import type { ResolvedSkillSource, ResolveSkillSourceContext } from '../types.js';
/**
 * Resolve a `{ url, sha256? }` skill source.
 *
 * - Git URL (cloneUrl#ref:subpath): clone via the extracted cloneGitSource into a
 *   cache entry keyed on the resolved commit; identity is url + commit.
 * - Arbitrary `.zip`: fetch the bytes, verify the REQUIRED sha256, extract into a
 *   cache entry keyed on the sha256; identity is url + sha256. This is the one
 *   genuinely new fetch capability (spec §11a).
 */
export declare function resolveUrlSource(url: string, sha256: string | undefined, ctx: ResolveSkillSourceContext): Promise<ResolvedSkillSource>;
/** Re-export so unit tests / callers can compute a zip digest the same way. */
export declare function sha256Of(bytes: Buffer): string;
//# sourceMappingURL=url-source.d.ts.map