import type { AuthScope } from './token-registry.js';
import type { DatabaseHostConsole } from '@zhin.js/plugin-runtime';
import { type ConsoleConfigSource, type ConsoleEndpointSummary } from '@zhin.js/console-protocol';
import { type ConsoleRpcExtendedCtx } from './console-rpc-extended/index.js';
/**
 * Console RPC 请求结构：未锚定 endpoint 的会话地址（结构对齐
 * `Omit<ConversationRef,'endpoint'>`；host/http 架构分层不允许依赖
 * `@zhin.js/im-contract`，故本地结构化声明，endpoint 由 ImRuntime 锚定）。
 */
export interface ConversationAddress {
    readonly kind: 'private' | 'group' | 'channel';
    readonly id: string;
    readonly parent?: Readonly<{
        readonly kind: 'group' | 'channel';
        readonly id: string;
    }>;
    readonly threadId?: string;
}
export type RuntimeConsoleRpcMessage = {
    readonly type?: unknown;
    readonly requestId?: unknown;
    readonly [key: string]: unknown;
};
export type RuntimeConsoleRpcReply = Record<string, unknown>;
export interface PluginInstallPlan {
    readonly packageName: string;
    readonly instanceKey: string;
    readonly alreadyDeclared: boolean;
    readonly alreadyInstalled: boolean;
    readonly restartRequired: boolean;
    readonly changes: Readonly<{
        readonly packageManifest: 'unchanged' | 'add-plugin';
        readonly config: 'unchanged' | 'create-entry' | 'schema-required';
    }>;
    readonly warnings: readonly string[];
}
export interface PluginUninstallPlan {
    readonly packageName: string;
    readonly instanceKey: string;
    readonly installed: boolean;
    readonly declared: boolean;
    readonly hasConfig: boolean;
    readonly restartRequired: boolean;
}
export interface PluginUpdatePlan {
    readonly packageName: string;
    readonly instanceKey: string;
    readonly currentVersion: string | null;
    readonly targetVersion: string;
    readonly installed: boolean;
    readonly declared: boolean;
    readonly alreadyCurrent: boolean;
    readonly restartRequired: boolean;
}
export interface PluginManagementPort {
    planInstall(packageName: string): Promise<PluginInstallPlan>;
    install?(packageName: string, expectedRevision?: string): Promise<Readonly<{
        readonly plan: PluginInstallPlan;
        readonly restartRequired: boolean;
    }>>;
    planUninstall?(packageName: string): Promise<PluginUninstallPlan>;
    uninstall?(packageName: string, expectedRevision?: string): Promise<Readonly<{
        readonly plan: PluginUninstallPlan;
        readonly restartRequired: boolean;
    }>>;
    planUpdate?(packageName: string, targetVersion: string): Promise<PluginUpdatePlan>;
    update?(packageName: string, targetVersion: string, expectedRevision?: string): Promise<Readonly<{
        readonly plan: PluginUpdatePlan;
        readonly installedVersion: string;
        readonly restartRequired: boolean;
    }>>;
}
export interface PluginConfigValidation {
    readonly valid: boolean;
    readonly errors: readonly {
        readonly path: string;
        readonly message: string;
    }[];
    readonly missingEnv: readonly string[];
}
export type RuntimeConsolePage = {
    readonly id: string;
    readonly localName: string;
    readonly title: string;
    readonly route: string;
    readonly module: string;
    readonly order: number;
    readonly hash: string;
};
export type RuntimeConsoleRpcContext = {
    readonly authScope: AuthScope;
    listPages(): Promise<readonly RuntimeConsolePage[]>;
    /** Optional project config accessors for read-only config RPCs. */
    readConfigSource?(): Promise<ConsoleConfigSource>;
    readConfigDocument?(): Promise<Record<string, unknown>>;
    /** Full-scope, revision-checked replacement of the active Root config source. */
    replaceConfigSource?(source: string, expectedRevision: string): Promise<{
        readonly revision: string;
        readonly restartRequired: boolean;
    }>;
    /**
     * Full-scope write: set `document[pluginName] = data` and persist.
     * Returns whether a process restart is required.
     */
    setConfigKey?(pluginName: string, data: unknown): Promise<{
        restartRequired: boolean;
    }>;
    /** Persist a declared child Plugin lifecycle state. Takes effect after restart. */
    setPluginEnabled?(instanceKey: string, enabled: boolean): Promise<Readonly<{
        disabled: readonly string[];
    }>>;
    /** Read-only install planning shared by Console Web and CLI surfaces. */
    pluginManagement?: PluginManagementPort;
    validatePluginConfig?(pluginName: string, data: unknown): Promise<PluginConfigValidation>;
    diagnosePlugin?(pluginName: string): Promise<unknown>;
    /** Atomic, revision-checked runtime Workroom Catalog read/write. */
    readWorkroomCatalog?(): Promise<Readonly<{
        agents: Readonly<Record<string, unknown>>;
        workrooms: Readonly<Record<string, unknown>>;
        revision: string;
        /** Principal bound to the authenticated Console token, never caller supplied. */
        principalId?: string;
    }>>;
    setWorkroomCatalog?(workrooms: unknown, expectedRevision: string): Promise<Readonly<{
        revision: string;
        restartRequired: boolean;
    }>>;
    /** Project file manager (allowlisted paths under project root). */
    listProjectFiles?(): Promise<readonly unknown[]>;
    readProjectFile?(filePath: string): Promise<{
        content: string;
        size: number;
    }>;
    saveProjectFile?(filePath: string, content: string): Promise<void>;
    listEnvFiles?(): Promise<readonly {
        name: string;
        exists: boolean;
    }[]>;
    readEnvFile?(filename: string): Promise<string>;
    writeEnvFile?(filename: string, content: string): Promise<void>;
    /** Optional schema accessors (plugin schema.json / Runtime schema registry). */
    getSchema?(pluginName?: string): Promise<unknown>;
    getAllSchemas?(): Promise<Record<string, unknown>>;
    /** Optional Adapter endpoint Console surface (Sandbox / Remote Console). */
    listEndpoints?(): Promise<readonly ConsoleEndpointSummary[]>;
    getEndpoint?(adapter: string, endpointKey: string): Promise<ConsoleEndpointSummary | null>;
    sendEndpointMessage?(input: RuntimeEndpointSendInput): Promise<{
        messageId: string;
    }>;
    /** Optional Database host surface (CLI wires DatabaseHost from plugin-runtime). */
    dbInfo?(): Promise<RuntimeDatabaseInfo> | RuntimeDatabaseInfo;
    dbTables?(): Promise<readonly string[]> | readonly string[];
    database?: DatabaseHostConsole;
    /** Full-scope: request process restart (CLI daemon watches exit code). */
    requestRestart?(): Promise<void> | void;
    /**
     * Optional console event sink (`/api/events` SSE fan-out). Called after
     * successful mutations: `config:updated` / `system:restarting`.
     */
    publishEvent?(type: string, data: unknown): void;
    /** Extended RPC surface（cron/schedule、endpoint 社交/inbox），fullScope 由 authScope 推导。 */
    extended?: Omit<ConsoleRpcExtendedCtx, 'fullScope'>;
};
export type RuntimeDatabaseInfo = {
    readonly dialect: string | null;
    readonly connected: boolean;
    readonly tables: number;
};
export type RuntimeEndpointSendInput = {
    readonly adapter: string;
    readonly endpointKey: string;
    readonly conversation: ConversationAddress;
    readonly content: unknown;
};
export declare function pickRpcReply(message: RuntimeConsoleRpcMessage, payloads: readonly RuntimeConsoleRpcReply[]): RuntimeConsoleRpcReply | null;
export declare function dispatchRuntimeConsoleRpc(message: RuntimeConsoleRpcMessage, ctx: RuntimeConsoleRpcContext): Promise<RuntimeConsoleRpcReply[]>;
/** HTTP paths under apiBase that demo scope may call (ADR 0016). */
export declare function isDemoHttpAllowed(method: string, pathname: string, apiBase: string): boolean;