/**
 * Cross-session rate-limit guard for the CLEO LLM credential layer.
 *
 * Writes rate-limit state to a shared file so ALL CLEO processes
 * (sentient daemon, CLI calls, auxiliary router) see the same cooldown —
 * preventing pile-on retries from independent sessions.
 *
 * Port of Hermes' `agent/nous_rate_guard.py` (generalized for any provider).
 * Each 429 from a provider can trigger multiple SDK retries multiplied by
 * multiple Hermes retries.  By recording state on the first 429 and checking
 * before subsequent attempts, we eliminate retry amplification across sessions.
 *
 * State is keyed on `(provider, label)` and stored at:
 *   `${getCleoHome()}/rate-limit-state/<provider>-<label>.json`
 *
 * @module llm/rate-limit-guard
 * @task T9273
 * @epic T-LLM-CRED-CENTRALIZATION Phase 3
 */
/**
 * Absolute path to the rate-limit state file for a given `(provider, label)`.
 *
 * Exposed for unit tests.
 *
 * @param provider - LLM provider identifier (e.g. `'anthropic'`).
 * @param label    - Credential label (e.g. `'personal'`).
 * @returns Absolute path to the JSON state file.
 *
 * @task T9273
 */
export declare function rateLimitStatePath(provider: string, label: string): string;
/**
 * Record that a provider+label combination is currently rate-limited.
 *
 * Parses the reset time from HTTP response headers when available, then
 * falls back to `defaultCooldownSeconds` (default 300 s).  Writes state to
 * `${getCleoHome()}/rate-limit-state/<provider>-<label>.json` so that ALL
 * CLEO processes (sentient daemon, CLI calls, auxiliary router) see the same
 * cooldown — preventing pile-on retries from independent sessions.
 *
 * Port of Hermes' `agent/nous_rate_guard.py:record_nous_rate_limit`
 * (generalized for any provider).
 *
 * @param provider - LLM provider identifier (e.g. `'anthropic'`).
 * @param label    - Credential label (e.g. `'personal'`).
 * @param opts     - Optional header map and fallback cooldown seconds.
 *
 * @task T9273
 */
export declare function recordRateLimit(provider: string, label: string, opts?: {
    /** HTTP response headers (parses x-ratelimit-reset, retry-after). */
    headers?: Headers | Record<string, string>;
    /** Default cooldown seconds if no header present (default 300). */
    defaultCooldownSeconds?: number;
}): Promise<void>;
/**
 * Return remaining seconds until the rate-limit clears, or `null` if not active.
 *
 * Stale state files (reset_at in the past) are treated as cleared —
 * the file is NOT deleted here to avoid a lock-delete race; `pick()` callers
 * may clean up with `clearRateLimit` after a successful request.
 *
 * Port of Hermes' `agent/nous_rate_guard.py:nous_rate_limit_remaining`.
 *
 * @param provider - LLM provider identifier (e.g. `'anthropic'`).
 * @param label    - Credential label (e.g. `'personal'`).
 * @returns Seconds remaining (positive float) or `null` if guard is inactive.
 *
 * @task T9273
 */
export declare function rateLimitRemaining(provider: string, label: string): Promise<number | null>;
/**
 * Clear the rate-limit state for a provider+label.
 *
 * Idempotent — succeeds even if no state file exists.
 *
 * Port of Hermes' `agent/nous_rate_guard.py:clear_nous_rate_limit`.
 *
 * @param provider - LLM provider identifier (e.g. `'anthropic'`).
 * @param label    - Credential label (e.g. `'personal'`).
 *
 * @task T9273
 */
export declare function clearRateLimit(provider: string, label: string): Promise<void>;
/**
 * Ensure the rate-limit-state directory exists.
 *
 * Called lazily by consumers that need the directory without writing a file.
 * Re-exported for test setup.
 *
 * @internal
 * @task T9273
 */
export declare function ensureRateLimitStateDir(): string;
//# sourceMappingURL=rate-limit-guard.d.ts.map