export declare const TARGET_ADAPTER_REGISTRATION_SCHEMA_VERSION: "onboard-client-target-adapter-registration-v1";
export declare const TARGET_ADAPTER_INVOCATION_SCHEMA_VERSION: "onboard-client-target-adapter-invocation-v1";
export declare const TARGET_ADAPTER_CONTEXT_REF_SCHEMA_VERSION: "onboard-client-production-target-context-ref-v1";
export declare const ONBOARD_CLIENT_TARGET_OPERATIONS: readonly ["fact_readback", "private_channel_apply", "private_channel_readback", "profile_apply", "profile_readback", "target_install", "target_readback", "welcome_readback", "workspace_create", "workspace_readback"];
export type OnboardClientTargetOperation = typeof ONBOARD_CLIENT_TARGET_OPERATIONS[number];
export interface OnboardClientTargetContextRef {
    schemaVersion: typeof TARGET_ADAPTER_CONTEXT_REF_SCHEMA_VERSION;
    runId: string;
    lifecycleId: string;
    path: string;
    sha256: string;
}
export interface OnboardClientTargetAdapterFactoryInput {
    operation: OnboardClientTargetOperation;
    registrationHash: string;
    approvalHash: string;
    packetHash: string;
    approvalEventHash: string;
    requestFingerprint: string;
    authorityHash: string;
    effectIdentity: string;
    expectedRevision: number;
    controlProfileId: string;
    subjectProfileId: string;
    customerSlug: string;
    workspaceId: string;
    hostPhysicalIdentity: string;
    contextRef: OnboardClientTargetContextRef;
}
export interface OnboardClientTargetAdapterFactoryReceipt {
    status: "accepted" | "uncertain";
    effectIdentity: string;
    correlationId: string;
}
export type OnboardClientTargetAdapterFactory = (input: OnboardClientTargetAdapterFactoryInput) => Promise<OnboardClientTargetAdapterFactoryReceipt>;
export interface OnboardClientTargetAdapterRegistration {
    schemaVersion: typeof TARGET_ADAPTER_REGISTRATION_SCHEMA_VERSION;
    mode: "production";
    controlIdentity: {
        profileId: string;
        role: "privileged_control";
        authorizedActorIds: string[];
    };
    subjectIdentity: {
        profileId: string;
        customerSlug: string;
        workspaceId: string;
        role: "isolated_subject";
    };
    hostAttestation: {
        attestationId: string;
        physicalIdentity: string;
        containerIdentity: string;
        attestedAt: string;
        expiresAt: string;
        attestationHash: string;
    };
    boundary: {
        factoryKind: "structured_customer_lifecycle";
        ownershipPolicy: "exact_identity_only";
        retryPolicy: "stepwise_reconcile";
        proofPolicy: "independent_readback_required";
        authorityPolicy: "current_operator_packet_required";
    };
    factory: OnboardClientTargetAdapterFactory;
}
export interface OnboardClientTargetApproval {
    status: "approved";
    actorId: string;
    actorType: "authenticated_admin";
    packetHash: string;
    allowedOperations: OnboardClientTargetOperation[];
    actionSetHash: string;
    targetIdentityHash: string;
    effectIdentities: string[];
    effectSetHash: string;
    forbiddenEffects: string[];
    forbiddenEffectsHash: string;
    approvalEventHash: string;
    expiresAt: string;
}
export interface OnboardClientTargetAdapterInvocation {
    schemaVersion: typeof TARGET_ADAPTER_INVOCATION_SCHEMA_VERSION;
    operation: OnboardClientTargetOperation;
    registrationHash: string;
    approval: OnboardClientTargetApproval;
    contextRef: OnboardClientTargetContextRef;
    effect: {
        effectIdentity: string;
        expectedRevision: number;
        requestFingerprint: string;
        authorityHash: string;
    };
}
export declare function deriveOnboardClientTargetAuthorityHash(input: {
    registrationHash: string;
    approval: OnboardClientTargetApproval;
}): string;
export declare function deriveOnboardClientTargetRequestFingerprint(input: {
    operation: OnboardClientTargetOperation;
    registrationHash: string;
    authorityHash: string;
    contextRef: OnboardClientTargetContextRef;
    effect: {
        effectIdentity: string;
        expectedRevision: number;
    };
}): string;
export type OnboardClientTargetAdapterErrorCode = "target_adapter_options_missing" | "target_adapter_options_invalid" | "target_adapter_control_subject_collision" | "target_adapter_attestation_invalid" | "target_adapter_input_invalid" | "target_adapter_registration_drift" | "target_adapter_approval_required" | "target_adapter_approval_expired" | "target_adapter_approval_scope_drift" | "target_adapter_authority_drift" | "target_adapter_request_drift" | "target_adapter_target_drift" | "target_adapter_factory_failed" | "target_adapter_factory_receipt_invalid";
export interface OnboardClientTargetAdapterRuntimeUnavailable {
    ok: false;
    kind: "onboard_client_target_adapters";
    status: "unavailable";
    code: OnboardClientTargetAdapterErrorCode;
    registrationHash: null;
    callbackCount: 0;
    targetPrimitivesAvailable: false;
}
export interface OnboardClientTargetAdapterRuntimeReady {
    ok: true;
    kind: "onboard_client_target_adapters";
    status: "ready";
    code: null;
    registrationHash: string;
    targetIdentityHash: string;
    callbackCount: 0;
    targetPrimitivesAvailable: true;
    invoke: (input: OnboardClientTargetAdapterInvocation) => Promise<OnboardClientTargetAdapterInvocationResult>;
}
export type OnboardClientTargetAdapterRuntime = OnboardClientTargetAdapterRuntimeUnavailable | OnboardClientTargetAdapterRuntimeReady;
export type OnboardClientTargetAdapterInvocationResult = {
    ok: true;
    kind: "target_adapter_receipt";
    status: "accepted" | "uncertain";
    operation: OnboardClientTargetOperation;
    effectIdentity: string;
    correlationId: string;
    callbackCount: 1;
    independentProofRequired: true;
    selfProofAccepted: false;
} | {
    ok: false;
    kind: "target_adapter_blocked";
    status: "blocked";
    code: OnboardClientTargetAdapterErrorCode;
    callbackCount: 0 | 1;
    independentProofRequired: true;
    selfProofAccepted: false;
};
export declare function createOnboardClientTargetAdapterRuntime(input?: unknown, options?: {
    now?: () => string;
}): OnboardClientTargetAdapterRuntime;