import { DecisionDeny } from "../types.js";
//#region src/agents/denial.d.ts
/**
 * The one model-visible denial payload used by every JS adapter.
 *
 * One *payload* is idiomatic. One *delivery* is not:
 *
 * - Vercel AI SDK, Mastra, and OpenAI Agents return this object as the tool
 *   result. Throwing becomes a generic tool error (AI SDK), a Mastra failure,
 *   or OpenAI Agents' `errorFunction` / `ToolCallError` — none of those
 *   preserve these fields for the model.
 * - Claude Agent SDK wraps the same object in a MCP `CallToolResult` with
 *   `isError: true`. That is how Claude reads a composed tool error; a throw
 *   is a raw exception, and omitting `isError` looks like success.
 * - LangGraph returns this object so `ToolNode` can wrap it in a real
 *   `ToolMessage`. Because the tool does not throw, that message's `status`
 *   is `success` — the denial lives in the payload. Fabricating a
 *   `ToolMessage` to force `status: "error"` reaches `messagesStateReducer`
 *   and takes the graph down; this namespace also must not value-import
 *   `@langchain/core` to construct a genuine one.
 * - Vercel Eve's `guardTool` throws `ArcjetDeniedError` (which carries this
 *   same payload on `error.denial`). Eve projects a throw as
 *   `action.result` / `status: "failed"`. Returning this object is opt-in
 *   (`onDeny: "result"`) because a tool with `outputSchema` must not
 *   silently resolve to a different shape. Prefer `guardApproval` when the
 *   model should read a denial status without a throw.
 *
 * Models and agents cannot share one handler. `guardTool` (and the other
 * model-facing helpers) must produce a framework-idiomatic envelope the
 * model can inspect. `guardAction` throws `ArcjetDeniedError` so application
 * code can `catch` and branch. Passing the same `onDeny` to both would
 * either leak a throw into the model loop or swallow a policy denial as a
 * successful action.
 *
 * Every adapter builds its payload here. Only an adapter that needs a
 * non-trivial envelope declares a module of its own — currently just
 * `claude-agent-sdk/v0/denial.ts`, for the `CallToolResult` wrapper. This
 * module imports no SDK, so sharing it does not put one vendor's SDK in
 * another vendor namespace's import graph.
 */
export interface ArcjetDenialResult {
  arcjetDenied: true;
  /** Denial reason, e.g. `"RATE_LIMIT"` or `"PROMPT_INJECTION"`. */
  reason: string;
  /** Human/model-readable explanation of the denial. */
  message: string;
  /** Whether retrying later can succeed (true for rate limits). */
  retryable: boolean;
  /** Seconds until a rate-limited call may be retried. */
  retryAfterSeconds?: number;
}
/**
 * Seconds until a rate-limited call may be retried, or `undefined` when no
 * denying rate-limit rule carries a usable reset.
 *
 * Only meaningful for a `RATE_LIMIT` denial; the reason check stays with the
 * caller rather than being duplicated here. Among the results, only rules that
 * denied are considered, and the latest reset among them is reported — that is
 * when the call would actually be permitted, whereas the earliest (or the
 * first in submission order) invites a retry that the longer rule denies
 * again.
 *
 * @internal Exported for use by the vendor namespaces, so every one of them
 * reports the same retry-after; not part of the public API.
 */
export declare function retryAfterSeconds(decision: DecisionDeny): number | undefined;
/** Model- and user-readable explanation of a denial. */
export declare function deniedReason(decision: DecisionDeny): string;
/** Explanation used when the policy could not be evaluated. */
export declare function unavailableReason(): string;
/**
 * Backoff hint returned to the model when the guard is unavailable.
 *
 * A rate-limit denial derives its hint from the denying rule's
 * `resetAtUnixSeconds`. This path has nothing to derive from. Five seconds
 * paces a model's retry loop.
 */
export declare const UNAVAILABLE_RETRY_AFTER_SECONDS: number;
export declare function denialResult(decision: DecisionDeny): ArcjetDenialResult;
export declare function unavailableResult(): ArcjetDenialResult;
//#endregion