/**
 * Evidence builders for the dependencies/supply-chain readiness producer.
 * @module cli/doctor-readiness-supply-chain-evidence
 */
import { type DependencySpec } from "./doctor-readiness-supply-chain-scan.js";
import type { WorkspaceMembers } from "./doctor-readiness-workspaces.js";
/** One package manifest B5 inspects. */
export interface ManifestUnderAssessment {
    readonly manifestPath: string;
    readonly manifest: Record<string, unknown>;
}
/** Values already read from the repository for dependency-confidence evidence. */
interface DependencyConfidenceInputs {
    readonly auditGate: string | null;
    readonly lockfile: string | null;
    readonly lockfileInstallGate: string | null;
    readonly specs: readonly DependencySpec[];
    readonly workspaces: WorkspaceMembers;
}
/**
 * Collect B5 evidence for install-time execution surfaces.
 * @param manifests - Manifests under assessment
 * @returns Evidence lines for install-time execution surfaces
 */
export declare function installTimeExecutionViolations(manifests: readonly ManifestUnderAssessment[]): readonly string[];
/**
 * Collect B5 violations from dependency specs, lockfiles, and audit gates.
 * @param inputs - Values already read from the repository
 * @param inputs.auditGate - Path to the dependency-audit gate, if found
 * @param inputs.lockfile - Path to the committed lockfile, if found
 * @param inputs.lockfileInstallGate - Path to the lockfile-enforcing install
 * @param inputs.specs - Declared dependency specs
 * @param inputs.workspaces - What resolving the workspace members established
 * @returns Evidence lines for dependency-confidence violations
 */
export declare function dependencyConfidenceViolations({ auditGate, lockfile, lockfileInstallGate, specs, workspaces, }: DependencyConfidenceInputs): readonly string[];
/**
 * Collect non-blocking observations from dependency-confidence evidence.
 * @param inputs - Values already read from the repository
 * @param inputs.auditGate - Path to the dependency-audit gate, if found
 * @param inputs.lockfile - Path to the committed lockfile, if found
 * @param inputs.lockfileInstallGate - Path to the lockfile-enforcing install
 * @param inputs.specs - Declared dependency specs
 * @returns Evidence lines for clean dependency-confidence signals
 */
export declare function dependencyConfidenceObservations({ auditGate, lockfile, lockfileInstallGate, specs, }: DependencyConfidenceInputs): readonly string[];
export {};
//# sourceMappingURL=doctor-readiness-supply-chain-evidence.d.ts.map