/**
 * @file identity-constants.mts
 * @description Constants for the ibgib identity layer: pool IDs, verbs, KDF salts,
 * IndexedDB store names, and default pool configuration presets.
 *
 * @see docs/identity/KEYSTONES.md
 * @see docs/identity/TODO.md#02-identity-constants--verbs
 */
/** Evolve META: add a LOCAL keystone to the trusted list. */
export declare const IDENTITY_VERB_ADD_DEVICE = "identity-add-device";
/** Evolve META: remove a LOCAL keystone from the trusted list. */
export declare const IDENTITY_VERB_REMOVE_DEVICE = "identity-remove-device";
/** Evolve META: transfer custodianship (custodial → sovereign). */
export declare const IDENTITY_VERB_CUSTODY_TRANSFER = "identity-custody-transfer";
/** Evolve LOCAL: register a new APP-LOCAL keystone. */
export declare const IDENTITY_VERB_ADD_APP = "identity-add-app";
/** Evolve LOCAL: deregister an APP-LOCAL keystone. */
export declare const IDENTITY_VERB_REMOVE_APP = "identity-remove-app";
/** Evolve APP-LOCAL: establish a SESSION keystone genesis. */
export declare const IDENTITY_VERB_ESTABLISH_SESSION = "identity-establish-session";
/** Evolve APP-LOCAL: authorize an app-level action. */
export declare const IDENTITY_VERB_AUTHORIZE = "identity-authorize";
/**
 * Evolve APP-LOCAL (final frame of old epoch): transition to a new epoch keystone.
 * Uses `consume` replenish strategy — self-contained, no parent evolution needed.
 * @see docs/identity/PARADIGM.md#epoch-rotation-handling-keystone-growth
 */
export declare const IDENTITY_VERB_EPOCH_TRANSITION = "identity-epoch-transition";
/** META keystone: structural changes (add/remove device). */
export declare const IDENTITY_POOL_ID_ADD_DEVICE = "identity-add-device";
/** META keystone: structural changes (remove device). Separate pool allows tighter policy. */
export declare const IDENTITY_POOL_ID_REMOVE_DEVICE = "identity-remove-device";
/** META keystone: custody transfer (consume strategy — limited uses). */
export declare const IDENTITY_POOL_ID_CUSTODY_TRANSFER = "identity-custody-transfer";
/** LOCAL keystone: register/deregister app-local keystones. */
export declare const IDENTITY_POOL_ID_ADD_APP = "identity-add-app";
/** LOCAL keystone: deregister app-local keystones. */
export declare const IDENTITY_POOL_ID_REMOVE_APP = "identity-remove-app";
/** APP-LOCAL keystone: establish session keystones. */
export declare const IDENTITY_POOL_ID_APP_SESSION = "identity-app-session";
/** APP-LOCAL keystone: general app-level authorization. */
export declare const IDENTITY_POOL_ID_APP_AUTHORIZE = "identity-app-authorize";
/**
 * APP-LOCAL keystone: epoch transition pool.
 * Strategy: consume — self-authenticates epoch rotation without parent evolution.
 */
export declare const IDENTITY_POOL_ID_APP_EPOCH = "identity-app-epoch";
export declare const IDENTITY_KDF_SALT_META = "ibgib-identity-meta-v1";
export declare const IDENTITY_KDF_SALT_LOCAL = "ibgib-identity-local-v1";
/**
 * APP-LOCAL salt base. Full derivation:
 * `KDF(MasterSecret_local, IDENTITY_KDF_SALT_APP_LOCAL + appId + deviceSalt)`
 */
export declare const IDENTITY_KDF_SALT_APP_LOCAL = "ibgib-identity-app-local-v1";
export declare const IDENTITY_KDF_SALT_SESSION = "ibgib-identity-session-v1";
/** Stores `LocalIdentityContext` — one record per browser profile. */
export declare const IDENTITY_IDB_STORE_LOCAL_CONTEXT = "identity-local-context";
/** Stores `AppLocalIdentityContext` — one record per appId per browser profile. */
export declare const IDENTITY_IDB_STORE_APP_LOCAL_CONTEXT = "identity-app-local-context";
/** Cached META keystone chain — periodically refreshed from identity service. */
export declare const IDENTITY_IDB_STORE_META_CACHE = "identity-meta-cache";
/** LOCAL keystone frames — genesis through current tip. */
export declare const IDENTITY_IDB_STORE_LOCAL_CHAIN = "identity-local-chain";
/** APP-LOCAL keystone frames — current epoch genesis through tip. */
export declare const IDENTITY_IDB_STORE_APP_LOCAL_CHAIN = "identity-app-local-chain";
/** Default max age for cached META chain for routine verification. */
export declare const IDENTITY_META_CACHE_TTL_NORMAL_MS: number;
/** For session establishment: always fetch fresh. */
export declare const IDENTITY_META_CACHE_TTL_SESSION_MS = 0;
/** For offline operation: no TTL (accept whatever is cached). */
export declare const IDENTITY_META_CACHE_TTL_OFFLINE_MS: number;
//# sourceMappingURL=identity-constants.d.mts.map