import type { Config } from '../config/schema.js';
export declare function mergeTunnelConfigPatch(config: Config, patch: Record<string, unknown>): {
    ok: true;
} | {
    ok: false;
    message: string;
};
export declare function applyTunnelConsentToConfig(config: Config): void;
export declare function setTunnelEnabledInConfig(config: Config, enabled: boolean): void;
/**
 * Clear stale tunnel flags when consent is missing or outdated (Phase 2: config/runtime alignment).
 * Returns true when `config.tunnel` was modified.
 */
export declare function sanitizeTunnelConfig(config: Config): boolean;