/** Whether agent-supplied provider requests are limited to reads for a provider. */
export declare function providerApiAgentRequestsReadOnly(provider: string): boolean;
/**
 * Refuse a write in a request an agent supplied for a read-only provider.
 * Every agent-facing action that forwards a caller-built request (request,
 * corpus jobs) calls this before executing or storing it.
 */
export declare function assertAgentProviderRequestAllowed(request: {
    provider: string;
    method?: string | null;
    path: string;
    body?: unknown;
}): void;