import type { CapabilityAuditResult } from './types.js';
import type { CapabilityBaselineRow, JourneyId } from '../capability-baseline/types.js';
import type { GuardContract, GuardRunResult } from '../capability-guard-runner/types.js';
/**
 * `stub` means the "independent" verdict came from a hard-coded response, not
 * from a separate context. A stub is not an evaluation, so an audit that used
 * one is marked `degraded` and can never report `consistent`.
 *
 * `live` runs the deterministic independent checker: a real separate-context
 * evaluation that needs no credentials, which is why it is the only kind that
 * can run inside the secretless OIDC publish gate.
 */
export type AuditScorerMode = 'stub' | 'live';
export interface RunAuditInput {
    readonly projectRoot: string;
    readonly sessionId: string;
    readonly journeyId: JourneyId;
    readonly scorerMode: AuditScorerMode;
    /** The frozen claim set under audit. */
    readonly baselineRows: ReadonlyArray<CapabilityBaselineRow>;
    /** The arming witness: which frozen invariants some contract enforces. */
    readonly contracts: ReadonlyArray<GuardContract>;
    readonly guardSummary: {
        readonly pass: number;
        readonly fail: number;
        readonly skipped: number;
        readonly total: number;
        readonly results: ReadonlyArray<GuardRunResult>;
    };
}
export declare function runAudit(input: RunAuditInput): Promise<CapabilityAuditResult>;