import { ResolvedSkillTrustPolicy, SkillSource, SkillTrustLevel, SupplyChainDecision, SupplyChainPolicy } from "./types.js";

//#region src/supply-chain/policy.d.ts

/**
 * Override the framework-maintained denylist. The MVP keeps this
 * dormant - only the operator-managed denylist is consulted unless
 * tests inject patterns here.
 *
 * @experimental
 */
declare function _setFrameworkDenylistForTesting(patterns: ReadonlyArray<string>): void;
/**
 * Evaluate the supply-chain policy for the supplied package name.
 *
 * @stable
 */
declare function evaluateSupplyChainPolicy(packageName: string, policy?: SupplyChainPolicy): SupplyChainDecision;
/**
 * Throw {@link SkillInstallDeniedError} when the policy resolves to
 * `'deny'`. Returns silently otherwise so callers can chain it
 * inside a wider install pipeline.
 *
 * @stable
 */
declare function assertPolicyAllows(packageName: string, policy: SupplyChainPolicy): void;
/**
 * Resolve the trust policy for a (source, trust-level) tuple. The
 * resolver enforces the project-wide rule that npm/git installs
 * always run with `--ignore-scripts` and that signature verification
 * is mandatory for `untrusted`.
 *
 * @stable
 */
declare function resolveTrustPolicy(source: SkillSource, trustLevel: SkillTrustLevel | undefined): ResolvedSkillTrustPolicy;
/**
 * Glob match for npm package patterns. Implements:
 *
 * - `@org/*` matches every package in the scope.
 * - `*` matches a single segment (no `/`).
 * - Plain strings match exactly.
 *
 * @stable
 */
declare function matchesGlob(packageName: string, pattern: string): boolean;
//#endregion
export { _setFrameworkDenylistForTesting, assertPolicyAllows, evaluateSupplyChainPolicy, matchesGlob, resolveTrustPolicy };
//# sourceMappingURL=policy.d.ts.map