import type { DurableStateAdapter } from '../durable/file-journal.js';
import type { BootstrapVerificationKey, DurableBootstrapPlan, DurableHeadAnchor, DurableJournalRecord, DurableJournalSigner, DurableSecurityProviderIdentity, DurableTransactionRequest, SignedDurableBootstrapEnvelope } from '../durable/types.js';
import type { StudioAdminBootstrapResult } from '../policy/types.js';
export interface DurableBootstrapOptions {
    readonly envelope: SignedDurableBootstrapEnvelope;
    readonly providerIdentity: DurableSecurityProviderIdentity;
    readonly bootstrapPublicKeys: Readonly<Record<string, BootstrapVerificationKey>>;
    readonly journalSigner?: DurableJournalSigner;
    readonly headAnchor: DurableHeadAnchor;
    readonly now: () => string;
}
export declare function bootstrapAuthorizationPayload(payload: DurableBootstrapPlan): Buffer;
export declare function canonicalBootstrapAuthorityDigest(plan: Pick<DurableBootstrapPlan, 'journalAuthority' | 'securityProvider'>): string;
export declare function canonicalBootstrapCore(plan: DurableBootstrapPlan): Omit<DurableBootstrapPlan, 'genesisRecordDigest'>;
export declare function canonicalBootstrapCoreDigest(plan: DurableBootstrapPlan): string;
export declare function canonicalBootstrapRequest(plan: DurableBootstrapPlan, identityRevision?: number, policyRevision?: number): {
    readonly request: DurableTransactionRequest;
    readonly personId: string;
    readonly planDigest: string;
};
export declare function canonicalGenesisRecordBase(plan: DurableBootstrapPlan): Omit<DurableJournalRecord, 'checksum' | 'signature'>;
export declare function deriveGenesisRecordDigest(plan: DurableBootstrapPlan): string;
/** Internal atomic implementation. Callers cannot obtain its authorized adapter from the packed API. */
export declare function executeDurableBootstrap(adapter: DurableStateAdapter, envelope: SignedDurableBootstrapEnvelope): Promise<StudioAdminBootstrapResult>;