/**
 * Static policy loader (load once, hash, never reload)
 */
import { z } from 'zod';
export declare const PolicySchema: z.ZodObject<{
    version: z.ZodLiteral<"1">;
    allow_network: z.ZodDefault<z.ZodBoolean>;
    redaction: z.ZodPrefault<z.ZodObject<{
        strip_evidence: z.ZodDefault<z.ZodBoolean>;
        strip_payment: z.ZodDefault<z.ZodBoolean>;
        inspect_full_claims: z.ZodDefault<z.ZodBoolean>;
    }, z.core.$strip>>;
    tools: z.ZodPrefault<z.ZodRecord<z.ZodString, z.ZodObject<{
        enabled: z.ZodDefault<z.ZodBoolean>;
        allowed_kinds: z.ZodOptional<z.ZodArray<z.ZodString>>;
    }, z.core.$strip>>>;
    limits: z.ZodPrefault<z.ZodObject<{
        max_jws_bytes: z.ZodDefault<z.ZodNumber>;
        max_response_bytes: z.ZodDefault<z.ZodNumber>;
        tool_timeout_ms: z.ZodDefault<z.ZodNumber>;
        max_concurrency: z.ZodDefault<z.ZodNumber>;
        max_claims_bytes: z.ZodDefault<z.ZodNumber>;
        max_bundle_receipts: z.ZodDefault<z.ZodNumber>;
        max_bundle_bytes: z.ZodDefault<z.ZodNumber>;
        max_ttl_seconds: z.ZodDefault<z.ZodNumber>;
    }, z.core.$strip>>;
    jwks: z.ZodOptional<z.ZodObject<{
        file: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export type PolicyConfig = z.infer<typeof PolicySchema>;
export declare function getDefaultPolicy(): PolicyConfig;
/**
 * Compute the policy hash from a canonical JSON representation.
 * Accepts either raw JSON string or a PolicyConfig object.
 * When given a PolicyConfig, uses deep stable stringify (recursive key sort)
 * so semantically identical policies always hash identically.
 */
export declare function computePolicyHash(input: string | PolicyConfig): Promise<string>;
export declare function loadPolicy(filePath: string): Promise<{
    policy: PolicyConfig;
    hash: string;
}>;
//# sourceMappingURL=policy.d.ts.map