/**
 * User-level capability-pack trust ceremony used by the policy host commands.
 *
 * Kept separate from declarative command assembly so provenance resolution,
 * audit recording, and global trust mutation remain one reviewable boundary.
 */
import type { CliCommandsContext } from './shared.js';
import type { ErrorResult, PolicyTrustResult } from '@opensip-cli/contracts';
/**
 * Grant trust bound to the currently resolved capability manifest.
 *
 * @returns A command result; invalid or unresolved packages are represented as
 *   configuration errors rather than thrown exceptions.
 */
export declare function executePolicyTrust(packageName: string, ctx: CliCommandsContext): PolicyTrustResult | ErrorResult;
/** Revoke an existing user-level capability-pack trust grant. */
export declare function executePolicyUntrust(packageName: string, ctx: CliCommandsContext): PolicyTrustResult | ErrorResult;
//# sourceMappingURL=policy-trust-ceremony.d.ts.map