import type { DbExec } from "../db/client.js";
import type { ComputerApprovalScope, ComputerCommandEnvelope, ComputerOperationClass } from "./remote-types.js";
export type ComputerApprovalStatus = "pending" | "approved" | "denied" | "consumed" | "expired";
export interface ComputerApprovalRecord {
    id: string;
    ownerEmail: string;
    orgId: string | null;
    deviceId: string;
    taskId: string;
    runId: string;
    operationClass: ComputerOperationClass;
    scope: ComputerApprovalScope;
    actionHash: string;
    status: ComputerApprovalStatus;
    decisionResult: Record<string, unknown> | null;
    decidedBy: string | null;
    decidedAt: number | null;
    expiresAt: number;
    consumedAt: number | null;
    createdAt: number;
    updatedAt: number;
}
export declare function ensureComputerApprovalStore(): Promise<void>;
export declare function createComputerApprovalRequest(input: {
    ownerEmail: string;
    orgId?: string | null;
    deviceId: string;
    envelope: ComputerCommandEnvelope;
}): Promise<ComputerApprovalRecord>;
export declare function decideComputerApproval(input: {
    id: string;
    ownerEmail: string;
    orgId?: string | null;
    actionHash: string;
    decision: "approved" | "denied";
    decidedBy: string;
    result?: Record<string, unknown> | null;
}): Promise<ComputerApprovalRecord | null>;
export declare function getComputerApprovalForOwner(input: {
    id: string;
    ownerEmail: string;
    orgId?: string | null;
}): Promise<ComputerApprovalRecord | null>;
export declare function listComputerApprovalsForOwner(input: {
    ownerEmail: string;
    orgId?: string | null;
    deviceId?: string;
    taskId?: string;
    runId?: string;
    status?: ComputerApprovalStatus;
    limit?: number;
}): Promise<ComputerApprovalRecord[]>;
/**
 * Authorizes an operation immediately before it is enqueued. Callers should
 * pass their transaction handle so one-shot approval consumption and command
 * insertion commit atomically.
 */
export declare function authorizeComputerOperation(input: {
    ownerEmail: string;
    orgId?: string | null;
    deviceId: string;
    envelope: ComputerCommandEnvelope;
    now?: number;
}, client?: DbExec): Promise<void>;
//# sourceMappingURL=computer-supervision-store.d.ts.map