import type { AuthorityTier, SourceDefinition } from "../../types.js"; /** * Describes source trust verification for one configured source. */ export interface SourceVerificationEntry { sourceId: string; originalAuthorityTier: AuthorityTier; effectiveAuthorityTier: AuthorityTier; verified: boolean; reasons: string[]; evidence: { publisherVerified: boolean; publisherOwner?: string; repoOwner?: string; docsHost?: string; matchedAllowlistOwner?: string; }; } /** * Describes deterministic source trust verification results. */ export interface SourceVerificationReport { schemaVersion: number; generatedAt: string; checkedSourceCount: number; demotedSourceCount: number; entries: SourceVerificationEntry[]; } /** * Writes official source verification report and deterministic trust demotions. */ export declare function writeSourceVerificationReport(projectRoot: string, sources: SourceDefinition[]): Promise; /** * Builds official source verification report and deterministic trust demotions. */ export declare function buildSourceVerificationReport(projectRoot: string, sources: SourceDefinition[]): Promise; /** * Applies deterministic source trust demotions without mutating source definitions. */ export declare function applySourceVerificationDemotions(sources: SourceDefinition[], report: SourceVerificationReport): SourceDefinition[]; /** * Verifies a source authority tier against explicit publisher and owner evidence. */ export declare function verifySourceAuthority(source: SourceDefinition, officialUpstreams: Record): SourceVerificationEntry;