export type PolicyRule = {
    action: 'encrypt' | 'decrypt' | 'sign' | 'verify';
    allowedKeyIds?: string[];
    allowedAlgorithms?: string[];
    maxAgeMs?: number;
};
export declare class PolicyChecker {
    private readonly rules;
    constructor(rules?: PolicyRule[]);
    private enforceAllowedKeyIds;
    private enforceAllowedAlgorithms;
    private enforceMaxAge;
    enforce(action: PolicyRule['action'], context: {
        keyId?: string;
        algorithm?: string;
        createdAt?: Date;
    }): void;
}
//# sourceMappingURL=policy.d.ts.map