import { type RolePolicyConfig } from "../domain/role-policy.js";
import type { ConductorRecoveryBinding, KernelPaths } from "./types.js";
/** Canonical shape validation — single implementation for all recovery paths. */
export declare function assertRecoveryBindingShape(b: ConductorRecoveryBinding): void;
/**
 * Parse journal payload into a strict binding.
 * Rejects wrong runtime types (numeric strings, arrays, objects, booleans)
 * without String()/Number() normalization.
 */
export declare function parseRecoveryBindingStrict(payload: Readonly<Record<string, unknown>>): ConductorRecoveryBinding;
export declare function canonicalRecoveryBinding(b: ConductorRecoveryBinding): ConductorRecoveryBinding;
/**
 * Factory authority + shape. Must run before acceptGoal mutates state.
 * Exact workspace / conductor session / policy digest checks are factory-only.
 */
export declare function assertFactoryRecoveryBinding(input: {
    readonly paths: KernelPaths;
    readonly conductorSessionId: string;
    readonly recoveryBinding: ConductorRecoveryBinding;
    readonly rolePolicy?: RolePolicyConfig;
}): void;