import type { Check } from "../internals/verify.js";
/** Repo-relative trust lockfile path — the promoted-source evidence `trust verify` re-hashes. */
export declare const TRUST_LOCK_FILE = ".aih/trust-lock.json";
export interface TrustLock {
    schemaVersion: 1;
    sources: TrustLockSource[];
}
export interface TrustLockSource {
    id: string;
    kind: "local" | "github";
    source: string;
    ref?: string;
    pinnedSha?: string;
    promotedAt: string;
    promotedSkills: string[];
    analyzersRun: string[];
    artifactHashes: Array<{
        path: string;
        sha256: string;
    }>;
    findings: Array<{
        name: string;
        verdict: string;
        code?: string;
        detail?: string;
        location?: Check["location"];
        fingerprint?: string;
    }>;
}
export declare const MAX_TRUST_LOCK_BYTES: number;
export type ExactTrustLockRead = {
    state: "absent";
} | {
    state: "malformed";
} | {
    state: "valid";
    lock: TrustLock;
    sourceBytes: Buffer;
    sourceSha256: string;
    mode: number;
};
export interface ExactTrustLockReadDeps {
    afterInspect?: () => void;
    afterOpen?: () => void;
}
export declare function readTrustLockExact(root: string, deps?: ExactTrustLockReadDeps): ExactTrustLockRead;
export declare function parseTrustLockSource(value: unknown): TrustLockSource | undefined;
export declare function trustLockValidationFindings(root: string): Check[];
export declare function readTrustLock(root: string): TrustLock;