import type { ResolvedManifest } from "./model.js";
/** Parse + validate a manifest source into the resolved model. `sourcePath` anchors relative
 *  persona refs and locates errors. */
export declare function resolveManifest(src: string, sourcePath: string): ResolvedManifest;
/** Why a comma-separated `servers` list cannot serve as broker URLs; empty when it can. A list
 *  naming no entry is refused, because an override that names none would silently fall back to
 *  the default broker. A message names an entry by position and never repeats it: in the token
 *  form `nats://<token>@host` the user part is the secret. `what` names its source, because
 *  `--server` on `up -f` and `spawn -f` overrides `broker.servers` and must pass the same check. */
export declare function serverUrlProblems(servers: string, what: string): string[];
/** Why `idp` cannot be an IdP base URL, or `undefined` when it can. The rules are the ones the auth
 *  provider applies when the launch pins the IdP, so the dry run refuses every IdP URL the launch
 *  would refuse. `what` names its source, because `up -f --idp` overrides `broker.idp` and must pass
 *  the same check. The message never repeats the value, which may carry a credential. */
export declare function idpUrlProblem(idp: string, what: string): string | undefined;
//# sourceMappingURL=resolve.d.ts.map