import { z } from "zod";
export declare const serviceWorkflowAdmissionSchemaVersion: "handshake.service-workflow-admission.v0.1";
export declare const principalAgentLinkSchemaVersion: "handshake.principal-agent-link.v0.1";
export declare const serviceWorkflowClaimStatuses: readonly ["accepted", "refused", "stale", "proof_gap", "quarantined"];
export type ServiceWorkflowClaimStatus = (typeof serviceWorkflowClaimStatuses)[number];
export declare const serviceWorkflowNextActionRequirements: readonly ["fresh_action_contract_required", "reload_evidence_required", "replace_evidence_required", "keep_blocked", "stop_and_isolate"];
export type ServiceWorkflowNextActionRequirement = (typeof serviceWorkflowNextActionRequirements)[number];
export declare const ServiceWorkflowAuthorityBoundarySchema: z.ZodObject<{
    createsAuthority: z.ZodLiteral<false>;
    createsPolicyDecision: z.ZodLiteral<false>;
    createsGreenlight: z.ZodLiteral<false>;
    performsGatewayCheck: z.ZodLiteral<false>;
    permitsMutation: z.ZodLiteral<false>;
    exportsReceipt: z.ZodLiteral<false>;
    mintsTerminalCertificate: z.ZodLiteral<false>;
    containsCredentialMaterial: z.ZodLiteral<false>;
    containsPaymentMaterial: z.ZodLiteral<false>;
    widensOperatingEnvelope: z.ZodLiteral<false>;
    isReusableAuth: z.ZodLiteral<false>;
    isGatewayBinding: z.ZodLiteral<false>;
    freshActionContractRequired: z.ZodLiteral<true>;
}, z.core.$strict>;
export type ServiceWorkflowAuthorityBoundary = z.infer<typeof ServiceWorkflowAuthorityBoundarySchema>;
export declare const serviceWorkflowAuthorityBoundary: {
    readonly createsAuthority: false;
    readonly createsPolicyDecision: false;
    readonly createsGreenlight: false;
    readonly performsGatewayCheck: false;
    readonly permitsMutation: false;
    readonly exportsReceipt: false;
    readonly mintsTerminalCertificate: false;
    readonly containsCredentialMaterial: false;
    readonly containsPaymentMaterial: false;
    readonly widensOperatingEnvelope: false;
    readonly isReusableAuth: false;
    readonly isGatewayBinding: false;
    readonly freshActionContractRequired: true;
};
export declare const ServiceWorkflowContextRefsSchema: z.ZodObject<{
    passportPackageDigest: z.ZodString;
    passportPresentationId: z.ZodString;
    admissionId: z.ZodString;
    serviceWorkflowHandleId: z.ZodString;
    serviceWorkflowHandleDigest: z.ZodString;
}, z.core.$strict>;
export type ServiceWorkflowContextRefs = z.infer<typeof ServiceWorkflowContextRefsSchema>;
export declare const PrincipalAgentLinkSchema: z.ZodObject<{
    schemaVersion: z.ZodLiteral<"handshake.principal-agent-link.v0.1">;
    principalAgentLinkId: z.ZodString;
    principalAgentLinkDigest: z.ZodString;
    tenantId: z.ZodString;
    organizationId: z.ZodString;
    projectId: z.ZodNullable<z.ZodString>;
    workspaceId: z.ZodNullable<z.ZodString>;
    principalId: z.ZodString;
    agentId: z.ZodString;
    principalSubjectDigest: z.ZodString;
    agentSubjectDigest: z.ZodString;
    authProviderRef: z.ZodString;
    linkEvidenceRefs: z.ZodArray<z.ZodString>;
    scopeRefs: z.ZodArray<z.ZodString>;
    issuedAt: z.ZodString;
    expiresAt: z.ZodNullable<z.ZodString>;
    revokedAt: z.ZodNullable<z.ZodString>;
    authorityBoundary: z.ZodObject<{
        createsAuthority: z.ZodLiteral<false>;
        createsPolicyDecision: z.ZodLiteral<false>;
        createsGreenlight: z.ZodLiteral<false>;
        performsGatewayCheck: z.ZodLiteral<false>;
        permitsMutation: z.ZodLiteral<false>;
        exportsReceipt: z.ZodLiteral<false>;
        mintsTerminalCertificate: z.ZodLiteral<false>;
        containsCredentialMaterial: z.ZodLiteral<false>;
        containsPaymentMaterial: z.ZodLiteral<false>;
        widensOperatingEnvelope: z.ZodLiteral<false>;
        isReusableAuth: z.ZodLiteral<false>;
        isGatewayBinding: z.ZodLiteral<false>;
        freshActionContractRequired: z.ZodLiteral<true>;
    }, z.core.$strict>;
    createsAuthority: z.ZodLiteral<false>;
    createsPolicyDecision: z.ZodLiteral<false>;
    createsGreenlight: z.ZodLiteral<false>;
    performsGatewayCheck: z.ZodLiteral<false>;
    permitsMutation: z.ZodLiteral<false>;
    exportsReceipt: z.ZodLiteral<false>;
    mintsTerminalCertificate: z.ZodLiteral<false>;
    containsCredentialMaterial: z.ZodLiteral<false>;
    containsPaymentMaterial: z.ZodLiteral<false>;
    widensOperatingEnvelope: z.ZodLiteral<false>;
    isReusableAuth: z.ZodLiteral<false>;
    isGatewayBinding: z.ZodLiteral<false>;
    freshActionContractRequired: z.ZodLiteral<true>;
    allowedUse: z.ZodLiteral<"scoped_evidence_for_envelope_setup_and_readback_only">;
}, z.core.$strict>;
export type PrincipalAgentLink = z.infer<typeof PrincipalAgentLinkSchema>;
export declare const ServiceWorkflowClaimResultSchema: z.ZodObject<{
    claimRef: z.ZodString;
    claimDigest: z.ZodNullable<z.ZodString>;
    status: z.ZodEnum<{
        proof_gap: "proof_gap";
        stale: "stale";
        refused: "refused";
        quarantined: "quarantined";
        accepted: "accepted";
    }>;
    reasonCodes: z.ZodArray<z.ZodString>;
    evidenceRefs: z.ZodArray<z.ZodString>;
    proofGapRefs: z.ZodArray<z.ZodString>;
}, z.core.$strict>;
export type ServiceWorkflowClaimResult = z.infer<typeof ServiceWorkflowClaimResultSchema>;
export declare const ServiceWorkflowRuntimePostureSchema: z.ZodObject<{
    runtimeRef: z.ZodString;
    hostProfileEvidenceRef: z.ZodNullable<z.ZodString>;
    rawSiblingBypassPostureRef: z.ZodNullable<z.ZodString>;
    nativeContainmentClaimed: z.ZodLiteral<false>;
    proofGapRefs: z.ZodArray<z.ZodString>;
}, z.core.$strict>;
export type ServiceWorkflowRuntimePosture = z.infer<typeof ServiceWorkflowRuntimePostureSchema>;
export declare const ServiceWorkflowHandleSchema: z.ZodObject<{
    schemaVersion: z.ZodLiteral<"handshake.service-workflow-admission.v0.1">;
    passportPackageDigest: z.ZodString;
    passportPresentationId: z.ZodString;
    admissionId: z.ZodString;
    serviceWorkflowHandleId: z.ZodString;
    serviceWorkflowHandleDigest: z.ZodString;
    issuedAt: z.ZodString;
    expiresAt: z.ZodNullable<z.ZodString>;
    workflowBoundsDigest: z.ZodString;
    sourceAdmissionDigest: z.ZodString;
    runtimePostureDigest: z.ZodNullable<z.ZodString>;
    authorityBoundary: z.ZodObject<{
        createsAuthority: z.ZodLiteral<false>;
        createsPolicyDecision: z.ZodLiteral<false>;
        createsGreenlight: z.ZodLiteral<false>;
        performsGatewayCheck: z.ZodLiteral<false>;
        permitsMutation: z.ZodLiteral<false>;
        exportsReceipt: z.ZodLiteral<false>;
        mintsTerminalCertificate: z.ZodLiteral<false>;
        containsCredentialMaterial: z.ZodLiteral<false>;
        containsPaymentMaterial: z.ZodLiteral<false>;
        widensOperatingEnvelope: z.ZodLiteral<false>;
        isReusableAuth: z.ZodLiteral<false>;
        isGatewayBinding: z.ZodLiteral<false>;
        freshActionContractRequired: z.ZodLiteral<true>;
    }, z.core.$strict>;
    nextProtectedActionRequirement: z.ZodLiteral<"fresh_action_contract_required">;
    allowedUse: z.ZodLiteral<"correlation_and_readback_context_only">;
}, z.core.$strict>;
export type ServiceWorkflowHandle = z.infer<typeof ServiceWorkflowHandleSchema>;
export declare const ServiceWorkflowAdmissionSchema: z.ZodObject<{
    schemaVersion: z.ZodLiteral<"handshake.service-workflow-admission.v0.1">;
    passportPackageDigest: z.ZodString;
    passportPresentationId: z.ZodString;
    admissionId: z.ZodString;
    admissionDigest: z.ZodString;
    serviceRef: z.ZodString;
    presentedAt: z.ZodString;
    evaluatedAt: z.ZodString;
    claimResults: z.ZodArray<z.ZodObject<{
        claimRef: z.ZodString;
        claimDigest: z.ZodNullable<z.ZodString>;
        status: z.ZodEnum<{
            proof_gap: "proof_gap";
            stale: "stale";
            refused: "refused";
            quarantined: "quarantined";
            accepted: "accepted";
        }>;
        reasonCodes: z.ZodArray<z.ZodString>;
        evidenceRefs: z.ZodArray<z.ZodString>;
        proofGapRefs: z.ZodArray<z.ZodString>;
    }, z.core.$strict>>;
    runtimePosture: z.ZodArray<z.ZodObject<{
        runtimeRef: z.ZodString;
        hostProfileEvidenceRef: z.ZodNullable<z.ZodString>;
        rawSiblingBypassPostureRef: z.ZodNullable<z.ZodString>;
        nativeContainmentClaimed: z.ZodLiteral<false>;
        proofGapRefs: z.ZodArray<z.ZodString>;
    }, z.core.$strict>>;
    serviceWorkflowHandle: z.ZodObject<{
        schemaVersion: z.ZodLiteral<"handshake.service-workflow-admission.v0.1">;
        passportPackageDigest: z.ZodString;
        passportPresentationId: z.ZodString;
        admissionId: z.ZodString;
        serviceWorkflowHandleId: z.ZodString;
        serviceWorkflowHandleDigest: z.ZodString;
        issuedAt: z.ZodString;
        expiresAt: z.ZodNullable<z.ZodString>;
        workflowBoundsDigest: z.ZodString;
        sourceAdmissionDigest: z.ZodString;
        runtimePostureDigest: z.ZodNullable<z.ZodString>;
        authorityBoundary: z.ZodObject<{
            createsAuthority: z.ZodLiteral<false>;
            createsPolicyDecision: z.ZodLiteral<false>;
            createsGreenlight: z.ZodLiteral<false>;
            performsGatewayCheck: z.ZodLiteral<false>;
            permitsMutation: z.ZodLiteral<false>;
            exportsReceipt: z.ZodLiteral<false>;
            mintsTerminalCertificate: z.ZodLiteral<false>;
            containsCredentialMaterial: z.ZodLiteral<false>;
            containsPaymentMaterial: z.ZodLiteral<false>;
            widensOperatingEnvelope: z.ZodLiteral<false>;
            isReusableAuth: z.ZodLiteral<false>;
            isGatewayBinding: z.ZodLiteral<false>;
            freshActionContractRequired: z.ZodLiteral<true>;
        }, z.core.$strict>;
        nextProtectedActionRequirement: z.ZodLiteral<"fresh_action_contract_required">;
        allowedUse: z.ZodLiteral<"correlation_and_readback_context_only">;
    }, z.core.$strict>;
    authorityBoundary: z.ZodObject<{
        createsAuthority: z.ZodLiteral<false>;
        createsPolicyDecision: z.ZodLiteral<false>;
        createsGreenlight: z.ZodLiteral<false>;
        performsGatewayCheck: z.ZodLiteral<false>;
        permitsMutation: z.ZodLiteral<false>;
        exportsReceipt: z.ZodLiteral<false>;
        mintsTerminalCertificate: z.ZodLiteral<false>;
        containsCredentialMaterial: z.ZodLiteral<false>;
        containsPaymentMaterial: z.ZodLiteral<false>;
        widensOperatingEnvelope: z.ZodLiteral<false>;
        isReusableAuth: z.ZodLiteral<false>;
        isGatewayBinding: z.ZodLiteral<false>;
        freshActionContractRequired: z.ZodLiteral<true>;
    }, z.core.$strict>;
    nextActionRequirement: z.ZodEnum<{
        fresh_action_contract_required: "fresh_action_contract_required";
        reload_evidence_required: "reload_evidence_required";
        replace_evidence_required: "replace_evidence_required";
        keep_blocked: "keep_blocked";
        stop_and_isolate: "stop_and_isolate";
    }>;
    clearanceBoundary: z.ZodLiteral<"fresh_action_contract_required_for_each_protected_action">;
    readbackBoundary: z.ZodLiteral<"admission_readback_is_not_receipt_evidence">;
}, z.core.$strict>;
export type ServiceWorkflowAdmission = z.infer<typeof ServiceWorkflowAdmissionSchema>;
export declare function serviceWorkflowNonAuthorityBoundary(): ServiceWorkflowAuthorityBoundary;
export declare function serviceWorkflowContextRefFromHandle(handle: ServiceWorkflowHandle): ServiceWorkflowContextRefs;
export declare function serviceWorkflowContextEvidenceRefs(contextRefs: ServiceWorkflowContextRefs): string[];
export declare function serviceWorkflowContextCorrelationRef(contextRefs: ServiceWorkflowContextRefs): string;