declare const TRUSTED_IDENTITY: unique symbol;
declare const TRUSTED_ENVELOPE: unique symbol;
export declare const NATIVE_SKILL_COORDINATION: "skill-coordinated";
export interface NativeRunnerExecutionIdentityInput {
    identityProvider: string;
    executionRef: string;
}
export interface NativeTrustedExecutionIdentity {
    readonly identityProvider: string;
    readonly executionRef: string;
    readonly [TRUSTED_IDENTITY]: true;
}
export interface NativeTrustedVerifierEnvelope<TPayload> {
    readonly candidateId: string;
    readonly identityProvider: string;
    readonly verifierExecutionRef: string;
    readonly payload: TPayload;
    readonly [TRUSTED_ENVELOPE]: true;
}
export interface NativeRunnerChannel {
    captureExecutionIdentity(input: NativeRunnerExecutionIdentityInput): NativeTrustedExecutionIdentity;
    envelopeVerifierResponse<TPayload>(options: {
        candidateId: string;
        identity: NativeTrustedExecutionIdentity;
        payload: TPayload;
    }): NativeTrustedVerifierEnvelope<TPayload>;
}
/**
 * Create the package-local Runner seam.
 *
 * This constructor is shipped with Comet and can be called by any local
 * process, so it can only create Skill-coordinated identities. A future host
 * attestation path must live outside this package boundary instead of trusting
 * caller-provided provider strings.
 */
export declare function createNativeRunnerChannel(): NativeRunnerChannel;
export declare function isNativeTrustedVerifierEnvelope<TPayload>(value: unknown): value is NativeTrustedVerifierEnvelope<TPayload>;
export declare function isNativeTrustedExecutionIdentity(value: unknown): value is NativeTrustedExecutionIdentity;
export {};
//# sourceMappingURL=native-runner-protocol.d.ts.map