/**
 * Session Policy Enforcement
 *
 * Maps OpenClaw agent lifecycle states to ATP-enforced tool permissions.
 */
import type { ATPClient } from 'atp-sdk';
import type { ClawSessionContext, ClawStatePolicy, SessionPolicyResult, EnforceSessionOptions } from './types.js';
/**
 * Default state-to-permissions map for OpenClaw agent sessions.
 * Can be overridden per-call via EnforceSessionOptions.policyOverride.
 */
export declare const defaultClawStatePolicy: ClawStatePolicy;
/**
 * Enforce ATP policies for an OpenClaw agent session.
 *
 * Maps the agent's current state → permissions, optionally validates each
 * allowed tool against ATP's permission service, logs the decision, and
 * returns a structured result — no exceptions thrown on policy denials.
 *
 * @param sessionContext - Agent DID, current state, and optional tags
 * @param atpClient      - Initialised ATP client instance
 * @param options        - Optional policy overrides or local-only mode
 * @returns Allowed tools, forbidden tools, and tools requiring approval
 */
export declare function enforceAtpPoliciesForClawSession(sessionContext: ClawSessionContext, atpClient: ATPClient, options?: EnforceSessionOptions): Promise<SessionPolicyResult>;
//# sourceMappingURL=enforce.d.ts.map