import type { Api, AssistantMessage, Model } from "../types";
/** This module is intentionally outside the package export map. */
declare const PROVIDER_SAFETY_STOP_ADAPTER_BRAND: unique symbol;
declare const PROVIDER_SAFETY_STOP_INVOCATION_BRAND: unique symbol;
/** Register an immutable catalog identity for first-party provider dispatch. */
export declare function registerProviderSafetyStopModel(model: Model<Api>): void;
/** Verify that a model is the unchanged identity of a bundled catalog entry. */
export declare function isProviderSafetyStopModelTrusted(model: unknown): boolean;
export type ProviderSafetyStopAdapterCapability = {
    readonly [PROVIDER_SAFETY_STOP_ADAPTER_BRAND]: true;
};
/** The one unforgeable capability shared by first-party adapter parse sites. */
export declare const PROVIDER_SAFETY_STOP_ADAPTER_CAPABILITY: ProviderSafetyStopAdapterCapability;
export type ProviderSafetyStopAdapterInvocation = {
    readonly [PROVIDER_SAFETY_STOP_INVOCATION_BRAND]: true;
};
export declare const PROVIDER_SAFETY_STOP_ADAPTER_INVOCATION: ProviderSafetyStopAdapterInvocation;
/** Attach runtime-owned adapter authority only when no caller transport seam is present. */
export declare function withProviderSafetyStopAdapterInvocation<T extends object>(options: T): T;
export declare function isProviderSafetyStopAdapterInvocation(value: unknown): ProviderSafetyStopAdapterInvocation | undefined;
/** Copy an existing runtime invocation token across a first-party wrapper boundary. */
export declare function copyProviderSafetyStopAdapterInvocation<T extends object>(source: unknown, destination: T): T;
/**
 * Mint terminal authority only from a first-party adapter parse site. The
 * capability is branded by a module-private symbol and is not available from
 * the public `@gajae-code/ai` surface. Caller-controlled transport seams are
 * also not trusted adapter invocations: an injected fetch or SDK client can
 * fabricate a refusal without any provider contact, so adapter call sites
 * pass those seams explicitly and fail closed when one is present. An
 * unrecognized structured signal fails closed, so adapter mistakes remain
 * fallback-eligible.
 */
export declare function mintProviderSafetyStop(message: AssistantMessage, signal: string, capability: ProviderSafetyStopAdapterCapability, callerTransport?: unknown, adapterInvocation?: ProviderSafetyStopAdapterInvocation): boolean;
/** Identity check for terminal provider safety-stop authority. */
export declare function isProviderSafetyStopAuthenticated(message: unknown): boolean;
/**
 * Drop terminal authority for a message. Exposing revocation publicly is
 * safe by construction: it can only remove authority, never grant it, so a
 * hostile caller cannot use it to forge a stop — only to degrade a genuine
 * one to an ordinary fallback-eligible error. The managed runtime uses it to
 * expire marks once a stop has been adjudicated, before the committed
 * message is exposed to later stream dispatches (#4777 review follow-up).
 */
export declare function revokeProviderSafetyStop(message: unknown): void;
export {};