import type { FunctionBinding } from '@astrale-os/kernel-api/routed';
import type { FunctionSchema } from '@astrale-os/kernel-core/domain';
import { z } from 'zod';
import type { RemoteIdentityConfig } from '../auth/identity.js';
export declare const SERVICE_FUNCTIONS_PATH = "/_astrale/functions";
export declare const SERVICE_FUNCTIONS_PURPOSE = "astrale.service-functions.v1";
export declare const ServiceFunctionManifestEntrySchema: z.ZodObject<{
    slug: z.ZodString;
    ref: z.ZodString;
    inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
    outputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
    output: z.ZodDefault<z.ZodEnum<{
        binary: "binary";
        stream: "stream";
        value: "value";
    }>>;
    binding: z.ZodObject<{
        remoteUrl: z.ZodOptional<z.ZodString>;
        route: z.ZodOptional<z.ZodObject<{
            method: z.ZodEnum<{
                "*": "*";
                DELETE: "DELETE";
                GET: "GET";
                PATCH: "PATCH";
                POST: "POST";
                PUT: "PUT";
            }>;
            path: z.ZodString;
            self: z.ZodOptional<z.ZodString>;
            query: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
            body: z.ZodOptional<z.ZodUnknown>;
            credential: z.ZodOptional<z.ZodUnknown>;
        }, z.core.$strip>>;
        auth: z.ZodOptional<z.ZodEnum<{
            optional: "optional";
            public: "public";
            required: "required";
        }>>;
    }, z.core.$strip>;
}, z.core.$strip>;
export declare const ServiceFunctionManifestSchema: z.ZodObject<{
    version: z.ZodLiteral<1>;
    service: z.ZodObject<{
        issuer: z.ZodString;
        subject: z.ZodString;
    }, z.core.$strip>;
    functions: z.ZodArray<z.ZodObject<{
        slug: z.ZodString;
        ref: z.ZodString;
        inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
        outputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
        output: z.ZodDefault<z.ZodEnum<{
            binary: "binary";
            stream: "stream";
            value: "value";
        }>>;
        binding: z.ZodObject<{
            remoteUrl: z.ZodOptional<z.ZodString>;
            route: z.ZodOptional<z.ZodObject<{
                method: z.ZodEnum<{
                    "*": "*";
                    DELETE: "DELETE";
                    GET: "GET";
                    PATCH: "PATCH";
                    POST: "POST";
                    PUT: "PUT";
                }>;
                path: z.ZodString;
                self: z.ZodOptional<z.ZodString>;
                query: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
                body: z.ZodOptional<z.ZodUnknown>;
                credential: z.ZodOptional<z.ZodUnknown>;
            }, z.core.$strip>>;
            auth: z.ZodOptional<z.ZodEnum<{
                optional: "optional";
                public: "public";
                required: "required";
            }>>;
        }, z.core.$strip>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export declare const ServiceFunctionDiscoveryRequestSchema: z.ZodObject<{
    kernelIssuer: z.ZodString;
    nonce: z.ZodString;
}, z.core.$strip>;
export declare const ServiceFunctionDiscoveryResponseSchema: z.ZodObject<{
    version: z.ZodLiteral<1>;
    service: z.ZodObject<{
        issuer: z.ZodString;
        subject: z.ZodString;
    }, z.core.$strip>;
    functions: z.ZodArray<z.ZodObject<{
        slug: z.ZodString;
        ref: z.ZodString;
        inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
        outputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
        output: z.ZodDefault<z.ZodEnum<{
            binary: "binary";
            stream: "stream";
            value: "value";
        }>>;
        binding: z.ZodObject<{
            remoteUrl: z.ZodOptional<z.ZodString>;
            route: z.ZodOptional<z.ZodObject<{
                method: z.ZodEnum<{
                    "*": "*";
                    DELETE: "DELETE";
                    GET: "GET";
                    PATCH: "PATCH";
                    POST: "POST";
                    PUT: "PUT";
                }>;
                path: z.ZodString;
                self: z.ZodOptional<z.ZodString>;
                query: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
                body: z.ZodOptional<z.ZodUnknown>;
                credential: z.ZodOptional<z.ZodUnknown>;
            }, z.core.$strip>>;
            auth: z.ZodOptional<z.ZodEnum<{
                optional: "optional";
                public: "public";
                required: "required";
            }>>;
        }, z.core.$strip>;
    }, z.core.$strip>>;
    identity: z.ZodObject<{
        credential: z.ZodString;
    }, z.core.$strip>;
}, z.core.$strip>;
export type ServiceFunctionManifestEntry = z.infer<typeof ServiceFunctionManifestEntrySchema>;
export type ServiceFunctionManifest = z.infer<typeof ServiceFunctionManifestSchema>;
export type ServiceFunctionDiscoveryRequest = z.infer<typeof ServiceFunctionDiscoveryRequestSchema>;
export type ServiceFunctionDiscoveryResponse = z.infer<typeof ServiceFunctionDiscoveryResponseSchema>;
export declare function toServiceFunctionManifestEntries(schemas: readonly FunctionSchema[]): ServiceFunctionManifestEntry[];
export declare function signServiceFunctionManifest(manifest: ServiceFunctionManifest, request: ServiceFunctionDiscoveryRequest, identity: RemoteIdentityConfig): Promise<ServiceFunctionDiscoveryResponse>;
export declare function verifyServiceFunctionManifest(input: unknown, expected: {
    kernelIssuer: string;
    nonce: string;
    serviceIssuer: string;
    serviceSubject: string;
    publicKey: JsonWebKey;
}): Promise<ServiceFunctionDiscoveryResponse>;
export declare function hashServiceFunctionManifest(manifest: ServiceFunctionManifest): Promise<string>;
export declare function functionBindingForManifest(binding: FunctionBinding, auth: 'required' | 'optional' | 'public' | undefined): FunctionBinding;
//# sourceMappingURL=functions.d.ts.map