import { type CommandSpec, type PlanContext } from "../internals/plan.js";
import type { Check } from "../internals/verify.js";
import { type OrgPolicy } from "../org-policy/schema.js";
import { type TrustLockSource } from "./lock.js";
export interface OwnerRepo {
    owner: string;
    repo: string;
}
export type ApprovedSource = NonNullable<NonNullable<OrgPolicy["trust"]>["approvedSources"]>[number];
/**
 * Committed policy body with `source` upserted into `trust.approvedSources` —
 * the same upsert `aih trust allow/pin` writes, reused by `aih skill approve`
 * so an approved GitHub skill source lands in org-policy through one code path.
 */
export declare function policyWithApprovedSource(ctx: PlanContext, source: OwnerRepo, update: Partial<ApprovedSource>): OrgPolicy;
export declare function policyWithApprovedSourceReason(ctx: PlanContext, source: OwnerRepo, reason: string, fingerprints: readonly string[]): OrgPolicy;
export declare function localDriftChecks(ctx: PlanContext, source: TrustLockSource): Check[];
export declare function trustLockLocalDriftChecks(ctx: PlanContext): Check[];
export declare const trustAllowCommand: CommandSpec;
export declare const trustPinCommand: CommandSpec;
export declare const trustListCommand: CommandSpec;
export declare const trustSkillspectorPinCommand: CommandSpec;
export declare const trustVerifyCommand: CommandSpec;