import { SandboxFileArtifactReceipt, type AccessGrant, type Session } from "@opengeni/contracts";
import { type ApiRouteDeps, type AccessGrantAuthorization } from "@opengeni/core";
import { getFile } from "@opengeni/db";
/** Original bytes inherit the already-authorized source session's ownership. */
export declare function publishSandboxFileArtifact(deps: ApiRouteDeps, input: Parameters<typeof publishSandboxFileArtifactInScope>[1]): Promise<SandboxFileArtifactReceipt>;
declare function publishSandboxFileArtifactInScope(deps: ApiRouteDeps, input: {
    grant: AccessGrant;
    authorization?: AccessGrantAuthorization;
    session: Session;
    path: string;
    signal?: AbortSignal | undefined;
}): Promise<SandboxFileArtifactReceipt>;
export declare function sandboxArtifactRelativePath(value: string): string;
export declare function sandboxArtifactSafeFilename(filename: string): string;
export declare function sandboxFileContentType(filename: string): string;
export declare function sandboxArtifactIdentity(input: {
    workspaceId: string;
    sessionId: string;
    path: string;
    sha256: string;
}): {
    fileId: string;
    uploadId: string;
};
export declare function assertSandboxArtifactFile(file: NonNullable<Awaited<ReturnType<typeof getFile>>>, expected: {
    filename: string;
    safeFilename: string;
    contentType: string;
    sizeBytes: number;
    sha256: string;
    bucket: string;
    objectKey: string;
}): void;
export {};