import type { ActionExecutionResult, ContainmentRequest, PolicyAction, PolicyActionType, ResponsePolicy, ThreatAlert, PolicyCondition } from "./contracts.js";
export declare function createDefaultResponsePolicy(): ResponsePolicy;
export declare function evaluateCondition(condition: PolicyCondition, alert: ThreatAlert): boolean;
export declare function buildRequestedActions(alert: ThreatAlert, policy: ResponsePolicy): PolicyActionType[];
export declare function buildContainmentActions(request: ContainmentRequest, policy: ResponsePolicy): PolicyActionType[];
export declare function createPolicyAction(alert: ThreatAlert, type: PolicyActionType, mode: ResponsePolicy["mode"], reason: string, evidence: string[], extras?: Partial<PolicyAction>): PolicyAction;
export declare function wrapActionResult(actions: PolicyAction[]): ActionExecutionResult;
//# sourceMappingURL=policy.d.ts.map