import { z } from "zod";
export declare const GatewayCredentialBindingSchema: z.ZodObject<{
    credentialUseName: z.ZodString;
    gatewayCredentialRefId: z.ZodString;
    gatewayCredentialRefDigest: z.ZodString;
    providerRegistryRef: z.ZodString;
    providerRegistryDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    requiredCredentialCustodyStatus: z.ZodEnum<{
        unknown: "unknown";
        gateway_held: "gateway_held";
        fixture_gateway_held: "fixture_gateway_held";
        gateway_resolved_from_vault: "gateway_resolved_from_vault";
        provider_gateway_held: "provider_gateway_held";
        unsafe_agent_visible: "unsafe_agent_visible";
        unsafe_runtime_visible: "unsafe_runtime_visible";
        agent_has_raw_credential: "agent_has_raw_credential";
        shared_or_unknown: "shared_or_unknown";
        no_mutation_credential: "no_mutation_credential";
    }>;
    evidenceExpectationRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
}, z.core.$strict>;
export type GatewayCredentialBinding = z.infer<typeof GatewayCredentialBindingSchema>;
export declare const GatewayCredentialRefSchema: z.ZodObject<{
    schemaVersion: z.ZodLiteral<"0.2.4">;
    tenantId: z.ZodString;
    organizationId: z.ZodString;
    createdAt: z.ZodString;
    gatewayCredentialRefId: z.ZodString;
    gatewayCredentialRefDigest: z.ZodString;
    principalId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    gatewayId: z.ZodString;
    gatewayRegistryEntryId: z.ZodString;
    protectedSurfaceKind: z.ZodString;
    actionClasses: z.ZodArray<z.ZodString>;
    resourceRefs: z.ZodArray<z.ZodString>;
    resourceNamespaceRef: z.ZodString;
    credentialKind: z.ZodString;
    custodyStatus: z.ZodEnum<{
        unknown: "unknown";
        gateway_held: "gateway_held";
        fixture_gateway_held: "fixture_gateway_held";
        gateway_resolved_from_vault: "gateway_resolved_from_vault";
        provider_gateway_held: "provider_gateway_held";
        unsafe_agent_visible: "unsafe_agent_visible";
        unsafe_runtime_visible: "unsafe_runtime_visible";
        agent_has_raw_credential: "agent_has_raw_credential";
        shared_or_unknown: "shared_or_unknown";
        no_mutation_credential: "no_mutation_credential";
    }>;
    providerClass: z.ZodString;
    providerRegistryRef: z.ZodString;
    providerRegistryDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    resolverRef: z.ZodString;
    resolverVersion: z.ZodString;
    evidenceExpectationRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    redactionProfileRef: z.ZodLiteral<"gateway-credential-ref:v0.2-redacted">;
    secretMaterialIncluded: z.ZodLiteral<false>;
    issuedAt: z.ZodString;
    expiresAt: z.ZodNullable<z.ZodString>;
}, z.core.$strict>;
export type GatewayCredentialRef = z.infer<typeof GatewayCredentialRefSchema>;
export declare const CredentialResolutionResultClassSchema: z.ZodEnum<{
    proof_gap: "proof_gap";
    resolved_for_gateway_use: "resolved_for_gateway_use";
    used_by_gateway: "used_by_gateway";
    refused_missing_ref: "refused_missing_ref";
    refused_stale_ref: "refused_stale_ref";
    refused_provider_unavailable: "refused_provider_unavailable";
    refused_vault_auth_denied: "refused_vault_auth_denied";
    refused_provider_drift: "refused_provider_drift";
    refused_unsafe_custody: "refused_unsafe_custody";
    refused_redaction_failure: "refused_redaction_failure";
    replay_refused: "replay_refused";
    isolation_blocked: "isolation_blocked";
}>;
export type CredentialResolutionResultClass = z.infer<typeof CredentialResolutionResultClassSchema>;
export declare const CredentialResolutionRedactionStatusSchema: z.ZodEnum<{
    proof_gap: "proof_gap";
    redacted: "redacted";
    digest_only: "digest_only";
    redaction_failed: "redaction_failed";
}>;
export type CredentialResolutionRedactionStatus = z.infer<typeof CredentialResolutionRedactionStatusSchema>;
export declare const CredentialResolutionEvidenceSchema: z.ZodObject<{
    schemaVersion: z.ZodLiteral<"0.2.4">;
    tenantId: z.ZodString;
    organizationId: z.ZodString;
    createdAt: z.ZodString;
    credentialResolutionEvidenceId: z.ZodString;
    gatewayCredentialRefId: z.ZodString;
    gatewayCredentialRefDigest: z.ZodString;
    actionContractId: z.ZodString;
    greenlightId: z.ZodString;
    gateAttemptId: z.ZodString;
    mutationAttemptId: z.ZodNullable<z.ZodString>;
    gatewayId: z.ZodString;
    providerClass: z.ZodString;
    providerRegistryRef: z.ZodString;
    providerRegistryDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    resolverRef: z.ZodString;
    resolverVersion: z.ZodString;
    requestDigest: z.ZodString;
    resultClass: z.ZodEnum<{
        proof_gap: "proof_gap";
        resolved_for_gateway_use: "resolved_for_gateway_use";
        used_by_gateway: "used_by_gateway";
        refused_missing_ref: "refused_missing_ref";
        refused_stale_ref: "refused_stale_ref";
        refused_provider_unavailable: "refused_provider_unavailable";
        refused_vault_auth_denied: "refused_vault_auth_denied";
        refused_provider_drift: "refused_provider_drift";
        refused_unsafe_custody: "refused_unsafe_custody";
        refused_redaction_failure: "refused_redaction_failure";
        replay_refused: "replay_refused";
        isolation_blocked: "isolation_blocked";
    }>;
    resultReasonCode: z.ZodString;
    redactionStatus: z.ZodEnum<{
        proof_gap: "proof_gap";
        redacted: "redacted";
        digest_only: "digest_only";
        redaction_failed: "redaction_failed";
    }>;
    providerRequestRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    providerOperationRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    proofGapId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    refusalId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    evidenceRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    redactionProfileRef: z.ZodLiteral<"credential-resolution-evidence:v0.2-redacted">;
    credentialMaterialIncluded: z.ZodLiteral<false>;
    recordedAt: z.ZodString;
    evidenceDigest: z.ZodString;
}, z.core.$strict>;
export type CredentialResolutionEvidence = z.infer<typeof CredentialResolutionEvidenceSchema>;
export declare const GatewayCustodyClaimLevelSchema: z.ZodEnum<{
    proof_gap: "proof_gap";
    local_fixture: "local_fixture";
    customer_gateway_evidence: "customer_gateway_evidence";
    provider_gateway_evidence: "provider_gateway_evidence";
}>;
export type GatewayCustodyClaimLevel = z.infer<typeof GatewayCustodyClaimLevelSchema>;
export declare const GatewayCustodyDriftStatusSchema: z.ZodEnum<{
    proof_gap: "proof_gap";
    current: "current";
    stale: "stale";
    provider_drift: "provider_drift";
    resolver_drift: "resolver_drift";
    unsafe_custody: "unsafe_custody";
}>;
export type GatewayCustodyDriftStatus = z.infer<typeof GatewayCustodyDriftStatusSchema>;
export declare const GatewayCustodyExternalVerificationStatusSchema: z.ZodEnum<{
    not_required: "not_required";
    required_before_live_claim: "required_before_live_claim";
    verified_by_official_source: "verified_by_official_source";
}>;
export type GatewayCustodyExternalVerificationStatus = z.infer<typeof GatewayCustodyExternalVerificationStatusSchema>;
export declare const GatewayCustodyProofPacketSchema: z.ZodObject<{
    schemaVersion: z.ZodLiteral<"0.2.4">;
    tenantId: z.ZodString;
    organizationId: z.ZodString;
    createdAt: z.ZodString;
    gatewayCustodyProofPacketId: z.ZodString;
    gatewayCustodyProofPacketDigest: z.ZodString;
    gatewayCredentialRefId: z.ZodString;
    gatewayCredentialRefDigest: z.ZodString;
    protectedPathPostureId: z.ZodString;
    protectedPathPostureDigest: z.ZodString;
    gatewayInstallEvidenceRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    gatewayInstallEvidenceDigests: z.ZodDefault<z.ZodArray<z.ZodString>>;
    bypassProbeIds: z.ZodDefault<z.ZodArray<z.ZodString>>;
    bypassProbeDigests: z.ZodDefault<z.ZodArray<z.ZodString>>;
    gatewayId: z.ZodString;
    gatewayRegistryEntryId: z.ZodString;
    protectedSurfaceKind: z.ZodString;
    actionClasses: z.ZodArray<z.ZodString>;
    resourceRefs: z.ZodArray<z.ZodString>;
    custodyProviderClass: z.ZodString;
    custodyProviderRegistryRef: z.ZodString;
    custodyProviderRegistryDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    opaqueKeyHandleRef: z.ZodString;
    opaqueKeyHandleDigest: z.ZodString;
    credentialKind: z.ZodString;
    credentialCustodyStatus: z.ZodEnum<{
        unknown: "unknown";
        gateway_held: "gateway_held";
        fixture_gateway_held: "fixture_gateway_held";
        gateway_resolved_from_vault: "gateway_resolved_from_vault";
        provider_gateway_held: "provider_gateway_held";
        unsafe_agent_visible: "unsafe_agent_visible";
        unsafe_runtime_visible: "unsafe_runtime_visible";
        agent_has_raw_credential: "agent_has_raw_credential";
        shared_or_unknown: "shared_or_unknown";
        no_mutation_credential: "no_mutation_credential";
    }>;
    custodyClaimLevel: z.ZodEnum<{
        proof_gap: "proof_gap";
        local_fixture: "local_fixture";
        customer_gateway_evidence: "customer_gateway_evidence";
        provider_gateway_evidence: "provider_gateway_evidence";
    }>;
    resolverRef: z.ZodString;
    resolverVersion: z.ZodString;
    leaseRef: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    leaseVersion: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    leaseIssuedAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    leaseExpiresAt: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    attestationRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    attestationDigests: z.ZodDefault<z.ZodArray<z.ZodString>>;
    redactedAuditRefs: z.ZodDefault<z.ZodArray<z.ZodString>>;
    redactedAuditDigest: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    custodyDriftStatus: z.ZodEnum<{
        proof_gap: "proof_gap";
        current: "current";
        stale: "stale";
        provider_drift: "provider_drift";
        resolver_drift: "resolver_drift";
        unsafe_custody: "unsafe_custody";
    }>;
    resolverDriftStatus: z.ZodEnum<{
        proof_gap: "proof_gap";
        current: "current";
        stale: "stale";
        provider_drift: "provider_drift";
        resolver_drift: "resolver_drift";
        unsafe_custody: "unsafe_custody";
    }>;
    redactionStatus: z.ZodEnum<{
        proof_gap: "proof_gap";
        redacted: "redacted";
        digest_only: "digest_only";
        redaction_failed: "redaction_failed";
    }>;
    externalVerificationStatus: z.ZodEnum<{
        not_required: "not_required";
        required_before_live_claim: "required_before_live_claim";
        verified_by_official_source: "verified_by_official_source";
    }>;
    redactionProfileRef: z.ZodLiteral<"gateway-custody-proof-packet:v0.2-redacted">;
    secretMaterialIncluded: z.ZodLiteral<false>;
    authorityCreated: z.ZodLiteral<false>;
    recordedAt: z.ZodString;
    expiresAt: z.ZodString;
}, z.core.$strict>;
export type GatewayCustodyProofPacket = z.infer<typeof GatewayCustodyProofPacketSchema>;