import type { ActionAuditConfig, AuditActorKind, AuditStatus } from "./types.js";
export declare function normalizeAuditConfig(raw: unknown): ActionAuditConfig | undefined;
export declare function resolveAuditAttach(config: ActionAuditConfig | undefined, readOnly: boolean | undefined): boolean;
export declare function shouldRecordAudit(config: ActionAuditConfig | undefined, actionName: string): boolean;
/**
 * Agent protocols: the app's own agent (`tool`) and the MCP, WebMCP, and A2A
 * surfaces outside agents use. A call over one records as the agent acting
 * for the signed-in user; that user's email does not make it a click.
 */
export declare const AGENT_AUDIT_CALLERS: ReadonlySet<string>;
export declare function deriveActorKind(caller: string | undefined, actorEmail: string | undefined | null, orgId?: string | null): AuditActorKind;
export declare function isAuditDisabled(): boolean;
export type { AuditStatus };