/** `sha256:` over the raw implementation bytes.
 *
 *  Byte-identical to what `createToolRegistryEntry` and `verifyToolIntegrity` already
 *  compute for `implementationHash`, and exported here so a caller can obtain the observed
 *  digest without minting a registry entry. The content may be source, a binary, or an
 *  endpoint descriptor: this function hashes exactly the bytes it is given and interprets
 *  nothing. */
export declare function capabilityImplementationDigest(implementation: string | Buffer): string;
/** `sha256:` over DOMAIN || 0x00 || JCS(metadata).
 *
 *  DISTINCT FROM THE IMPLEMENTATION DIGEST, WHICH IS THE WHOLE POINT. A tool can keep its
 *  name and its implementation bytes while its declared description, schema or permissions
 *  change, gaining a destructive permission without any change to the grant. An
 *  implementation digest cannot see that; this one can.
 *
 *  The domain-separated preimage follows the style draft-03 section 4.1 uses for its own
 *  digests, verbatim:
 *
 *    payload_ref = lowercase-hex(SHA-256("APS-ACTION-PAYLOAD-V1" || 0x00 || JCS(payload)))
 *
 *  draft-03 does not define a tool-metadata digest, so `domain` is REQUIRED and has no
 *  default: a default here would mint protocol vocabulary this module has no standing to
 *  mint. `CAPABILITY_METADATA_DOMAIN_CBD_V0` is the one label already in use by a published
 *  candidate fixture family, offered as a value to pass rather than as a default.
 *
 *  The canonical bytes are RFC 8785 JCS, which preserves `null` members. The SDK's legacy
 *  `canonicalize` strips them, so the two are NOT interchangeable for this preimage. */
export declare function capabilityMetadataDigest(metadata: unknown, domain: string): string;
/** The metadata-digest domain the `aps-capability-binding-drift-v0` candidate fixture
 *  family declares. Offered so a caller reproducing that family passes the same label, not
 *  as a protocol constant and not as a default. PROPOSED. */
export declare const CAPABILITY_METADATA_DOMAIN_CBD_V0 = "APS-CBD-TOOL-METADATA-V0";
//# sourceMappingURL=digest.d.ts.map