import type { PreconditionSpec } from './execution-types.js';
/**
 * AUT-239 — signing side of the AutoKap Scenario cookie.
 *
 * The runner (this CLI) signs; the client app's `@autokap/scenario` package
 * verifies. At runtime these live in two separate processes/deployments, so the
 * only thing they share is the WIRE FORMAT, not a module. We therefore keep a
 * tiny local signer here rather than taking a runtime dependency on the
 * published `@autokap/scenario` package. `scenario-cookie.test.ts` locks the
 * format against the real resolver so the two can never drift.
 *
 * Format: `<id>.<base64url(HMAC-SHA256(secret, id))>`.
 */
export declare const SCENARIO_COOKIE_NAME = "__ak_scenario";
export declare function signScenarioCookie(id: string, secret: string): string;
/** A cookie ready for Playwright's `context.addCookies`. */
export interface PreconditionCookie {
    name: string;
    value: string;
    domain: string;
    path?: string;
    secure: boolean;
}
/**
 * Build the cookie set injected before navigation: the preset's seed cookies
 * plus, when configured, the signed scenario switch.
 *
 * `secure` is derived from the target protocol — a Secure cookie is never sent
 * over http://localhost, so the runner must NOT default it to true (that would
 * silently drop seed/scenario cookies in local captures and fall back to real
 * data). Returns a `warning` when a scenario is requested but unsignable.
 */
export declare function buildPreconditionCookies(preconditions: Pick<PreconditionSpec, 'cookies' | 'scenario'>, baseUrl: string, secret: string | undefined): {
    cookies: PreconditionCookie[];
    warning?: string;
};