import { type Static } from "@sinclair/typebox";
export declare const P2P_CREDENTIAL_SNAPSHOT_MAX_BYTES: number;
export declare const p2pCredentialVisibilitySchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>;
export type P2pCredentialVisibility = Static<typeof p2pCredentialVisibilitySchema>;
export declare const p2pShareSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"disabled">, import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>]>;
export type P2pShare = Static<typeof p2pShareSchema>;
/**
 * The configuration a receiving Rig needs to build a provider after the optional credential
 * material has been applied. It deliberately excludes local secret paths such as auth files and
 * native configuration directories.
 */
export declare const provisionedProviderConfigSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
    baseUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
    transport: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<"sse">, import("@sinclair/typebox").TLiteral<"websocket">, import("@sinclair/typebox").TLiteral<"websocket-cached">]>>;
    type: import("@sinclair/typebox").TLiteral<"codex">;
    enabled: import("@sinclair/typebox").TBoolean;
    excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
    includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
}>, import("@sinclair/typebox").TObject<{
    type: import("@sinclair/typebox").TLiteral<"claude">;
    enabled: import("@sinclair/typebox").TBoolean;
    excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
    includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
}>, import("@sinclair/typebox").TObject<{
    baseUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
    type: import("@sinclair/typebox").TLiteral<"grok">;
    enabled: import("@sinclair/typebox").TBoolean;
    excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
    includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
}>, import("@sinclair/typebox").TObject<{
    modelOverrides: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
        endpoint: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
        region: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
        transport: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"mantle">, import("@sinclair/typebox").TLiteral<"runtime">]>>;
    }>>>;
    region: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
    searchModelId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
    type: import("@sinclair/typebox").TLiteral<"bedrock">;
    enabled: import("@sinclair/typebox").TBoolean;
    excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
    includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
}>]>;
export type ProvisionedProviderConfig = Static<typeof provisionedProviderConfigSchema>;
/**
 * Material is carried separately from config so it can only exist inside a P2P encrypted
 * envelope. The type tag permits the receiver to reject credentials applied to another vendor.
 */
export declare const p2pCredentialMaterialSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
    apiKey: import("@sinclair/typebox").TString;
    type: import("@sinclair/typebox").TLiteral<"codex">;
}>, import("@sinclair/typebox").TObject<{
    accessToken: import("@sinclair/typebox").TString;
    accountId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
    type: import("@sinclair/typebox").TLiteral<"codex">;
}>, import("@sinclair/typebox").TObject<{
    apiKey: import("@sinclair/typebox").TString;
    type: import("@sinclair/typebox").TLiteral<"claude">;
}>, import("@sinclair/typebox").TObject<{
    authToken: import("@sinclair/typebox").TString;
    type: import("@sinclair/typebox").TLiteral<"claude">;
}>, import("@sinclair/typebox").TObject<{
    oauthToken: import("@sinclair/typebox").TString;
    type: import("@sinclair/typebox").TLiteral<"claude">;
}>, import("@sinclair/typebox").TObject<{
    apiKey: import("@sinclair/typebox").TString;
    type: import("@sinclair/typebox").TLiteral<"grok">;
}>, import("@sinclair/typebox").TObject<{
    accessToken: import("@sinclair/typebox").TString;
    createdAt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
    expiresAt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
    type: import("@sinclair/typebox").TLiteral<"grok">;
}>, import("@sinclair/typebox").TObject<{
    bearerToken: import("@sinclair/typebox").TString;
    type: import("@sinclair/typebox").TLiteral<"bedrock">;
}>]>;
export type P2pCredentialMaterial = Static<typeof p2pCredentialMaterialSchema>;
export declare const provisionedProviderSchema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
    config: import("@sinclair/typebox").TObject<{
        baseUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
        transport: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<"sse">, import("@sinclair/typebox").TLiteral<"websocket">, import("@sinclair/typebox").TLiteral<"websocket-cached">]>>;
        type: import("@sinclair/typebox").TLiteral<"codex">;
        enabled: import("@sinclair/typebox").TBoolean;
        excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
        includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
    }>;
    material: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
        apiKey: import("@sinclair/typebox").TString;
        type: import("@sinclair/typebox").TLiteral<"codex">;
    }>, import("@sinclair/typebox").TObject<{
        accessToken: import("@sinclair/typebox").TString;
        accountId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
        type: import("@sinclair/typebox").TLiteral<"codex">;
    }>]>>;
    providerId: import("@sinclair/typebox").TString;
    visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>;
}>, import("@sinclair/typebox").TObject<{
    config: import("@sinclair/typebox").TObject<{
        type: import("@sinclair/typebox").TLiteral<"claude">;
        enabled: import("@sinclair/typebox").TBoolean;
        excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
        includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
    }>;
    material: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
        apiKey: import("@sinclair/typebox").TString;
        type: import("@sinclair/typebox").TLiteral<"claude">;
    }>, import("@sinclair/typebox").TObject<{
        authToken: import("@sinclair/typebox").TString;
        type: import("@sinclair/typebox").TLiteral<"claude">;
    }>, import("@sinclair/typebox").TObject<{
        oauthToken: import("@sinclair/typebox").TString;
        type: import("@sinclair/typebox").TLiteral<"claude">;
    }>]>>;
    providerId: import("@sinclair/typebox").TString;
    visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>;
}>, import("@sinclair/typebox").TObject<{
    config: import("@sinclair/typebox").TObject<{
        baseUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
        type: import("@sinclair/typebox").TLiteral<"grok">;
        enabled: import("@sinclair/typebox").TBoolean;
        excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
        includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
    }>;
    material: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
        apiKey: import("@sinclair/typebox").TString;
        type: import("@sinclair/typebox").TLiteral<"grok">;
    }>, import("@sinclair/typebox").TObject<{
        accessToken: import("@sinclair/typebox").TString;
        createdAt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
        expiresAt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
        type: import("@sinclair/typebox").TLiteral<"grok">;
    }>]>>;
    providerId: import("@sinclair/typebox").TString;
    visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>;
}>, import("@sinclair/typebox").TObject<{
    config: import("@sinclair/typebox").TObject<{
        modelOverrides: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
            endpoint: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
            region: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
            transport: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"mantle">, import("@sinclair/typebox").TLiteral<"runtime">]>>;
        }>>>;
        region: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
        searchModelId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
        type: import("@sinclair/typebox").TLiteral<"bedrock">;
        enabled: import("@sinclair/typebox").TBoolean;
        excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
        includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
    }>;
    material: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
        bearerToken: import("@sinclair/typebox").TString;
        type: import("@sinclair/typebox").TLiteral<"bedrock">;
    }>>;
    providerId: import("@sinclair/typebox").TString;
    visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>;
}>]>;
export type ProvisionedProvider = Static<typeof provisionedProviderSchema>;
/**
 * One authoritative owner's ordered provider snapshot. Each peer stores separate snapshots by
 * owner, so two owners may provision the same provider ID without overwriting one another.
 */
export declare const p2pCredentialSnapshotSchema: import("@sinclair/typebox").TObject<{
    owner: import("@sinclair/typebox").TObject<{
        instanceId: import("@sinclair/typebox").TString;
        publicKey: import("@sinclair/typebox").TString;
    }>;
    providers: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
        config: import("@sinclair/typebox").TObject<{
            baseUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
            transport: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"auto">, import("@sinclair/typebox").TLiteral<"sse">, import("@sinclair/typebox").TLiteral<"websocket">, import("@sinclair/typebox").TLiteral<"websocket-cached">]>>;
            type: import("@sinclair/typebox").TLiteral<"codex">;
            enabled: import("@sinclair/typebox").TBoolean;
            excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
            includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
        }>;
        material: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
            apiKey: import("@sinclair/typebox").TString;
            type: import("@sinclair/typebox").TLiteral<"codex">;
        }>, import("@sinclair/typebox").TObject<{
            accessToken: import("@sinclair/typebox").TString;
            accountId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
            type: import("@sinclair/typebox").TLiteral<"codex">;
        }>]>>;
        providerId: import("@sinclair/typebox").TString;
        visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>;
    }>, import("@sinclair/typebox").TObject<{
        config: import("@sinclair/typebox").TObject<{
            type: import("@sinclair/typebox").TLiteral<"claude">;
            enabled: import("@sinclair/typebox").TBoolean;
            excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
            includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
        }>;
        material: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
            apiKey: import("@sinclair/typebox").TString;
            type: import("@sinclair/typebox").TLiteral<"claude">;
        }>, import("@sinclair/typebox").TObject<{
            authToken: import("@sinclair/typebox").TString;
            type: import("@sinclair/typebox").TLiteral<"claude">;
        }>, import("@sinclair/typebox").TObject<{
            oauthToken: import("@sinclair/typebox").TString;
            type: import("@sinclair/typebox").TLiteral<"claude">;
        }>]>>;
        providerId: import("@sinclair/typebox").TString;
        visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>;
    }>, import("@sinclair/typebox").TObject<{
        config: import("@sinclair/typebox").TObject<{
            baseUrl: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
            type: import("@sinclair/typebox").TLiteral<"grok">;
            enabled: import("@sinclair/typebox").TBoolean;
            excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
            includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
        }>;
        material: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
            apiKey: import("@sinclair/typebox").TString;
            type: import("@sinclair/typebox").TLiteral<"grok">;
        }>, import("@sinclair/typebox").TObject<{
            accessToken: import("@sinclair/typebox").TString;
            createdAt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
            expiresAt: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
            type: import("@sinclair/typebox").TLiteral<"grok">;
        }>]>>;
        providerId: import("@sinclair/typebox").TString;
        visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>;
    }>, import("@sinclair/typebox").TObject<{
        config: import("@sinclair/typebox").TObject<{
            modelOverrides: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TRecord<import("@sinclair/typebox").TString, import("@sinclair/typebox").TObject<{
                endpoint: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
                region: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
                transport: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"mantle">, import("@sinclair/typebox").TLiteral<"runtime">]>>;
            }>>>;
            region: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
            searchModelId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
            type: import("@sinclair/typebox").TLiteral<"bedrock">;
            enabled: import("@sinclair/typebox").TBoolean;
            excludeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
            includeModels: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
        }>;
        material: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
            bearerToken: import("@sinclair/typebox").TString;
            type: import("@sinclair/typebox").TLiteral<"bedrock">;
        }>>;
        providerId: import("@sinclair/typebox").TString;
        visibility: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"owner_only">, import("@sinclair/typebox").TLiteral<"shared">]>;
    }>]>>;
    version: import("@sinclair/typebox").TInteger;
}>;
export type P2pCredentialSnapshot = Static<typeof p2pCredentialSnapshotSchema>;
/**
 * A credential snapshot encrypted by the sender's P2P identity for the receiving Rig.
 */
export declare const p2pEncryptedCredentialSnapshotSchema: import("@sinclair/typebox").TObject<{
    algorithm: import("@sinclair/typebox").TLiteral<"nacl_box">;
    ciphertext: import("@sinclair/typebox").TString;
    nonce: import("@sinclair/typebox").TString;
    owner: import("@sinclair/typebox").TObject<{
        instanceId: import("@sinclair/typebox").TString;
        publicKey: import("@sinclair/typebox").TString;
    }>;
}>;
export type P2pEncryptedCredentialSnapshot = Static<typeof p2pEncryptedCredentialSnapshotSchema>;
/** The receiver's authoritative state after accepting an owner credential snapshot. */
export declare const p2pCredentialReplaceResponseSchema: import("@sinclair/typebox").TObject<{
    changed: import("@sinclair/typebox").TBoolean;
    version: import("@sinclair/typebox").TInteger;
}>;
export type P2pCredentialReplaceResponse = Static<typeof p2pCredentialReplaceResponseSchema>;
/**
 * An authenticated receiver's version hint for an owner whose durable local version was reset.
 * The owner must retry above this version; the receiver never accepts the stale snapshot itself.
 */
export declare const p2pCredentialVersionConflictResponseSchema: import("@sinclair/typebox").TObject<{
    error: import("@sinclair/typebox").TString;
    version: import("@sinclair/typebox").TInteger;
}>;
export type P2pCredentialVersionConflictResponse = Static<typeof p2pCredentialVersionConflictResponseSchema>;