/**
 * ATP Tool Wrapper
 *
 * Security wrapper for OpenClaw tools that intercepts all calls
 * and applies ATP authentication, authorization, and audit logging
 */
import type { ATPClient } from 'atp-sdk';
import type { AgentContext } from '../agent/types.js';
import type { ToolSecurityConfig, ToolExecutionResult } from './types.js';
/**
 * ATP Tool Wrapper Class
 *
 * Wraps any tool to add ATP security checks before execution
 */
export declare class ATPToolWrapper {
    private tool;
    private atpClient;
    private config;
    private rateLimitState;
    constructor(tool: any, atpClient: ATPClient, config?: ToolSecurityConfig);
    /**
     * Execute tool with ATP security checks
     */
    execute(agentContext: AgentContext, ...args: any[]): Promise<ToolExecutionResult>;
    /**
     * Perform ATP security checks
     */
    private checkSecurity;
    /**
     * Verify agent authentication
     */
    private verifyAuthentication;
    /**
     * Check trust level
     */
    private checkTrustLevel;
    /**
     * Check permissions
     */
    private checkPermissions;
    /**
     * Check rate limits
     */
    private checkRateLimit;
    /**
     * Execute the wrapped tool
     */
    private executeTool;
    /**
     * Validate tool execution result
     */
    private validateResult;
    /**
     * Update agent trust score
     */
    private updateTrustScore;
    private logExecutionStart;
    private logExecutionSuccess;
    private logExecutionFailure;
    private logBlockedCall;
    private getToolName;
    private extractArguments;
    private generateRequestId;
    private hashResult;
}
/**
 * Wrap multiple tools with ATP security
 */
export declare function secureTools(tools: any[], atpClient: ATPClient, config?: ToolSecurityConfig): ATPToolWrapper[];
//# sourceMappingURL=wrapper.d.ts.map