import type { ServiceScope } from './types.js';
export interface SafeUpgradeGrant {
    grant_id: string;
    target_host: string;
    skill_slug: string;
    from_version?: string;
    to_version?: string;
    bundle_sha256?: string;
    signed_bundle_ref?: string;
    allowed_action: 'install' | 'upgrade' | 'rollback';
    allowed_until: string;
    required_checks?: string[];
    rollback_policy?: 'restore_previous_version' | 'manual';
    approved_by: string;
}
export interface ExecuteSafeSkillUpgradeOptions {
    slug: string;
    grantPath: string;
    scope?: ServiceScope;
    dryRun?: boolean;
    skillsRoot?: string;
    skillfmHome?: string;
    apiBaseUrl?: string;
    agentToken?: string;
}
export interface SafeSkillUpgradeResult {
    ok: boolean;
    grant_id?: string;
    slug: string;
    action?: SafeUpgradeGrant['allowed_action'];
    version?: string;
    dry_run?: boolean;
    steps: Array<{
        name: string;
        ok: boolean;
        detail: string;
    }>;
    rollback?: {
        attempted: boolean;
        ok: boolean;
        detail: string;
    };
    error?: string;
    record_path?: string;
}
export declare function readSafeUpgradeGrant(path: string): Promise<SafeUpgradeGrant>;
export declare function validateSafeUpgradeGrant(grant: SafeUpgradeGrant, input: {
    slug: string;
    action?: SafeUpgradeGrant['allowed_action'];
    now?: Date;
    host?: string;
}): {
    ok: true;
} | {
    ok: false;
    error: string;
};
export declare function executeSafeSkillUpgrade(opts: ExecuteSafeSkillUpgradeOptions): Promise<SafeSkillUpgradeResult>;
//# sourceMappingURL=safe-upgrade.d.ts.map