/**
 * strategies/doorError — a sign-in door's construction refusal, re-raised as a
 * boot refusal naming the ENV key. The door names the option it refused
 * (`SignInDoorConfigError.option`); this maps it — never a regex over text.
 */
import { IdentityConfigError } from './config.js';
/** Re-raise a door/store construction refusal as an {@link IdentityConfigError}. */
export declare function doorRefusal(strategy: string, err: unknown): IdentityConfigError;
/**
 * `IDENTITY_SIGN_IN_ADDRESS_REFUSE_AFTER` as the door's `limits` fragment —
 * absent when unset (the default: an address is only delayed), refused at boot
 * when 0 (a refusal after no failures would refuse everybody).
 */
export declare function addressRefusalLimits(value: number | undefined): {
    readonly refuseAddressAfter: number;
} | undefined;