import type { ServiceApplyResult, ServiceScope } from './types.js';
export interface SafeLocalUpgradeGrant {
    grant_id: string;
    target_host: string;
    package_name: '@skillfm/local';
    from_version?: string;
    to_version: string;
    tarball_sha256?: string;
    signed_tarball_ref?: string;
    allowed_action: 'upgrade' | 'rollback';
    allowed_until: string;
    required_checks?: string[];
    rollback_policy?: 'restore_previous_version' | 'manual';
    approved_by: string;
}
export interface ExecuteLocalUpgradeOptions {
    grantPath: string;
    dryRun?: boolean;
    scope?: ServiceScope;
    homeDir?: string;
    tarballPath?: string;
    registryUrl?: string;
    restartBaseServiceFn?: (opts: {
        scope?: ServiceScope;
    }) => Promise<ServiceApplyResult>;
    baseHealthCheckFn?: (homeDir: string) => Promise<{
        ok: boolean;
        detail: string;
    }>;
}
export interface LocalUpgradeResult {
    ok: boolean;
    grant_id?: string;
    package_name?: string;
    version?: string;
    dry_run?: boolean;
    steps: Array<{
        name: string;
        ok: boolean;
        detail: string;
    }>;
    rollback?: {
        attempted: boolean;
        ok: boolean;
        detail: string;
    };
    error?: string;
    record_path?: string;
}
export declare function readSafeLocalUpgradeGrant(path: string): Promise<SafeLocalUpgradeGrant>;
export declare function validateSafeLocalUpgradeGrant(grant: SafeLocalUpgradeGrant, input?: {
    now?: Date;
    host?: string;
}): {
    ok: true;
} | {
    ok: false;
    error: string;
};
export declare function executeLocalRuntimeUpgrade(opts: ExecuteLocalUpgradeOptions): Promise<LocalUpgradeResult>;
//# sourceMappingURL=local-upgrade.d.ts.map