import type { AccessPolicy, Checkpoint, PolicyInput } from './types.js';
export interface SealedCheckpoint<State> {
    readonly checkpoint: Checkpoint<State>;
    readonly algorithm: 'HMAC-SHA-256';
    readonly signature: string;
}
export declare function sealCheckpoint<State>(checkpoint: Checkpoint<State>, secret: string): Promise<SealedCheckpoint<State>>;
export declare function verifySealedCheckpoint<State>(sealed: SealedCheckpoint<State>, secret: string): Promise<boolean>;
export declare function redactPaths<Value>(value: Value, paths: readonly string[], replacement?: unknown): Value;
export interface ApprovalGate<State> {
    request(input: PolicyInput<State>): string;
    approve(requestId: string, actor: string): boolean;
    revoke(requestId: string, actor: string): void;
    status(requestId: string): {
        readonly approvals: readonly string[];
        readonly approved: boolean;
        readonly expiresAt: number;
    } | undefined;
    policy(): AccessPolicy<State>;
}
export declare function forgeApprovalGate<State>(options?: {
    readonly approvals?: number;
    readonly ttlMs?: number;
}): ApprovalGate<State>;
//# sourceMappingURL=security.d.ts.map