import type { Config } from '../../config/schema.js';
export interface AgentPluginSourceProvenance {
    kind: 'store';
    packageName: string;
    packageType: 'plugin' | 'extension';
    version: string;
    sha256: string;
    publisherVerification?: 'community' | 'verified';
    sourceRepository?: string;
    sourceCommit?: string;
    artifactFormat?: string;
    riskTier?: 'content' | 'network' | 'local-exec';
}
export declare function isAgentPluginArchive(buffer: Buffer): boolean;
export declare function withAgentPluginArchive<T>(buffer: Buffer, fn: (local: string) => T): T;
/** Resolve remote artifacts only for explicit inspect/install requests, never during discovery. */
export declare function withAgentPluginSource<T>(source: string, config: Config | undefined, fn: (local: string, provenance?: AgentPluginSourceProvenance) => T): Promise<T>;