import { AgenticPolicyEngine, type BudgetLimit, type CapabilityEnvelope, type PolicyApproval, type PolicyDecision, type PolicyRequest, type PolicyRule, type PolicyState } from '@claude-flow/security';
export declare function loadPolicyState(projectRoot?: string): PolicyState;
export declare function autoMigratePolicyStateIfNeeded(projectRoot?: string): Promise<{
    migrated: boolean;
    statePath?: string;
    mode?: PolicyState['mode'];
}>;
export declare function withPolicyTransaction<T>(projectRoot: string, operation: (engine: AgenticPolicyEngine) => T | Promise<T>, options?: {
    approvalIssuerVerifier?: (issuer: string) => boolean;
}): Promise<T>;
export declare function evaluatePolicyRequest(request: PolicyRequest, projectRoot?: string): Promise<PolicyDecision>;
export declare function setPolicyMode(mode: PolicyState['mode'], projectRoot?: string): Promise<void>;
export declare function upsertPolicyRule(rule: PolicyRule, projectRoot?: string): Promise<void>;
export declare function setPolicyBudget(limit: BudgetLimit, projectRoot?: string): Promise<void>;
export declare function issuePolicyApproval(approval: Omit<PolicyApproval, 'uses' | 'issuedAt'> & {
    uses?: number;
    issuedAt?: number;
}, projectRoot?: string, approvalIssuerVerifier?: (issuer: string) => boolean): Promise<PolicyApproval>;
export declare function revokePolicyApproval(id: string, projectRoot?: string): Promise<boolean>;
export declare function verifyPolicyLedger(projectRoot?: string): Promise<ReturnType<AgenticPolicyEngine['verifyLedger']>>;
export declare function authorizeMcpTool(toolName: string, input: Record<string, unknown>, context?: Record<string, unknown>, attributes?: Readonly<{
    actionType?: string;
    network?: boolean;
    destructive?: boolean;
    namespaceAccess?: 'read' | 'write';
    envelope?: CapabilityEnvelope;
    costUsd?: number;
    tokens?: number;
    concurrency?: number;
}>): Promise<PolicyDecision>;
/** Trusted classification derived from the registered tool name, never input. */
export declare function classifyMcpTool(toolName: string): {
    actionType: string;
    network: boolean;
    destructive: boolean;
    namespaceAccess?: 'read' | 'write';
};
//# sourceMappingURL=policy-runtime.d.ts.map