import { AgenticPolicyEngine, type BudgetLimit, type CapabilityEnvelope, type PolicyApproval, type PolicyDecision, type PolicyRequest, type PolicyRule, type PolicyState } from '@claude-flow/security/policy/index';
/**
 * Exported for ADR-406 mission storage, which takes the same per-file lock
 * (pid, pid namespace and boot id identify a dead owner) rather than a copy.
 */
export declare function acquireLock(lockPath: string): Promise<() => void>;
export declare function loadPolicyState(projectRoot?: string): PolicyState;
export declare function autoMigratePolicyStateIfNeeded(projectRoot?: string): Promise<{
    migrated: boolean;
    statePath?: string;
    mode?: PolicyState['mode'];
}>;
export declare function withPolicyTransaction<T>(projectRoot: string, operation: (engine: AgenticPolicyEngine) => T | Promise<T>, options?: {
    approvalIssuerVerifier?: (issuer: string) => boolean;
}): Promise<T>;
export declare function evaluatePolicyRequest(request: PolicyRequest, projectRoot?: string): Promise<PolicyDecision>;
export declare function setPolicyMode(mode: PolicyState['mode'], projectRoot?: string): Promise<void>;
export declare function upsertPolicyRule(rule: PolicyRule, projectRoot?: string): Promise<void>;
export declare function setPolicyBudget(limit: BudgetLimit, projectRoot?: string): Promise<void>;
export declare function issuePolicyApproval(approval: Omit<PolicyApproval, 'uses' | 'issuedAt'> & {
    uses?: number;
    issuedAt?: number;
}, projectRoot?: string, approvalIssuerVerifier?: (issuer: string) => boolean): Promise<PolicyApproval>;
export declare function revokePolicyApproval(id: string, projectRoot?: string): Promise<boolean>;
export type PolicyLedgerVerification = ReturnType<AgenticPolicyEngine['verifyLedger']> & {
    /** How the second anchor was brought in line during this call. */
    secondaryAnchor?: 'recorded-from-state' | 'restored-primary' | 'established-explicitly';
};
/**
 * Verification (#3568, #3602). It must not run inside `withPolicyTransaction`,
 * whose own post-operation check throws a generic
 * `policy-ledger-verification-failed` and hides which check failed. It writes
 * only to bring the second anchor in line, or on an explicit `establishAnchor`.
 */
export declare function verifyPolicyLedger(projectRoot?: string, options?: {
    establishAnchor?: boolean;
    full?: boolean;
}): Promise<PolicyLedgerVerification>;
export declare function authorizeMcpTool(toolName: string, input: Record<string, unknown>, context?: Record<string, unknown>, attributes?: Readonly<{
    actionType?: string;
    network?: boolean;
    destructive?: boolean;
    namespaceAccess?: 'read' | 'write';
    envelope?: CapabilityEnvelope;
    costUsd?: number;
    tokens?: number;
    concurrency?: number;
}>): Promise<PolicyDecision>;
/** Trusted classification derived from the registered tool name, never input. */
export declare function classifyMcpTool(toolName: string): {
    actionType: string;
    network: boolean;
    destructive: boolean;
    namespaceAccess?: 'read' | 'write';
};
//# sourceMappingURL=policy-runtime.d.ts.map