import { z } from "zod";
export declare const RegisterGatewayCredentialRefInputSchema: z.ZodObject<{
    tenantId: z.ZodString;
    organizationId: z.ZodString;
    gatewayCredentialRefId: z.ZodOptional<z.ZodString>;
    principalId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    gatewayId: z.ZodString;
    gatewayRegistryEntryId: z.ZodString;
    protectedSurfaceKind: z.ZodString;
    actionClasses: z.ZodArray<z.ZodString>;
    resourceRefs: z.ZodArray<z.ZodString>;
    resourceNamespaceRef: z.ZodString;
    credentialKind: z.ZodString;
    custodyStatus: z.ZodEnum<{
        unknown: "unknown";
        gateway_held: "gateway_held";
        fixture_gateway_held: "fixture_gateway_held";
        gateway_resolved_from_vault: "gateway_resolved_from_vault";
        provider_gateway_held: "provider_gateway_held";
        unsafe_agent_visible: "unsafe_agent_visible";
        unsafe_runtime_visible: "unsafe_runtime_visible";
        agent_has_raw_credential: "agent_has_raw_credential";
        shared_or_unknown: "shared_or_unknown";
        no_mutation_credential: "no_mutation_credential";
    }>;
    providerClass: z.ZodString;
    providerRegistryRef: z.ZodString;
    providerRegistryDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    resolverRef: z.ZodString;
    resolverVersion: z.ZodString;
    evidenceExpectationRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    issuedAt: z.ZodOptional<z.ZodString>;
    expiresAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
}, z.core.$strict>;
export type RegisterGatewayCredentialRefInput = z.input<typeof RegisterGatewayCredentialRefInputSchema>;
export declare const RecordCredentialResolutionEvidenceInputSchema: z.ZodObject<{
    actionContractId: z.ZodString;
    greenlightId: z.ZodString;
    gateAttemptId: z.ZodString;
    gatewayCredentialRefId: z.ZodString;
    gatewayCredentialRefDigest: z.ZodString;
    requestDigest: z.ZodString;
    resultClass: z.ZodEnum<{
        proof_gap: "proof_gap";
        resolved_for_gateway_use: "resolved_for_gateway_use";
        used_by_gateway: "used_by_gateway";
        refused_missing_ref: "refused_missing_ref";
        refused_stale_ref: "refused_stale_ref";
        refused_provider_unavailable: "refused_provider_unavailable";
        refused_vault_auth_denied: "refused_vault_auth_denied";
        refused_provider_drift: "refused_provider_drift";
        refused_unsafe_custody: "refused_unsafe_custody";
        refused_redaction_failure: "refused_redaction_failure";
        replay_refused: "replay_refused";
        isolation_blocked: "isolation_blocked";
    }>;
    resultReasonCode: z.ZodString;
    redactionStatus: z.ZodEnum<{
        proof_gap: "proof_gap";
        redacted: "redacted";
        digest_only: "digest_only";
        redaction_failed: "redaction_failed";
    }>;
    providerRequestRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    providerOperationRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    proofGapId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    refusalId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    evidenceRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    recordedAt: z.ZodOptional<z.ZodString>;
}, z.core.$strict>;
export type RecordCredentialResolutionEvidenceInput = z.input<typeof RecordCredentialResolutionEvidenceInputSchema>;
export declare const RecordGatewayCustodyProofPacketInputSchema: z.ZodObject<{
    tenantId: z.ZodString;
    organizationId: z.ZodString;
    gatewayCustodyProofPacketId: z.ZodOptional<z.ZodString>;
    gatewayCredentialRefId: z.ZodString;
    gatewayCredentialRefDigest: z.ZodString;
    protectedPathPostureId: z.ZodString;
    protectedPathPostureDigest: z.ZodString;
    gatewayInstallEvidenceRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    gatewayInstallEvidenceDigests: z.ZodDefault<z.ZodArray<z.ZodString>>;
    bypassProbeIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
    bypassProbeDigests: z.ZodDefault<z.ZodArray<z.ZodString>>;
    custodyClaimLevel: z.ZodEnum<{
        proof_gap: "proof_gap";
        local_fixture: "local_fixture";
        customer_gateway_evidence: "customer_gateway_evidence";
        provider_gateway_evidence: "provider_gateway_evidence";
    }>;
    custodyProviderClass: z.ZodString;
    custodyProviderRegistryRef: z.ZodString;
    custodyProviderRegistryDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    opaqueKeyHandleRef: z.ZodString;
    opaqueKeyHandleDigest: z.ZodString;
    leaseRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    leaseVersion: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    leaseIssuedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    leaseExpiresAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    attestationRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    attestationDigests: z.ZodDefault<z.ZodArray<z.ZodString>>;
    redactedAuditRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    redactedAuditDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    custodyDriftStatus: z.ZodEnum<{
        proof_gap: "proof_gap";
        current: "current";
        stale: "stale";
        provider_drift: "provider_drift";
        resolver_drift: "resolver_drift";
        unsafe_custody: "unsafe_custody";
    }>;
    resolverDriftStatus: z.ZodEnum<{
        proof_gap: "proof_gap";
        current: "current";
        stale: "stale";
        provider_drift: "provider_drift";
        resolver_drift: "resolver_drift";
        unsafe_custody: "unsafe_custody";
    }>;
    redactionStatus: z.ZodEnum<{
        proof_gap: "proof_gap";
        redacted: "redacted";
        digest_only: "digest_only";
        redaction_failed: "redaction_failed";
    }>;
    externalVerificationStatus: z.ZodEnum<{
        not_required: "not_required";
        required_before_live_claim: "required_before_live_claim";
        verified_by_official_source: "verified_by_official_source";
    }>;
    recordedAt: z.ZodOptional<z.ZodString>;
    expiresAt: z.ZodString;
}, z.core.$strict>;
export type RecordGatewayCustodyProofPacketInput = z.input<typeof RecordGatewayCustodyProofPacketInputSchema>;