export declare const PROTECTED_BUNDLE_VERSION: 1;
export declare const PROTECTED_POLICY_LAYER: "protected-policy";
export type ProtectedArtifactKind = 'rule' | 'skill' | 'playbook' | 'command-contract';
export type RuntimeCompatibility = {
    runtime: string;
    minVersion: string;
    maxVersion?: string;
};
export type ProtectedBundleArtifact = {
    id: string;
    kind: ProtectedArtifactKind;
    path: string;
    sha256: string;
    dependencies: string[];
    required: boolean;
};
export type ProtectedBundleManifest = {
    version: typeof PROTECTED_BUNDLE_VERSION;
    policyVersion: string;
    repositoryId: string;
    digest: string;
    runtimeCompatibility: RuntimeCompatibility[];
    artifacts: ProtectedBundleArtifact[];
};
export type ProtectedRuntime = {
    runtime: string;
    version: string;
};
export type ProtectedBundleContent = Readonly<Record<string, string | Uint8Array>>;
export type ComposedProtectedArtifact = ProtectedBundleArtifact & {
    content: string | Uint8Array;
};
export type ProtectedPolicyLayer = {
    id: typeof PROTECTED_POLICY_LAYER;
    policyVersion: string;
    repositoryId: string;
    artifacts: ComposedProtectedArtifact[];
};
export declare function sha256(content: string | Uint8Array): string;
/** Computes the manifest digest without its own digest field or artifact content. */
export declare function computeProtectedBundleDigest(manifest: Omit<ProtectedBundleManifest, 'digest'>): string;
/** Validates the complete bundle before returning its deterministic dependency-first order. */
export declare function validateProtectedBundle(manifest: ProtectedBundleManifest, content: ProtectedBundleContent, runtime: ProtectedRuntime): ProtectedBundleArtifact[];
/** Composes exactly one protected-policy layer and performs no repository or logging I/O. */
export declare function composeProtectedBundle(manifest: ProtectedBundleManifest, content: ProtectedBundleContent, runtime: ProtectedRuntime): ProtectedPolicyLayer;