import { type DeepSeekCredentialHomeOrigin } from './credential-home.js';
export type DeepSeekCredentialFailureClassification = 'missing-credential' | 'invalid-store' | 'invalid-selector' | 'endpoint-mismatch' | 'invalid-effective-endpoint' | 'auth-rejected' | 'binding-changed' | 'runtime-failure' | 'settings-unreadable' | 'settings-too-large' | 'invalid-settings' | 'invalid-stored-endpoint';
export type DeepSeekRuntimeCredentialFailureClassification = 'missing-credential' | 'invalid-store' | 'auth-rejected' | 'unknown';
export type DeepSeekRuntimeFailureClassification = 'model-reference' | 'connection-failure' | 'runtime-internal-failure' | 'other-provider-transport' | 'unknown';
export interface DeepSeekRuntimeFailureEvidence {
    code: string | undefined;
    message: string | undefined;
}
export declare const DEEPSEEK_CREDENTIAL_DIAGNOSTIC_CLASSIFICATIONS: readonly DeepSeekCredentialFailureClassification[];
export interface DeepSeekCredentialDiagnosticContext {
    classification: DeepSeekCredentialFailureClassification;
    sourceHomeOrigin: DeepSeekCredentialHomeOrigin;
    reference?: string | undefined;
}
/** Build a classified, secret-free diagnostic in the existing provider error format. */
export declare function buildCredentialDiagnostic(context: DeepSeekCredentialDiagnosticContext): string;
/**
 * Classify a failure reported by the official runtime. Only patterns observed from
 * the pinned runtime are classified; anything else stays unknown so the caller
 * emits a fixed failure diagnostic without exposing upstream text.
 */
export declare function classifyDeepSeekRuntimeCredentialFailure(failure: string): DeepSeekRuntimeCredentialFailureClassification;
/** Classify only fixed, non-secret upstream failure shapes into actionable causes. */
export declare function classifyDeepSeekRuntimeFailure(evidence: DeepSeekRuntimeFailureEvidence): DeepSeekRuntimeFailureClassification;
/** Format classified failure details using only previously projected safe evidence. */
export declare function buildDeepSeekRuntimeFailureDiagnostic(classification: Exclude<DeepSeekRuntimeFailureClassification, 'unknown'>, upstreamMessage?: string): string;
/** SDK exception type is mapped to a provider-owned code; its message and cause remain untrusted. */
export declare function buildDeepSeekSdkFailureDiagnostic(code: string | undefined): string | undefined;
/** Project fixed failure phrases and recognizable secret fields; reject any remaining free text. */
export declare function projectDeepSeekRuntimeMessage(message: string): string | undefined;
/** Carry a safe classification from the resolution boundary to the failure formatter. */
export declare class DeepSeekCredentialDiagnosticError extends Error {
    readonly classification: DeepSeekCredentialFailureClassification;
    readonly sourceHomeOrigin: DeepSeekCredentialHomeOrigin | undefined;
    readonly reference: string | undefined;
    constructor(classification: DeepSeekCredentialFailureClassification, message: string, context?: {
        sourceHomeOrigin?: DeepSeekCredentialHomeOrigin;
        reference?: string;
    });
}
//# sourceMappingURL=credential-diagnostics.d.ts.map