import { type AuditAttribution } from "./attribution.js";
import type { ActionAuditConfig, AuditStatus } from "./types.js";
/** The action and the principal it ran as. */
export interface AuditSubject {
    actionName?: string;
    userEmail?: string;
    orgId?: string | null;
}
export interface RecordActionAuditInput {
    config: ActionAuditConfig | undefined;
    args: unknown;
    ctx: AuditSubject | undefined;
    /** From `auditAttribution` or `routeAuditAttribution`. */
    attribution: AuditAttribution;
    status: AuditStatus;
    result?: unknown;
    error?: unknown;
}
/**
 * Reserved argument a health or capability probe sends as its only argument
 * (`{ "__probe__": true }`) to check that an action route is deployed and the
 * token is accepted. The call is expected to be rejected, so it is not a
 * failure worth a row; the PR recap workflow alone sends ~700 a day.
 */
export declare const AUDIT_PROBE_ARG = "__probe__";
export declare function recordActionAudit(input: RecordActionAuditInput): Promise<void>;