import type { TSha256Digest, TImmutableContainerPlatform } from './data/immutableimage.js';
export declare const workloadInitReleaseContract: Readonly<{
    readonly packageName: "@serve.zone/workloadinit";
    readonly sourceRepository: "https://code.foss.global/serve.zone/workloadinit.git";
    readonly imageRegistry: "code.foss.global";
    readonly imageRepository: "serve.zone/workloadinit";
    readonly imageIndexMediaType: "application/vnd.oci.image.index.v1+json";
    readonly statementType: "https://in-toto.io/Statement/v1";
    readonly predicateType: "https://slsa.dev/provenance/v1";
    readonly buildType: "https://serve.zone/buildtypes/workloadinit-gitzone-tsdocker/v1";
    readonly builderId: "https://serve.zone/builders/workloadinit-manual-release/v1";
    readonly signatureFormat: "cosign-dsse-bundle-v0.3";
    readonly signatureAlgorithm: "ecdsa-p256-sha256";
}>;
export interface IWorkloadInitBuildToolVersionsV1 {
    dockerBuildx: string;
    gitzone: string;
    tsdocker: string;
    tsrust: string;
}
export interface IWorkloadInitReleaseIdentityV1 {
    packageName: typeof workloadInitReleaseContract.packageName;
    version: string;
    sourceRepository: typeof workloadInitReleaseContract.sourceRepository;
    sourceRevision: string;
    sourceRef: string;
    sourceDirty: false;
    imageRegistry: typeof workloadInitReleaseContract.imageRegistry;
    imageRepository: typeof workloadInitReleaseContract.imageRepository;
    imageTag: string;
}
export interface IWorkloadInitReleaseAttestationStatementV1 {
    _type: typeof workloadInitReleaseContract.statementType;
    subject: [
        {
            name: string;
            digest: {
                sha256: string;
            };
        }
    ];
    predicateType: typeof workloadInitReleaseContract.predicateType;
    predicate: {
        buildDefinition: {
            buildType: typeof workloadInitReleaseContract.buildType;
            externalParameters: {
                artifact: {
                    mediaType: typeof workloadInitReleaseContract.imageIndexMediaType;
                    platforms: ['linux/amd64', 'linux/arm64'];
                    repository: string;
                    tag: string;
                };
                source: {
                    repository: typeof workloadInitReleaseContract.sourceRepository;
                    tag: string;
                    dirty: false;
                };
            };
            resolvedDependencies: [
                {
                    uri: string;
                    digest: {
                        gitCommit: string;
                    };
                }
            ];
        };
        runDetails: {
            builder: {
                id: typeof workloadInitReleaseContract.builderId;
                version: IWorkloadInitBuildToolVersionsV1;
            };
        };
    };
}
/**
 * Cloudly-created summary of a private DSSE verification. Shape and digest
 * validation do not independently prove the signature or its trust policy.
 */
export interface IWorkloadInitCloudlyVerificationSummaryV1 {
    signatureFormat: typeof workloadInitReleaseContract.signatureFormat;
    signatureAlgorithm: typeof workloadInitReleaseContract.signatureAlgorithm;
    signerKeyId: TSha256Digest;
    detachedBundleDigest: TSha256Digest;
    statementDigest: TSha256Digest;
    subjectImageIndexDigest: TSha256Digest;
    builderId: typeof workloadInitReleaseContract.builderId;
    policyGeneration: number;
    policyDigest: TSha256Digest;
    verifiedAt: number;
}
export interface IWorkloadInitApprovedArtifactV1 {
    platform: TImmutableContainerPlatform;
    workloadInitPlatformManifestDigest: TSha256Digest;
    workloadInitExecutableDigest: TSha256Digest;
}
export interface IWorkloadInitReleaseApprovalV1 {
    schemaVersion: 1;
    release: IWorkloadInitReleaseIdentityV1;
    imageIndexMediaType: typeof workloadInitReleaseContract.imageIndexMediaType;
    workloadInitImageIndexDigest: TSha256Digest;
    artifacts: [IWorkloadInitApprovedArtifactV1, IWorkloadInitApprovedArtifactV1];
    verificationSummary: IWorkloadInitCloudlyVerificationSummaryV1;
    approvedAt: number;
    approvalDigest: TSha256Digest;
}
export interface IWorkloadInitApprovalAuthorityReferenceV1 {
    authorityVersion: 1;
    authorityGeneration: number;
    approvalDigest: TSha256Digest;
}
export interface IWorkloadInitActiveApprovalAuthorityV1 extends IWorkloadInitApprovalAuthorityReferenceV1 {
    approval: IWorkloadInitReleaseApprovalV1;
}
export declare const validateWorkloadInitReleaseIdentity: (releaseArg: unknown) => string[];
export declare const createWorkloadInitReleaseAttestationStatement: (inputArg: {
    release: IWorkloadInitReleaseIdentityV1;
    workloadInitImageIndexDigest: TSha256Digest;
    toolVersions: IWorkloadInitBuildToolVersionsV1;
}) => IWorkloadInitReleaseAttestationStatementV1;
export declare const createWorkloadInitReleaseAttestationPayload: (statementArg: IWorkloadInitReleaseAttestationStatementV1) => Uint8Array;
export declare const computeWorkloadInitReleaseAttestationStatementDigest: (statementArg: IWorkloadInitReleaseAttestationStatementV1) => Promise<TSha256Digest>;
export declare const validateWorkloadInitReleaseAttestationStatement: (statementArg: unknown) => string[];
export declare const validateWorkloadInitCloudlyVerificationSummary: (summaryArg: unknown) => string[];
export declare const createWorkloadInitReleaseApprovalDigestInput: (approvalArg: IWorkloadInitReleaseApprovalV1) => string;
export declare const computeWorkloadInitReleaseApprovalDigest: (approvalArg: IWorkloadInitReleaseApprovalV1) => Promise<TSha256Digest>;
export declare const validateWorkloadInitReleaseApproval: (approvalArg: unknown) => Promise<string[]>;
export declare const validateWorkloadInitApprovalAuthorityReference: (referenceArg: unknown) => string[];
export declare const validateWorkloadInitActiveApprovalAuthority: (authorityArg: unknown) => Promise<string[]>;