import { type ConversationGrant, type ConversationPending, type ParsedArgs } from "@cotal-ai/core";
/**
 * `cotal app-identity`: machine-facing plumbing for a Claude app conversation. The Claude
 * connector's local server runs it to open one conversation's own identity on the selected mesh,
 * and again to retire it. It prints one JSON line on stdout and nothing else there. The credential is
 * never in that line: it goes to a 0600 file whose path the env names. A new identity opens only
 * after a person approves it at the mesh's authority, so a mesh without one opens none.
 */
export declare const appIdentityFlags: readonly [{
    readonly name: "name";
    readonly type: "string";
    readonly value: "<name>";
    readonly description: "provision: the agent name to open, exactly";
}, {
    readonly name: "space";
    readonly type: "string";
    readonly value: "<space>";
    readonly description: "the mesh to use; defaults as `cotal spawn` does";
}, {
    readonly name: "dir";
    readonly type: "string";
    readonly value: "<dir>";
    readonly description: "retire: the credential directory provision returned";
}, {
    readonly name: "session";
    readonly type: "string";
    readonly value: "<id>";
    readonly description: "provision: the native conversation identity";
}, {
    readonly name: "events";
    readonly type: "boolean";
    readonly description: "provision: a real native transcript source is bound";
}, {
    readonly name: "selection";
    readonly type: "string";
    readonly value: "<json>";
    readonly description: "provision: channels, role and capabilities to request within your own grant";
}, {
    readonly name: "require-approval";
    readonly type: "boolean";
    readonly description: "provision: the caller accepts only an identity a person approved";
}];
/** `pending` names the request a person has not decided yet and the page where they decide it. It
 *  carries no credential, secret or path. Provisioning again replays that same request. */
export type AppIdentityReply = {
    ok: true;
    env: Record<string, string>;
    retire?: {
        dir: string;
    };
    grant?: ConversationGrant;
} | ({
    ok: false;
    pending: true;
} & ConversationPending) | {
    ok: false;
    error: string;
};
export declare function appIdentity(args: ParsedArgs): Promise<void>;
//# sourceMappingURL=app-identity.d.ts.map