import { z } from 'zod';
/**
 * Public-safe infrastructure identities (D-032). Three hashes travel through
 * the deployment intent, Lock V3, provider target plans, and Composition V3:
 *
 * - `adapterDescriptorHash` binds one pinned, host-admitted adapter
 *   implementation and every contract it supports;
 * - `infrastructureDescriptorHash` binds one registered infrastructure
 *   instance to its kind, scope commitment, and adapter; and
 * - `infrastructurePolicyHash` binds the exact public planning policy the
 *   adapter normalized for that instance.
 *
 * None of them admits a route, account, cluster, server, credential, grant,
 * or alias. Everything protected lives in the host under its own
 * `xyo-dapp-kit-host:` domains.
 */
export declare const DappManagedCapabilityExportContractSchema: "network.xyo.dapp.managed.capability.export.contract" & {
    readonly __schema: true;
};
export declare const DappInfrastructureAdapterDescriptorSchema: "network.xyo.dapp.infrastructure.adapter.descriptor" & {
    readonly __schema: true;
};
export declare const DappInfrastructureDescriptorSchema: "network.xyo.dapp.infrastructure.descriptor" & {
    readonly __schema: true;
};
export declare const DappInfrastructurePolicyIdentitySchema: "network.xyo.dapp.infrastructure.policy.identity" & {
    readonly __schema: true;
};
/** Controller-issued opaque instance identity; the first slice uses UUID URNs. */
export declare const DappInfrastructureIdZod: z.ZodString;
export type DappInfrastructureId = z.infer<typeof DappInfrastructureIdZod>;
/** `sha256:` plus 64 lowercase hex over a format-defined complete artifact. */
export declare const ContentDigestZod: z.ZodString;
export declare const DappManagedCapabilityExportContractV1PreimageZod: z.ZodObject<{
    schema: z.ZodLiteral<"network.xyo.dapp.managed.capability.export.contract" & {
        readonly __schema: true;
    }>;
    schemaVersion: z.ZodLiteral<1>;
    hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
    exportContractId: z.ZodString;
    exportContractVersion: z.ZodNumber;
    exportNormalizationId: z.ZodString;
    identitySchema: z.ZodString;
    identitySchemaVersion: z.ZodNumber;
    identitySchemaHash: z.ZodString;
    producerCapabilityId: z.ZodString;
    consumerCapabilityId: z.ZodString;
}, z.core.$strict>;
export type DappManagedCapabilityExportContractV1Preimage = z.infer<typeof DappManagedCapabilityExportContractV1PreimageZod>;
export declare const DappManagedCapabilityExportContractV1Zod: z.ZodObject<{
    schema: z.ZodLiteral<"network.xyo.dapp.managed.capability.export.contract" & {
        readonly __schema: true;
    }>;
    schemaVersion: z.ZodLiteral<1>;
    hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
    exportContractId: z.ZodString;
    exportContractVersion: z.ZodNumber;
    exportNormalizationId: z.ZodString;
    identitySchema: z.ZodString;
    identitySchemaVersion: z.ZodNumber;
    identitySchemaHash: z.ZodString;
    producerCapabilityId: z.ZodString;
    consumerCapabilityId: z.ZodString;
    exportContractHash: z.ZodString;
}, z.core.$strict>;
export type DappManagedCapabilityExportContractV1 = z.infer<typeof DappManagedCapabilityExportContractV1Zod>;
/** D-002 kind `managed-capability-export-contract` version 1. */
export declare function hashDappManagedCapabilityExportContractV1(preimage: unknown): string;
export declare function verifyDappManagedCapabilityExportContractV1(value: unknown): DappManagedCapabilityExportContractV1;
/** Closed roles for trusted code an adapter must run inside a managed workload. */
export declare const DappTrustedRuntimeArtifactRoleZod: z.ZodEnum<{
    "kubernetes-startup-gate": "kubernetes-startup-gate";
    "proxmox-bootstrap-agent": "proxmox-bootstrap-agent";
}>;
export type DappTrustedRuntimeArtifactRole = z.infer<typeof DappTrustedRuntimeArtifactRoleZod>;
/** Closed artifact formats whose complete digest rule the descriptor fixes. */
export declare const DappTrustedRuntimeArtifactFormatZod: z.ZodEnum<{
    "oci-image": "oci-image";
    "executable-bundle": "executable-bundle";
}>;
export type DappTrustedRuntimeArtifactFormat = z.infer<typeof DappTrustedRuntimeArtifactFormatZod>;
export declare const DappTrustedRuntimeArtifactZod: z.ZodObject<{
    role: z.ZodEnum<{
        "kubernetes-startup-gate": "kubernetes-startup-gate";
        "proxmox-bootstrap-agent": "proxmox-bootstrap-agent";
    }>;
    artifactFormat: z.ZodEnum<{
        "oci-image": "oci-image";
        "executable-bundle": "executable-bundle";
    }>;
    contentDigest: z.ZodString;
    entrypointContractHash: z.ZodString;
    platformContractHash: z.ZodString;
}, z.core.$strict>;
export type DappTrustedRuntimeArtifact = z.infer<typeof DappTrustedRuntimeArtifactZod>;
export declare const DappInfrastructureAdapterDescriptorV1PreimageZod: z.ZodObject<{
    schema: z.ZodLiteral<"network.xyo.dapp.infrastructure.adapter.descriptor" & {
        readonly __schema: true;
    }>;
    schemaVersion: z.ZodLiteral<1>;
    hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
    adapterId: z.ZodString;
    adapterVersion: z.ZodString;
    implementationHash: z.ZodString;
    infrastructureKind: z.ZodEnum<{
        vercel: "vercel";
        cloudflare: "cloudflare";
        kubernetes: "kubernetes";
        proxmox: "proxmox";
    }>;
    scopeIdentityFamily: z.ZodString;
    scopeIdentityContractHash: z.ZodString;
    scopeProofVersions: z.ZodArray<z.ZodNumber>;
    supportedContracts: z.ZodArray<z.ZodObject<{
        schema: z.ZodString;
        schemaVersion: z.ZodNumber;
        schemaHash: z.ZodString;
    }, z.core.$strict>>;
    capabilityIds: z.ZodArray<z.ZodString>;
    credentialRequirementIds: z.ZodArray<z.ZodString>;
    actionKinds: z.ZodArray<z.ZodString>;
    targetObjectIdentitySchemaVersion: z.ZodNumber;
    targetObjectIdentityContractHash: z.ZodString;
    targetObjectRoleNormalizationId: z.ZodString;
    targetObjectRoles: z.ZodArray<z.ZodString>;
    trustedRuntimeArtifacts: z.ZodArray<z.ZodObject<{
        role: z.ZodEnum<{
            "kubernetes-startup-gate": "kubernetes-startup-gate";
            "proxmox-bootstrap-agent": "proxmox-bootstrap-agent";
        }>;
        artifactFormat: z.ZodEnum<{
            "oci-image": "oci-image";
            "executable-bundle": "executable-bundle";
        }>;
        contentDigest: z.ZodString;
        entrypointContractHash: z.ZodString;
        platformContractHash: z.ZodString;
    }, z.core.$strict>>;
    supportedExportContracts: z.ZodArray<z.ZodObject<{
        schema: z.ZodLiteral<"network.xyo.dapp.managed.capability.export.contract" & {
            readonly __schema: true;
        }>;
        schemaVersion: z.ZodLiteral<1>;
        hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
        exportContractId: z.ZodString;
        exportContractVersion: z.ZodNumber;
        exportNormalizationId: z.ZodString;
        identitySchema: z.ZodString;
        identitySchemaVersion: z.ZodNumber;
        identitySchemaHash: z.ZodString;
        producerCapabilityId: z.ZodString;
        consumerCapabilityId: z.ZodString;
        exportContractHash: z.ZodString;
    }, z.core.$strict>>;
}, z.core.$strict>;
export type DappInfrastructureAdapterDescriptorV1Preimage = z.infer<typeof DappInfrastructureAdapterDescriptorV1PreimageZod>;
export declare const DappInfrastructureAdapterDescriptorV1Zod: z.ZodObject<{
    schema: z.ZodLiteral<"network.xyo.dapp.infrastructure.adapter.descriptor" & {
        readonly __schema: true;
    }>;
    schemaVersion: z.ZodLiteral<1>;
    hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
    adapterId: z.ZodString;
    adapterVersion: z.ZodString;
    implementationHash: z.ZodString;
    infrastructureKind: z.ZodEnum<{
        vercel: "vercel";
        cloudflare: "cloudflare";
        kubernetes: "kubernetes";
        proxmox: "proxmox";
    }>;
    scopeIdentityFamily: z.ZodString;
    scopeIdentityContractHash: z.ZodString;
    scopeProofVersions: z.ZodArray<z.ZodNumber>;
    supportedContracts: z.ZodArray<z.ZodObject<{
        schema: z.ZodString;
        schemaVersion: z.ZodNumber;
        schemaHash: z.ZodString;
    }, z.core.$strict>>;
    capabilityIds: z.ZodArray<z.ZodString>;
    credentialRequirementIds: z.ZodArray<z.ZodString>;
    actionKinds: z.ZodArray<z.ZodString>;
    targetObjectIdentitySchemaVersion: z.ZodNumber;
    targetObjectIdentityContractHash: z.ZodString;
    targetObjectRoleNormalizationId: z.ZodString;
    targetObjectRoles: z.ZodArray<z.ZodString>;
    trustedRuntimeArtifacts: z.ZodArray<z.ZodObject<{
        role: z.ZodEnum<{
            "kubernetes-startup-gate": "kubernetes-startup-gate";
            "proxmox-bootstrap-agent": "proxmox-bootstrap-agent";
        }>;
        artifactFormat: z.ZodEnum<{
            "oci-image": "oci-image";
            "executable-bundle": "executable-bundle";
        }>;
        contentDigest: z.ZodString;
        entrypointContractHash: z.ZodString;
        platformContractHash: z.ZodString;
    }, z.core.$strict>>;
    supportedExportContracts: z.ZodArray<z.ZodObject<{
        schema: z.ZodLiteral<"network.xyo.dapp.managed.capability.export.contract" & {
            readonly __schema: true;
        }>;
        schemaVersion: z.ZodLiteral<1>;
        hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
        exportContractId: z.ZodString;
        exportContractVersion: z.ZodNumber;
        exportNormalizationId: z.ZodString;
        identitySchema: z.ZodString;
        identitySchemaVersion: z.ZodNumber;
        identitySchemaHash: z.ZodString;
        producerCapabilityId: z.ZodString;
        consumerCapabilityId: z.ZodString;
        exportContractHash: z.ZodString;
    }, z.core.$strict>>;
    adapterDescriptorHash: z.ZodString;
}, z.core.$strict>;
export type DappInfrastructureAdapterDescriptorV1 = z.infer<typeof DappInfrastructureAdapterDescriptorV1Zod>;
/** D-002 kind `infrastructure-adapter-descriptor` version 1. */
export declare function hashDappInfrastructureAdapterDescriptorV1(preimage: unknown): string;
export declare function verifyDappInfrastructureAdapterDescriptorV1(value: unknown): DappInfrastructureAdapterDescriptorV1;
export declare const DappInfrastructureDescriptorV1PreimageZod: z.ZodObject<{
    schema: z.ZodLiteral<"network.xyo.dapp.infrastructure.descriptor" & {
        readonly __schema: true;
    }>;
    schemaVersion: z.ZodLiteral<1>;
    hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
    infrastructureId: z.ZodString;
    kind: z.ZodEnum<{
        vercel: "vercel";
        cloudflare: "cloudflare";
        kubernetes: "kubernetes";
        proxmox: "proxmox";
    }>;
    expectedScopeCommitment: z.ZodString;
    adapterDescriptorHash: z.ZodString;
}, z.core.$strict>;
export type DappInfrastructureDescriptorV1Preimage = z.infer<typeof DappInfrastructureDescriptorV1PreimageZod>;
export declare const DappInfrastructureDescriptorV1Zod: z.ZodObject<{
    schema: z.ZodLiteral<"network.xyo.dapp.infrastructure.descriptor" & {
        readonly __schema: true;
    }>;
    schemaVersion: z.ZodLiteral<1>;
    hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
    infrastructureId: z.ZodString;
    kind: z.ZodEnum<{
        vercel: "vercel";
        cloudflare: "cloudflare";
        kubernetes: "kubernetes";
        proxmox: "proxmox";
    }>;
    expectedScopeCommitment: z.ZodString;
    adapterDescriptorHash: z.ZodString;
    infrastructureDescriptorHash: z.ZodString;
}, z.core.$strict>;
export type DappInfrastructureDescriptorV1 = z.infer<typeof DappInfrastructureDescriptorV1Zod>;
/** D-002 kind `infrastructure-descriptor` version 1. */
export declare function hashDappInfrastructureDescriptorV1(preimage: unknown): string;
export declare function verifyDappInfrastructureDescriptorV1(value: unknown): DappInfrastructureDescriptorV1;
export declare const DappInfrastructurePolicyIdentityV1PreimageZod: z.ZodObject<{
    schema: z.ZodLiteral<"network.xyo.dapp.infrastructure.policy.identity" & {
        readonly __schema: true;
    }>;
    schemaVersion: z.ZodLiteral<1>;
    hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
    kind: z.ZodEnum<{
        vercel: "vercel";
        cloudflare: "cloudflare";
        kubernetes: "kubernetes";
        proxmox: "proxmox";
    }>;
    adapterDescriptorHash: z.ZodString;
    policySchema: z.ZodString;
    policySchemaVersion: z.ZodNumber;
    policySchemaHash: z.ZodString;
    policy: z.ZodType<import("./jsonValue.ts").JsonObject, unknown, z.core.$ZodTypeInternals<import("./jsonValue.ts").JsonObject, unknown>>;
}, z.core.$strict>;
export type DappInfrastructurePolicyIdentityV1Preimage = z.infer<typeof DappInfrastructurePolicyIdentityV1PreimageZod>;
export declare const DappInfrastructurePolicyIdentityV1Zod: z.ZodObject<{
    schema: z.ZodLiteral<"network.xyo.dapp.infrastructure.policy.identity" & {
        readonly __schema: true;
    }>;
    schemaVersion: z.ZodLiteral<1>;
    hashAlgorithm: z.ZodLiteral<"jcs-sha256-v1">;
    kind: z.ZodEnum<{
        vercel: "vercel";
        cloudflare: "cloudflare";
        kubernetes: "kubernetes";
        proxmox: "proxmox";
    }>;
    adapterDescriptorHash: z.ZodString;
    policySchema: z.ZodString;
    policySchemaVersion: z.ZodNumber;
    policySchemaHash: z.ZodString;
    policy: z.ZodType<import("./jsonValue.ts").JsonObject, unknown, z.core.$ZodTypeInternals<import("./jsonValue.ts").JsonObject, unknown>>;
    infrastructurePolicyHash: z.ZodString;
}, z.core.$strict>;
export type DappInfrastructurePolicyIdentityV1 = z.infer<typeof DappInfrastructurePolicyIdentityV1Zod>;
/** D-002 kind `infrastructure-policy` version 1. */
export declare function hashDappInfrastructurePolicyIdentityV1(preimage: unknown): string;
export declare function verifyDappInfrastructurePolicyIdentityV1(value: unknown): DappInfrastructurePolicyIdentityV1;
/**
 * The public-safe projection of one selected, registered infrastructure
 * instance. The host derives it from a protected operator entry; the portable
 * kit only checks that its descriptor hash reproduces from its own fields, so
 * a lock or intent can never carry an instance whose kind, scope commitment,
 * and adapter disagree with its descriptor identity.
 */
export declare const DappSelectedInfrastructureV1Zod: z.ZodObject<{
    infrastructureId: z.ZodString;
    kind: z.ZodEnum<{
        vercel: "vercel";
        cloudflare: "cloudflare";
        kubernetes: "kubernetes";
        proxmox: "proxmox";
    }>;
    adapterId: z.ZodString;
    adapterVersion: z.ZodString;
    adapterDescriptorHash: z.ZodString;
    infrastructureDescriptorHash: z.ZodString;
    infrastructurePolicyHash: z.ZodString;
    expectedScopeCommitment: z.ZodString;
}, z.core.$strict>;
export type DappSelectedInfrastructureV1 = z.infer<typeof DappSelectedInfrastructureV1Zod>;
export declare function compareDappSelectedInfrastructureV1(left: DappSelectedInfrastructureV1, right: DappSelectedInfrastructureV1): number;
//# sourceMappingURL=infrastructureDescriptor.d.ts.map