/** * Fetch a remote import's published `telo.yaml` and return its integrity hash * (`sha256-`). Used by `telo publish` for import pinning. Throws when * no transport owns the ref or the fetch fails — callers decide whether that is * fatal (`--frozen`) or best-effort. * * Dispatch is the transport registry, never a scheme branch here: each * transport hashes exactly what its own `read()` verifies (HTTP the raw bytes, * OCI the UTF-8 text extracted from the tar layer), so a pin written at publish * always matches at import. A caller-side branch cannot know which, and * silently degrades the moment a transport is added — that is precisely how * `oci://` refs came to be published unpinned. */ export declare function fetchManifestHash(ref: string): Promise; //# sourceMappingURL=manifest-hash.d.ts.map