/** A private release adapter supplies a reviewed registry artifact identity;
 * the normal CLI binds to its own installed entrypoint instead. */
export interface ReviewedSkillsCli {
    path: string;
    version: string;
    sha256: string;
}
/** Read an unchanged journal binding as evidence, never as executable recovery
 * code. The caller separately binds and verifies the running recovery package. */
export declare function inspectRecordedSkillsCli(command: string, expected: unknown): {
    receipt: {
        path: string;
        version: string;
        sha256: string;
        manifestSha256: string;
    };
    recheck(): void;
};
export declare function bindSkillsCli(command: string, reviewed?: ReviewedSkillsCli): {
    receipt: {
        path: string;
        version: string;
        sha256: string;
        manifestSha256: string;
    };
    recheck(): void;
};
/** A bounded, read-only producer identity for commands that must call their configured stable CLI. */
export declare function captureSkillsCliProducerIdentity(command: string): {
    schema: "skills.cli-producer-identity/v1";
    configuredCommandPath: string;
    physicalLauncher: {
        path: string;
        sha256: string;
    };
    runtimeEntry: {
        path: string;
        sha256: string;
    };
    runtime: {
        path: string;
        sha256: string;
    };
    package: {
        name: "@hasna/skills";
        version: string;
        manifestSha256: string;
    };
};