import { z } from "zod"; import { type ProtectedX402ToolFacadeResult, X402_PROTECTED_TOOL_NAME } from "../protected-tool-facade"; import { type X402_PROTECTED_TOOL_READINESS_VERSION, type X402ProtectedToolReadinessAuthorityBoundary, type X402ProtectedToolReadinessSnapshot } from "../protected-tool-readiness"; export declare const X402_PROTECTED_TOOL_PROFILE_VERSION: "handshake.adapter.x402-protected-tool-profile.v1"; export declare const X402ProtectedToolHostFamilySchema: z.ZodEnum<{ codex_local: "codex_local"; claude_code_mcp: "claude_code_mcp"; hermes: "hermes"; openclaw: "openclaw"; generic_mcp: "generic_mcp"; }>; export type X402ProtectedToolHostFamily = z.infer; export declare const X402ProtectedToolHostBypassPostureSchema: z.ZodEnum<{ profile_scoped_only: "profile_scoped_only"; raw_sibling_paths_named: "raw_sibling_paths_named"; raw_sibling_paths_not_controlled: "raw_sibling_paths_not_controlled"; host_hooks_advisory_only: "host_hooks_advisory_only"; host_behavior_unverified: "host_behavior_unverified"; host_wide_containment_not_claimed: "host_wide_containment_not_claimed"; }>; export type X402ProtectedToolHostBypassPosture = z.infer; export declare const X402ProtectedToolGatewayReadinessSnapshotSchema: z.ZodObject<{ schemaVersion: z.ZodDefault>; readinessStatus: z.ZodEnum<{ not_ready: "not_ready"; local_posture_evidence_present: "local_posture_evidence_present"; trusted_gateway_ready: "trusted_gateway_ready"; }>; readinessScope: z.ZodDefault>; readinessProofLevel: z.ZodDefault>; trustedReadiness: z.ZodBoolean; requiredNextMechanism: z.ZodEnum<{ initialize_project: "initialize_project"; compile_install: "compile_install"; record_probe_report: "record_probe_report"; register_control_plane_install: "register_control_plane_install"; ready_for_runtime_facade: "ready_for_runtime_facade"; }>; gatewayReadinessRef: z.ZodNullable; gatewayReadinessDigest: z.ZodDefault>; readinessExpiresAt: z.ZodDefault>; installDigest: z.ZodDefault>; probePostureDigest: z.ZodDefault>; paymentRequirementsDigest: z.ZodDefault>; selectedPaymentRequirementDigest: z.ZodDefault>; gatewayId: z.ZodNullable; gatewayRegistrationRef: z.ZodDefault>; gatewayCredentialRefDigest: z.ZodDefault>; gatewayCredentialCustodyStatus: z.ZodDefault>; gatewayCustodyProofPacketRef: z.ZodDefault>; gatewayCustodyProofPacketDigest: z.ZodDefault>; gatewayCustodyClaimLevel: z.ZodDefault>; gatewayCustodyExternalVerificationStatus: z.ZodDefault>; gatewayCustodyProofExpiresAt: z.ZodDefault>; gatewayPosture: z.ZodDefault>; policyVersionRef: z.ZodNullable; policyVersionDigest: z.ZodDefault>; gatewayRegistryEntryRef: z.ZodDefault>; operatingEnvelopeRef: z.ZodDefault>; rawCredentialRefsIncluded: z.ZodDefault>; rawSiblingPosture: z.ZodDefault>; rawSiblingProofRefs: z.ZodDefault>; authorityBoundary: z.ZodDefault; createsAuthority: z.ZodLiteral; createsPolicyDecision: z.ZodLiteral; createsGreenlight: z.ZodLiteral; performsGatewayCheck: z.ZodLiteral; performsMutation: z.ZodLiteral; resolvesCredential: z.ZodLiteral; invokesSigner: z.ZodLiteral; createsPaymentMaterial: z.ZodLiteral; createsPaymentSignature: z.ZodLiteral; exportsReceipt: z.ZodLiteral; mintsTerminalCertificate: z.ZodLiteral; claimsHostedOperation: z.ZodLiteral; claimsProviderCustody: z.ZodLiteral; claimsSettlement: z.ZodLiteral; claimsHostWideContainment: z.ZodLiteral; certifiesMarketplace: z.ZodLiteral; }, z.core.$strict>>; proofGapReasonCodes: z.ZodDefault>; evidenceRefs: z.ZodDefault>; }, z.core.$strict>; export type X402ProtectedToolGatewayReadinessSnapshot = X402ProtectedToolReadinessSnapshot; export declare const ProtectedX402ToolHostProfileInputSchema: z.ZodObject<{ schemaVersion: z.ZodDefault>; profileId: z.ZodString; hostFamily: z.ZodEnum<{ codex_local: "codex_local"; claude_code_mcp: "claude_code_mcp"; hermes: "hermes"; openclaw: "openclaw"; generic_mcp: "generic_mcp"; }>; hostProfileRef: z.ZodString; runtimeAdapterRef: z.ZodString; toolCatalogDigest: z.ZodString; metadataDigest: z.ZodString; gatewayReadiness: z.ZodObject<{ schemaVersion: z.ZodDefault>; readinessStatus: z.ZodEnum<{ not_ready: "not_ready"; local_posture_evidence_present: "local_posture_evidence_present"; trusted_gateway_ready: "trusted_gateway_ready"; }>; readinessScope: z.ZodDefault>; readinessProofLevel: z.ZodDefault>; trustedReadiness: z.ZodBoolean; requiredNextMechanism: z.ZodEnum<{ initialize_project: "initialize_project"; compile_install: "compile_install"; record_probe_report: "record_probe_report"; register_control_plane_install: "register_control_plane_install"; ready_for_runtime_facade: "ready_for_runtime_facade"; }>; gatewayReadinessRef: z.ZodNullable; gatewayReadinessDigest: z.ZodDefault>; readinessExpiresAt: z.ZodDefault>; installDigest: z.ZodDefault>; probePostureDigest: z.ZodDefault>; paymentRequirementsDigest: z.ZodDefault>; selectedPaymentRequirementDigest: z.ZodDefault>; gatewayId: z.ZodNullable; gatewayRegistrationRef: z.ZodDefault>; gatewayCredentialRefDigest: z.ZodDefault>; gatewayCredentialCustodyStatus: z.ZodDefault>; gatewayCustodyProofPacketRef: z.ZodDefault>; gatewayCustodyProofPacketDigest: z.ZodDefault>; gatewayCustodyClaimLevel: z.ZodDefault>; gatewayCustodyExternalVerificationStatus: z.ZodDefault>; gatewayCustodyProofExpiresAt: z.ZodDefault>; gatewayPosture: z.ZodDefault>; policyVersionRef: z.ZodNullable; policyVersionDigest: z.ZodDefault>; gatewayRegistryEntryRef: z.ZodDefault>; operatingEnvelopeRef: z.ZodDefault>; rawCredentialRefsIncluded: z.ZodDefault>; rawSiblingPosture: z.ZodDefault>; rawSiblingProofRefs: z.ZodDefault>; authorityBoundary: z.ZodDefault; createsAuthority: z.ZodLiteral; createsPolicyDecision: z.ZodLiteral; createsGreenlight: z.ZodLiteral; performsGatewayCheck: z.ZodLiteral; performsMutation: z.ZodLiteral; resolvesCredential: z.ZodLiteral; invokesSigner: z.ZodLiteral; createsPaymentMaterial: z.ZodLiteral; createsPaymentSignature: z.ZodLiteral; exportsReceipt: z.ZodLiteral; mintsTerminalCertificate: z.ZodLiteral; claimsHostedOperation: z.ZodLiteral; claimsProviderCustody: z.ZodLiteral; claimsSettlement: z.ZodLiteral; claimsHostWideContainment: z.ZodLiteral; certifiesMarketplace: z.ZodLiteral; }, z.core.$strict>>; proofGapReasonCodes: z.ZodDefault>; evidenceRefs: z.ZodDefault>; }, z.core.$strict>; facadeInput: z.ZodObject<{ schemaVersion: z.ZodDefault>; requestId: z.ZodString; principalId: z.ZodString; agentId: z.ZodString; principalIntentRef: z.ZodString; generatedCodeOrSpecRef: z.ZodString; runtimeAdapterRef: z.ZodString; runId: z.ZodString; dispatchBoundaryRef: z.ZodString; dispatchRef: z.ZodString; operatingEnvelopeId: z.ZodString; toolCapabilityId: z.ZodString; actionTypeId: z.ZodString; gatewayRegistryEntryId: z.ZodString; gatewayId: z.ZodString; policyOwnerRef: z.ZodString; evidenceConsumerRef: z.ZodString; contractExpiresAt: z.ZodString; idempotencyKey: z.ZodString; metadataDigest: z.ZodString; toolCatalogDigest: z.ZodString; actionCatalogDigest: z.ZodString; gatewayRegistryDigest: z.ZodString; metadataFreshness: z.ZodDefault>; policyFreshness: z.ZodDefault>; installReadiness: z.ZodDefault>; gatewayPosture: z.ZodDefault>; readinessContractVersion: z.ZodDefault>; readinessProofLevel: z.ZodDefault>; gatewayReadinessRef: z.ZodString; gatewayReadinessDigest: z.ZodString; readinessExpiresAt: z.ZodString; installDigest: z.ZodString; probePostureDigest: z.ZodString; gatewayRegistrationRef: z.ZodString; gatewayCredentialRefDigest: z.ZodString; gatewayCredentialCustodyStatus: z.ZodEnum<{ unknown: "unknown"; gateway_held: "gateway_held"; fixture_gateway_held: "fixture_gateway_held"; agent_exposed: "agent_exposed"; }>; gatewayCustodyProofPacketRef: z.ZodString; gatewayCustodyProofPacketDigest: z.ZodString; gatewayCustodyClaimLevel: z.ZodEnum<{ proof_gap: "proof_gap"; local_fixture: "local_fixture"; customer_gateway_evidence: "customer_gateway_evidence"; provider_gateway_evidence: "provider_gateway_evidence"; }>; gatewayCustodyExternalVerificationStatus: z.ZodEnum<{ not_required: "not_required"; required_before_live_claim: "required_before_live_claim"; verified_by_official_source: "verified_by_official_source"; }>; gatewayCustodyProofExpiresAt: z.ZodString; rawSiblingPosture: z.ZodDefault>; rawSiblingProofRefs: z.ZodDefault>; readinessAuthorityBoundary: z.ZodDefault; createsAuthority: z.ZodLiteral; createsPolicyDecision: z.ZodLiteral; createsGreenlight: z.ZodLiteral; performsGatewayCheck: z.ZodLiteral; performsMutation: z.ZodLiteral; resolvesCredential: z.ZodLiteral; invokesSigner: z.ZodLiteral; createsPaymentMaterial: z.ZodLiteral; createsPaymentSignature: z.ZodLiteral; exportsReceipt: z.ZodLiteral; mintsTerminalCertificate: z.ZodLiteral; claimsHostedOperation: z.ZodLiteral; claimsProviderCustody: z.ZodLiteral; claimsSettlement: z.ZodLiteral; claimsHostWideContainment: z.ZodLiteral; certifiesMarketplace: z.ZodLiteral; }, z.core.$strict>>; policyVersionRef: z.ZodString; policyVersionDigest: z.ZodString; rawCredentialRefsIncluded: z.ZodDefault>; endpointUrl: z.ZodString; payee: z.ZodString; payTo: z.ZodString; network: z.ZodString; token: z.ZodString; asset: z.ZodString; atomicAmount: z.ZodString; x402EvidenceProfile: z.ZodLiteral<"official_payment_required">; paymentRequirementsDigest: z.ZodString; paymentRequiredEvidenceRef: z.ZodString; facilitatorRef: z.ZodDefault>; intendedHttpMethod: z.ZodString; intendedRequestUrl: z.ZodString; intendedRequestBodyPosture: z.ZodEnum<{ unsupported: "unsupported"; digest_bound: "digest_bound"; no_body: "no_body"; omitted: "omitted"; }>; intendedRequestBodyDigest: z.ZodNullable; selectedHeadersDigest: z.ZodString; providerEnvironmentPosture: z.ZodEnum<{ unknown: "unknown"; local_reference_sandbox: "local_reference_sandbox"; external_sandbox: "external_sandbox"; live: "live"; }>; providerEnvironmentRef: z.ZodNullable; x402Version: z.ZodNumber; x402Scheme: z.ZodLiteral<"exact">; maxTimeoutSeconds: z.ZodNumber; selectedPaymentRequirementIndex: z.ZodNumber; selectedPaymentRequirementDigest: z.ZodString; sdkPackageVersions: z.ZodRecord; extensionKeys: z.ZodDefault>; sequenceNumber: z.ZodDefault; loopDetected: z.ZodDefault; retryDetected: z.ZodDefault; branchDetected: z.ZodDefault; correlationRef: z.ZodDefault>; evidenceRefs: z.ZodDefault>; }, z.core.$strict>; transcriptRef: z.ZodDefault>; evidenceRefs: z.ZodDefault>; }, z.core.$strict>; export type ProtectedX402ToolHostProfileInput = z.input; export declare const X402ProtectedToolHostProfileAuthorityBoundarySchema: z.ZodObject<{ createsAuthority: z.ZodLiteral; createsPolicyDecision: z.ZodLiteral; createsGreenlight: z.ZodLiteral; performsGatewayCheck: z.ZodLiteral; performsMutation: z.ZodLiteral; resolvesCredential: z.ZodLiteral; invokesSigner: z.ZodLiteral; createsPaymentMaterial: z.ZodLiteral; createsPaymentSignature: z.ZodLiteral; exportsReceipt: z.ZodLiteral; mintsTerminalCertificate: z.ZodLiteral; claimsHostWideContainment: z.ZodLiteral; claimsSettlement: z.ZodLiteral; claimsProviderCustody: z.ZodLiteral; claimsHostedOperation: z.ZodLiteral; certifiesMarketplace: z.ZodLiteral; establishesCrossOrgTrust: z.ZodLiteral; }, z.core.$strict>; export type X402ProtectedToolHostProfileAuthorityBoundary = z.infer; export declare const x402ProtectedToolHostProfileAuthorityBoundary: { createsAuthority: false; createsPolicyDecision: false; createsGreenlight: false; performsGatewayCheck: false; performsMutation: false; resolvesCredential: false; invokesSigner: false; createsPaymentMaterial: false; createsPaymentSignature: false; exportsReceipt: false; mintsTerminalCertificate: false; claimsHostWideContainment: false; claimsSettlement: false; claimsProviderCustody: false; claimsHostedOperation: false; certifiesMarketplace: false; establishesCrossOrgTrust: false; }; export declare const X402ProtectedToolHostProfileDescriptorSchema: z.ZodObject<{ hostFamily: z.ZodEnum<{ codex_local: "codex_local"; claude_code_mcp: "claude_code_mcp"; hermes: "hermes"; openclaw: "openclaw"; generic_mcp: "generic_mcp"; }>; installSurface: z.ZodEnum<{ codex_local_profile: "codex_local_profile"; claude_code_managed_mcp: "claude_code_managed_mcp"; hermes_tool_packet: "hermes_tool_packet"; openclaw_tool_packet: "openclaw_tool_packet"; generic_mcp_stdio: "generic_mcp_stdio"; }>; transport: z.ZodEnum<{ local_profile: "local_profile"; managed_mcp: "managed_mcp"; tool_packet: "tool_packet"; stdio_mcp: "stdio_mcp"; }>; toolName: z.ZodLiteral<"handshake.actions.x402_payment.propose">; hostBypassPosture: z.ZodArray>; rawSiblingPosture: z.ZodEnum<{ unknown: "unknown"; named_not_controlled: "named_not_controlled"; }>; hostWideContainmentClaimed: z.ZodLiteral; runtimeExclusiveClaimed: z.ZodLiteral; }, z.core.$strict>; export type X402ProtectedToolHostProfileDescriptor = z.infer; declare const X402ProtectedToolHostProfileTranscriptStepSchema: z.ZodObject<{ step: z.ZodEnum<{ host_profile_selected: "host_profile_selected"; gateway_readiness_checked: "gateway_readiness_checked"; facade_preflight: "facade_preflight"; }>; status: z.ZodEnum<{ skipped: "skipped"; blocked: "blocked"; passed: "passed"; }>; reasonCodes: z.ZodArray; evidenceRefs: z.ZodArray; }, z.core.$strict>; export type X402ProtectedToolHostProfileTranscriptStep = z.infer; export type X402ProtectedToolHostProfileOutcome = "profile_prepared" | "profile_not_ready" | "facade_challenge" | "profile_invalid"; export type X402ProtectedToolHostProfileNextAction = "read_evidence" | "register_control_plane_install" | "fix_install" | "reload_metadata" | "wait_for_gateway" | "recraft_request" | "stop"; export type X402ProtectedToolHostProfileResult = { schemaVersion: typeof X402_PROTECTED_TOOL_PROFILE_VERSION; profileId: string; hostFamily: X402ProtectedToolHostFamily | "unknown"; hostProfileRef: string | null; runtimeAdapterRef: string | null; toolName: typeof X402_PROTECTED_TOOL_NAME; actionClass: "x402_payment.exact"; protectedSurfaceKind: "x402_payment"; outcome: X402ProtectedToolHostProfileOutcome; nextAction: X402ProtectedToolHostProfileNextAction; profileDescriptor: X402ProtectedToolHostProfileDescriptor | null; readinessContractVersion: typeof X402_PROTECTED_TOOL_READINESS_VERSION | null; gatewayReadinessRef: string | null; gatewayReadinessDigest: string | null; readinessProofLevel: X402ProtectedToolGatewayReadinessSnapshot["readinessProofLevel"]; gatewayCredentialRefDigest: string | null; gatewayCredentialCustodyStatus: X402ProtectedToolGatewayReadinessSnapshot["gatewayCredentialCustodyStatus"]; gatewayCustodyProofPacketRef: string | null; gatewayCustodyProofPacketDigest: string | null; gatewayCustodyClaimLevel: X402ProtectedToolGatewayReadinessSnapshot["gatewayCustodyClaimLevel"]; gatewayCustodyExternalVerificationStatus: X402ProtectedToolGatewayReadinessSnapshot["gatewayCustodyExternalVerificationStatus"]; gatewayCustodyProofExpiresAt: string | null; gatewayId: string | null; policyVersionRef: string | null; rawSiblingPosture: X402ProtectedToolGatewayReadinessSnapshot["rawSiblingPosture"] | null; readinessAuthorityBoundary: X402ProtectedToolReadinessAuthorityBoundary; facadeInvoked: boolean; facadeOutcome: ProtectedX402ToolFacadeResult["outcome"] | null; facadeResult: ProtectedX402ToolFacadeResult | null; runtimeIngressBlock: ProtectedX402ToolFacadeResult["runtimeIngressBlock"]; transcriptRef: string | null; transcript: X402ProtectedToolHostProfileTranscriptStep[]; authorityCreated: false; greenlightCreated: false; gatewayCheckPerformed: false; mutationAttempted: false; credentialMaterialIncluded: false; mutationCommandIncluded: false; rawInternalRecordIncluded: false; receiptExportCreated: false; authorityCertificateMinted: false; authorityBoundary: X402ProtectedToolHostProfileAuthorityBoundary; reasonCodes: string[]; challengeRef: string | null; evidenceRefs: string[]; nonClaims: readonly string[]; }; export declare function buildProtectedX402ToolHostProfile(inputValue: unknown): X402ProtectedToolHostProfileResult; export {};