import type { EcsDispatcherConfig } from "../sdk/execution/dispatchers/ecs.js";
import type { FrozenAdmission, AttemptRecord } from "../sdk/execution/types.js";
import { type PureReviewedBundle } from "./runtime-pure-contract.js";
export declare const RUNTIME_MAX_INPUT_BYTES = 100000;
export declare const RUNTIME_MAX_BUNDLE_BYTES = 1000000;
export declare const RUNTIME_MAX_ARTIFACT_BYTES = 2000000;
export declare const RUNTIME_MAX_LOG_BYTES = 32768;
export declare const RUNTIME_TIMEOUT_MS = 60000;
export interface RuntimeConfig extends EcsDispatcherConfig {
    imageDigest: string;
    apiOrigin: string;
    /** Only independently reviewed exact bundles enter this first credential-free lane. */
    reviewedBundles: ({
        slug: "pdf-generate";
        version: string;
        sha256: string;
        executionContract?: never;
    } | PureReviewedBundle)[];
}
export declare function readRuntimeConfig(env?: Record<string, string | undefined>): RuntimeConfig | null;
export declare function runtimeInput(value: unknown): {
    content: string;
    title?: string;
};
export declare function runtimeToken(key: string, admission: FrozenAdmission, attempt: AttemptRecord): string;
export declare function verifyRuntimeToken(token: string, key: string, admission: FrozenAdmission, attempt: AttemptRecord, now?: number): boolean;
export declare const hashBytes: (bytes: Uint8Array) => string;