import { type CredentialTenant } from '@mastra/code-sdk/agents/credential-resolver';
import type { RequestContext } from '@mastra/core/request-context';
import type { FactoryProjectsStorage } from '../storage/domains/projects/base.js';
import type { WorkItemsStorage } from '../storage/domains/work-items/base.js';
import type { SourceControlSessionLookup } from './factory-session.js';
interface FactoryModelPolicyDependencies {
    projects: Pick<FactoryProjectsStorage, 'getById'>;
    sourceControl: Pick<SourceControlSessionLookup, 'getBySessionId'>;
    workItems: Pick<WorkItemsStorage, 'findRunBindingByThread'>;
}
/** Resolve billing authority from authenticated identity and durable bindings, never session state. */
export declare function resolveFactoryCredentialTenant(requestContext: RequestContext, deps: FactoryModelPolicyDependencies): Promise<CredentialTenant | undefined>;
/** Shared invocation and model-picker policy; no client-supplied owner or scope is trusted. */
export declare function resolveFactoryModelPolicy(requestContext: RequestContext, deps: FactoryModelPolicyDependencies): Promise<{
    tenant: CredentialTenant;
    factoryProjectId?: string;
    factoryDefaultModelId?: string | null;
} | undefined>;
export {};
//# sourceMappingURL=credential-policy.d.ts.map