export declare const DEFAULT_MONITORING_SINK_TIMEOUT_MS = 5000;
export type MonitoringDeliveryStatus = 'delivered_acked' | 'sent_unacked' | 'not_delivered';
export type MonitoringSinkKind = 'callback' | 'http';
export type MonitoringDeliveryEvidence = {
    at: string;
    ack_hash?: string;
    status_code?: number;
    sink_kind: MonitoringSinkKind;
    ack_verified?: boolean;
};
export type MonitoringDelivery = {
    status: MonitoringDeliveryStatus;
    evidence?: MonitoringDeliveryEvidence;
    reason?: string;
};
export type MonitoringSinkPayload = {
    at: string;
    decision_id?: string;
    action: 'CONTINUE_WITH_MONITORING';
    kind: 'MONITOR';
};
export type FetchLike = (url: string, init: {
    method: string;
    headers: Record<string, string>;
    body: string;
}) => Promise<{
    ok: boolean;
    status: number;
    headers?: {
        get?(name: string): string | null;
    } | Record<string, string>;
    text(): Promise<string>;
}>;
export type MonitoringSinkHttp = {
    url: string;
    headers?: Record<string, string>;
    ackHmacKey?: string | Buffer;
    fetchImpl?: FetchLike;
};
export type MonitoringSinkCallback = (payload: MonitoringSinkPayload) => unknown | Promise<unknown>;
export type MonitoringSink = MonitoringSinkCallback | MonitoringSinkHttp;
export declare function ackBytes(ack: unknown): Buffer;
export declare function verifyAckHmac(ack: Buffer, signature: string, key: string | Buffer): boolean;
/**
 * Invoke the dedicated monitoring sink (if any) and classify delivery.
 * No sink configured → sent_unacked (claim + onEvent only; no ack semantics).
 */
export declare function deliverMonitoring(args: {
    sink?: MonitoringSink;
    timeoutMs?: number;
    ackHmacKey?: string | Buffer;
    payload: MonitoringSinkPayload;
    now: string;
}): Promise<MonitoringDelivery>;
/** Proof/renderer one-liner. Honesty sentence is appended by the renderer, not here. */
export declare function formatMonitoringDeliveryLine(d: MonitoringDelivery, attestedKid?: string | null): string;
/** ENFORCING teeth: not_delivered blocks CWM except observeOnly / failPolicy open. */
export declare function monitoringDeliveryFailClosed(config: {
    observeOnly?: boolean;
    failPolicy?: 'closed' | 'open' | 'lkg';
    profile?: 'ENFORCING_STRICT' | 'ENFORCING_ATOMIC';
}): boolean;
//# sourceMappingURL=monitoring-delivery.d.ts.map