import type { HistoricalKeyResolver } from '../../v2/identity-binding/types.js';
export declare const APS_A2A_IDENTITY_EXTENSION = "https://agent-passport.org/a2a/extensions/identity/v1";
export interface A2AApsIdentityParamsV1 {
    agent_id: string;
    passport_uri: string;
    passport_sha256: string;
    principal_binding_uri?: string;
    principal_binding_sha256?: string;
    issued_at: string;
    expires_at: string;
}
export interface A2AAgentCardSignature {
    protected: string;
    signature: string;
    header?: Record<string, unknown>;
}
export type A2AAgentCardObject = Record<string, unknown> & {
    capabilities: Record<string, unknown> & {
        extensions?: unknown[];
    };
    signatures?: A2AAgentCardSignature[];
};
export interface A2AApsIdentityVerification {
    state: 'valid' | 'invalid' | 'indeterminate' | 'unsupported';
    code: string;
    agent_id?: string;
    card_signature: 'verified' | 'rejected' | 'unresolved';
    passport: 'resolved' | 'mismatch' | 'unresolved';
    principal_binding: 'resolved' | 'mismatch' | 'unresolved' | 'absent';
}
export declare function attachApsIdentityExtensionV1(card: A2AAgentCardObject, params: A2AApsIdentityParamsV1, required?: boolean): A2AAgentCardObject;
export declare function signA2AAgentCardV1(card: A2AAgentCardObject, privateKeyHex: string, kid: string): A2AAgentCardObject;
export declare function verifyApsA2AAgentCardV1(candidate: unknown, options: {
    resolve_key: HistoricalKeyResolver;
    resolve_artifact?: (uri: string) => Uint8Array | Promise<Uint8Array>;
    now?: string;
}): Promise<A2AApsIdentityVerification>;
/** Legacy custom fields do not carry the A2A JWS payload and cannot verify. */
export declare function assessLegacyAgentPassportExtension(_candidate: unknown): {
    state: 'legacy_unverifiable';
    code: 'A2A_LEGACY_EXTENSION_UNSIGNED_PROJECTION';
};
export declare function getApsIdentityParamsV1(card: A2AAgentCardObject): A2AApsIdentityParamsV1;
//# sourceMappingURL=identity-v1.d.ts.map