import type { HttpClient } from "../core/http.js";
export interface RiskEvent {
    id: string;
    occurred_at: string;
    principal_type: "user" | "agent";
    principal_id: string;
    org_id: string;
    event_type: string;
    ip: string | null;
    asn: number | null;
    asn_org: string | null;
    country_code: string | null;
    region: string | null;
    city: string | null;
    latitude: number | null;
    longitude: number | null;
    user_agent: string | null;
    payload: Record<string, unknown>;
    created_at: string;
}
export interface RiskVerdict {
    principal_type: string;
    principal_id: string;
    org_id: string;
    score: number;
    severity: "low" | "medium" | "high" | "critical";
    reasons: Array<{
        detector: string;
        severity: string;
        description: string;
        metadata: Record<string, unknown>;
    }>;
    computed_at: string;
    expires_at: string;
}
export interface Honeytoken {
    id: string;
    vault_id: string;
    org_id: string;
    secret_path: string;
    created_by: string;
    created_at: string;
    notes: string | null;
    triggered_count: number;
    last_triggered_at: string | null;
}
export interface CreateHoneytokenRequest {
    vault_id: string;
    secret_path: string;
    notes?: string;
}
export interface ListRiskEventsParams {
    limit?: number;
    offset?: number;
    severity?: string;
    principal_type?: string;
}
export declare class RiskResource {
    private readonly http;
    constructor(http: HttpClient);
    listEvents(params?: ListRiskEventsParams): Promise<{
        events: RiskEvent[];
    }>;
    getVerdict(principalType: string, principalId: string): Promise<{
        verdict: RiskVerdict | null;
    }>;
    listVerdicts(): Promise<{
        verdicts: RiskVerdict[];
    }>;
    createHoneytoken(request: CreateHoneytokenRequest): Promise<{
        honeytoken: Honeytoken;
    }>;
    listHoneytokens(): Promise<{
        honeytokens: Honeytoken[];
    }>;
    deleteHoneytoken(id: string): Promise<{
        deleted: boolean;
    }>;
}
//# sourceMappingURL=risk.d.ts.map