type ReceizConstitutionJson = null | boolean | number | string | ReceizConstitutionJson[] | {
    [key: string]: ReceizConstitutionJson;
};
export declare const RECEIZ_CURRENT_MCP_RULESET_VERSION: "106.0.0" | "107.0.0" | "108.0.0" | "109.0.0" | "110.0.0" | "111.0.0" | "112.0.0" | "113.0.0" | "114.0.0" | "115.0.0" | "116.0.0" | "117.0.0" | "118.0.0" | "119.0.0" | "120.0.0" | "121.0.0" | "122.0.0" | "123.0.0" | "124.0.0" | "125.0.0" | "126.0.0" | "127.0.0";
export declare const RECEIZ_CURRENT_MCP_PLAN_SCHEMA: "receiz.mcp.operation-plan.v125";
export declare const RECEIZ_CURRENT_MCP_PLAN_DIGEST_DOMAIN: "receiz.mcp-operation-plan.v125";
export declare const RECEIZ_CURRENT_MCP_ATTEMPT_DIGEST_DOMAIN: "receiz.mcp-operation-attempt.v125";
export declare const RECEIZ_CURRENT_MCP_RESULT_SCHEMA: "receiz.mcp.operation-result.v125";
export declare const RECEIZ_HISTORICAL_RECORD_SEAL_MCP_RESULT_SCHEMA: "receiz.mcp.operation-result.v112";
export declare const RECEIZ_CURRENT_MCP_CONSTITUTIONAL_PLAN_DIGEST_DOMAIN: "receiz.mcp-constitutional-plan.v125";
export declare const RECEIZ_CURRENT_MCP_CONSTITUTIONAL_ATTEMPT_DIGEST_DOMAIN: "receiz.mcp-constitutional-attempt.v125";
export type ReceizConstitutionalContext = Readonly<{
    schema: "receiz.mcp.constitutional-context.v1";
    rulesetVersion: typeof RECEIZ_CURRENT_MCP_RULESET_VERSION;
    registryDigest: string;
    applicableLaws: readonly string[];
    authorityBoundary: Readonly<{
        profile: "artifact-local" | "global-shared" | "projection-only" | "simulation-only";
        tenantRequired: boolean;
    }>;
    stateMachine: Readonly<{
        initial: string;
        states: readonly string[];
        transitions: readonly Readonly<{
            command: string;
            from: string;
            to: string;
        }>[];
    }>;
    allowedCommands: readonly string[];
    forbiddenMutations: readonly ["direct-state-write", "history-rewrite", "authority-bypass"];
    requiredVerification: readonly ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance"];
    authority: Readonly<{
        contextIsProofAuthority: false;
        strongerTruth: "sealed-receiz-proof-object";
    }>;
}>;
export type ReceizConstitutionalOperation = Readonly<{
    kind: "execute-command" | "append-event" | "verify-receipt" | "commit-atomic-projection";
    context: ReceizConstitutionalContext;
    command?: string;
    affectedAsset?: string;
    proposedChange: string;
    payload?: ReceizConstitutionJson;
}>;
export type ReceizMcpDenial = Readonly<{
    law: string;
    code: string;
    attemptedTransition: string;
    affectedAsset: string | null;
    safeAlternatives: readonly string[];
}>;
export type ReceizConstitutionalPlan = Readonly<{
    schema: typeof RECEIZ_CURRENT_MCP_PLAN_SCHEMA;
    status: "denied";
    context: ReceizConstitutionalContext;
    denial: ReceizMcpDenial;
}> | Readonly<{
    schema: typeof RECEIZ_CURRENT_MCP_PLAN_SCHEMA;
    status: "permitted";
    planDigest: string;
    planIdentity: string;
    attemptNonce: string;
    confirmationDigest: string;
    confirmationRequired: true;
    operation: ReceizConstitutionalOperation;
    context: ReceizConstitutionalContext;
    requiredEvidence: ReceizConstitutionalContext["requiredVerification"];
    writesPerformed: 0;
}>;
export declare function createReceizConstitutionalContext(input: Readonly<{
    registryDigest: string;
    applicableLaws: readonly string[];
    authorityBoundary: ReceizConstitutionalContext["authorityBoundary"];
    stateMachine: ReceizConstitutionalContext["stateMachine"];
    allowedCommands: readonly string[];
}>): ReceizConstitutionalContext;
export type ReceizBypassScan = Readonly<{
    schema: "receiz.mcp.bypass-scan.v1";
    ok: boolean;
    findings: readonly Readonly<{
        operation: "direct-state-write" | "history-rewrite" | "authority-bypass";
        evidence: string;
    }>[];
}>;
export declare function scanReceizAuthorityBypass(source: string): ReceizBypassScan;
export declare function planReceizConstitutionalOperation(operation: ReceizConstitutionalOperation): Promise<ReceizConstitutionalPlan>;
export declare function createReceizConstitutionalRuntime(options: Readonly<{
    context: ReceizConstitutionalContext;
    executor: (operation: ReceizConstitutionalOperation) => Promise<unknown>;
}>): {
    context: Readonly<{
        schema: "receiz.mcp.constitutional-context.v1";
        rulesetVersion: typeof RECEIZ_CURRENT_MCP_RULESET_VERSION;
        registryDigest: string;
        applicableLaws: readonly string[];
        authorityBoundary: Readonly<{
            profile: "artifact-local" | "global-shared" | "projection-only" | "simulation-only";
            tenantRequired: boolean;
        }>;
        stateMachine: Readonly<{
            initial: string;
            states: readonly string[];
            transitions: readonly Readonly<{
                command: string;
                from: string;
                to: string;
            }>[];
        }>;
        allowedCommands: readonly string[];
        forbiddenMutations: readonly ["direct-state-write", "history-rewrite", "authority-bypass"];
        requiredVerification: readonly ["typecheck", "law-coverage", "mutation-tests", "replay-equivalence", "compatibility", "mcp-conformance"];
        authority: Readonly<{
            contextIsProofAuthority: false;
            strongerTruth: "sealed-receiz-proof-object";
        }>;
    }>;
    plan(input: Omit<ReceizConstitutionalOperation, "context">): Promise<Readonly<{
        schema: typeof RECEIZ_CURRENT_MCP_PLAN_SCHEMA;
        status: "denied";
        context: ReceizConstitutionalContext;
        denial: ReceizMcpDenial;
    }> | Readonly<{
        schema: typeof RECEIZ_CURRENT_MCP_PLAN_SCHEMA;
        status: "permitted";
        planDigest: string;
        planIdentity: string;
        attemptNonce: string;
        confirmationDigest: string;
        confirmationRequired: true;
        operation: ReceizConstitutionalOperation;
        context: ReceizConstitutionalContext;
        requiredEvidence: ReceizConstitutionalContext["requiredVerification"];
        writesPerformed: 0;
    }>>;
    execute(plan: ReceizConstitutionalPlan, confirmation: string): Promise<Readonly<{
        schema: "receiz.mcp.operation-result.v1";
        planDigest: string;
        planIdentity: string;
        confirmationDigest: string;
        result: unknown;
        context: ReceizConstitutionalContext;
    }>>;
};
export {};
//# sourceMappingURL=constitutional.d.ts.map