import { KeelClient, type RequestFreshnessOptions } from "../client";
import type { Action, PermitRequest, PermitResponse, Resource, Subject } from "../types";
export interface MiddlewareResponseLike {
    status(code: number): MiddlewareResponseLike;
    json(payload: unknown): unknown;
}
export interface KeelMiddlewareOptions<TReq extends MethodUrlLike, TRes extends MiddlewareResponseLike> {
    baseUrl?: string;
    apiKey?: string;
    requestFreshness?: boolean | RequestFreshnessOptions;
    projectId: string;
    getSubject(req: TReq): Subject;
    getAction?(req: TReq): Action;
    getResource(req: TReq): Resource;
    getContext?(req: TReq): Record<string, any> | null;
    idempotencyKey?(req: TReq): string;
    onDeny?(req: TReq, res: TRes, permit: PermitResponse): void;
    onChallenge?(req: TReq, res: TRes, permit: PermitResponse): void;
}
export interface MethodUrlLike {
    method?: string;
    originalUrl?: string;
    url?: string;
}
export interface MiddlewareFailure {
    httpStatus: number;
    body: {
        error: "keel_error";
        message: string;
        status: number;
    };
}
export declare function createKeelClientForMiddleware(options: {
    baseUrl?: string;
    apiKey?: string;
    requestFreshness?: boolean | RequestFreshnessOptions;
}): KeelClient;
export declare function buildPermitRequest<TReq extends MethodUrlLike, TRes extends MiddlewareResponseLike>(req: TReq, options: KeelMiddlewareOptions<TReq, TRes>): PermitRequest;
export declare function enforceDecision<TReq extends MethodUrlLike, TRes extends MiddlewareResponseLike>(req: TReq, res: TRes, permit: PermitResponse, options: Pick<KeelMiddlewareOptions<TReq, TRes>, "onDeny" | "onChallenge">, responseRequestId?: string): "allow" | "handled";
export declare function toMiddlewareFailure(error: unknown): MiddlewareFailure;