import { z } from 'zod';
import type { DappDeploymentRequest } from './deploymentRequest.ts';
import type { DappPlanIssue, DappPlanMaterial } from './plan.ts';
export declare const DappIdentityCapabilityMoniker: "xyo.identity";
export declare const DappIdentityProviderConfigZod: z.ZodObject<{
    adapter: z.ZodType<import("./jsonValue.ts").JsonObject, unknown, z.core.$ZodTypeInternals<import("./jsonValue.ts").JsonObject, unknown>>;
    request: z.ZodUnion<readonly [z.ZodObject<{
        class: z.ZodLiteral<"identity">;
        provision: z.ZodLiteral<"managed-local">;
        persistence: z.ZodLiteral<"ephemeral">;
        mode: z.ZodLiteral<"ephemeral-local">;
        childIndex: z.ZodNumber;
    }, z.core.$strict>, z.ZodObject<{
        class: z.ZodLiteral<"identity">;
        provision: z.ZodLiteral<"managed">;
        persistence: z.ZodLiteral<"retained">;
        mode: z.ZodLiteral<"provided">;
        expectedAddress: z.ZodString;
    }, z.core.$strict>, z.ZodObject<{
        mode: z.ZodLiteral<"provided">;
        class: z.ZodLiteral<"identity">;
        expectedAddress: z.ZodString;
        provision: z.ZodLiteral<"external">;
        persistence: z.ZodLiteral<"external">;
    }, z.core.$strict>]>;
    resourceId: z.ZodString;
}, z.core.$strict>;
export type DappIdentityProviderConfig = z.infer<typeof DappIdentityProviderConfigZod>;
/** Opt-in only: identity resources used for provisioning retain their legacy omission. */
export declare function explicitApplicationIdentityIds(request: DappDeploymentRequest): ReadonlySet<string>;
/** Persisted plans enforce the same explicit identity boundary as source planning. */
export declare function applicationIdentityPlanIssues(material: DappPlanMaterial): DappPlanIssue[];
//# sourceMappingURL=applicationIdentity.d.ts.map