString;
        github: z.ZodObject<{
            repository: z.ZodString;
            attestationId: z.ZodString;
            subjectDigest: z.ZodString;
        }, z.core.$strict>;
    }, z.core.$strict>>>;
    revocations: z.ZodDefault<z.ZodArray<z.ZodObject<{
        approval: z.ZodString;
        issuer: z.ZodString;
        revokedAt: z.ZodString;
        reason: z.ZodString;
    }, z.core.$strict>>>;
    targets: z.ZodArray<z.ZodEnum<{
        claude: "claude";
        codex: "codex";
        kiro: "kiro";
    }>>;
}, z.core.$strict>;
export type PolicyAuthorityReceipt = z.infer<typeof PolicyAuthorityReceiptSchema>;
/** Every externally-authored receipt leaf must have an authority consumer too. */
export declare function policyAuthorityReceiptLeafPaths(): string[];
/** Exact map compared to `policyAuthorityReceiptLeafPaths()` by the consumer-contract test. */
export declare const POLICY_AUTHORITY_RECEIPT_FIELD_CONSUMERS: Readonly<Record<string, string>>;
/** Opaque result: only `verifyPolicyAuthorityReceipt` can mint a usable authority object. */
export interface VerifiedPolicyAuthority {
    readonly receipt: PolicyAuthorityReceipt;
    readonly receiptDigest: string;
    readonly repository: string;
}
export declare function isVerifiedPolicyAuthority(value: unknown): value is VerifiedPolicyAuthority;
export interface PolicyAuthorityVerification {
    authority?: VerifiedPolicyAuthority;
    /** Deliberately scrubbed: trust-verifier child output may contain credentials. */
    problem?: string;
}
/**
 * Verify the fixed authority receipt against an organization-admin registry set
 * outside the target checkout (`AIH_POLICY_AUTHORITY_REPOSITORY`, optionally
 * `AIH_POLICY_AUTHORITY_WORKFLOW`). The governed repository's origin and its
 * policy JSON are never trust roots. The receipt remains untrusted data until
 * `gh attestation verify` succeeds against that exact external identity.
 */
export declare function verifyPolicyAuthorityReceipt(ctx: PlanContext): Promise<PolicyAuthorityVerification>;