export interface CoreReceiptIntegrityMaterial {
    schemaVersion: "martin.receipt-integrity.v1";
    runId: string;
    keyId: string;
    signedAt: string;
    scope?: Record<string, unknown>;
    loopRecordSha256: string;
    ledgerSha256: string;
    ledgerHeadHash: string;
    entryCount: number;
    chain: Array<Record<string, unknown>>;
    signatureHmacSha256: string;
}
export interface CoreReceiptBundle {
    loopRecord: Record<string, unknown>;
    ledgerEntries: Array<Record<string, unknown>>;
    integrity: CoreReceiptIntegrityMaterial;
}
/**
 * Mirrors the share-command privacy convention without coupling hosted sync to
 * non-sync command code. Local persisted receipts remain byte-for-byte unchanged.
 */
export declare function redactHostedSyncValue(value: unknown): unknown;
/**
 * Builds a privacy-safe transport projection of a persisted Core receipt.
 *
 * Fail closed: the raw persisted receipt must verify against its existing local
 * HMAC before any transformed receipt is signed. If the key is unavailable,
 * mismatched, or the persisted receipt is tampered, no receipt is transported.
 */
export declare function buildPrivacySafeCoreReceiptBundle(input: {
    runsRoot: string;
    loopRecord: Record<string, unknown>;
    ledgerEntries: Array<Record<string, unknown>>;
    integrity: CoreReceiptIntegrityMaterial;
}): Promise<CoreReceiptBundle | undefined>;