export declare const restrictedDataCategories: readonly ["password", "secret", "private_key", "payment_data", "sensitive_pii"];
export type RestrictedDataCategory = (typeof restrictedDataCategories)[number];
export type RestrictedDataBoundary = "chat_ingress" | "public_api_ingress";
export type RestrictedDataConfidence = "medium" | "high";
export type RestrictedDataSeverity = "high" | "critical";
export type RestrictedDataPolicyRecommendation = "block" | "redact" | "encrypt" | "tokenize" | "purge";
export type RestrictedDataPolicyOutcome = "allow" | "block";
export type RestrictedProviderEgressDecision = "allowed" | "denied";
export type RestrictedRawPersistenceDecision = "allowed" | "forbidden";
export type RestrictedDataAuditEventType = "restricted_data_detected" | "restricted_request_blocked" | "restricted_provider_egress_denied" | "restricted_redacted_exported" | "restricted_telemetry_redacted" | "restricted_raw_not_persisted";
export interface RestrictedDataFinding {
    category: RestrictedDataCategory;
    kind: string;
    ruleId: string;
    confidence: RestrictedDataConfidence;
    severity: RestrictedDataSeverity;
    occurrenceCount: number;
    redactionMarker: string;
    summary: string;
}
export interface RestrictedDataClassification {
    hasRestrictedData: boolean;
    findings: RestrictedDataFinding[];
    redactedText: string;
    redactionCount: number;
}
export interface RestrictedBoundaryPolicyRequest {
    requestId: string;
    boundary: RestrictedDataBoundary;
    classification: RestrictedDataClassification;
}
export interface RestrictedBoundaryPolicyDecision {
    decisionId: string;
    requestId: string;
    boundary: RestrictedDataBoundary;
    outcome: RestrictedDataPolicyOutcome;
    categories: RestrictedDataCategory[];
    recommendations: RestrictedDataPolicyRecommendation[];
    redactionCount: number;
    providerEgress: RestrictedProviderEgressDecision;
    rawPersistence: RestrictedRawPersistenceDecision;
    sanitizedReasons: string[];
    auditSummary: string;
}
export interface RestrictedDataAuditFinding {
    category: RestrictedDataCategory;
    ruleId: string;
    confidence: RestrictedDataConfidence;
    severity: RestrictedDataSeverity;
    occurrenceCount: number;
    redactionMarker: string;
    summary: string;
}
export interface RestrictedDataAuditEvent {
    schemaVersion: 1;
    eventType: RestrictedDataAuditEventType;
    sourceId: string;
    boundary?: RestrictedDataBoundary;
    requestId?: string;
    decisionId?: string;
    categories: RestrictedDataCategory[];
    findings: RestrictedDataAuditFinding[];
    redactionCount: number;
    redactionMarkers: string[];
    sanitizedReasons: string[];
    rawContentIncluded: false;
    providerEgress?: RestrictedProviderEgressDecision;
    rawPersistence?: RestrictedRawPersistenceDecision;
}