/**
 * Permission hooks — Wish B Group 2.
 *
 * A permission hook runs before a tool call and decides whether the
 * call proceeds, is denied, or is modified. Hooks are composable: the
 * SDK walks the chain in order and the FIRST non-"allow" decision
 * wins. Pure `allow` short-circuits successfully.
 *
 * This module ships the type + composition helpers only. Wiring the
 * chain into the rlm.ts tool-dispatch path happens when `runAgent()`
 * lands (Group 2b / 3). Keeping the contract narrow now means the
 * downstream wire-up is mechanical.
 *
 * Spec: `.genie/wishes/rlmx-sdk-upgrade/WISH.md` L23.
 */
import type { HistoryTurn } from "./session.js";
/** Read-only input passed to every hook. */
export interface PermissionHookContext {
    readonly tool: string;
    readonly args: unknown;
    readonly sessionId: string;
    readonly iteration: number;
    readonly history: readonly HistoryTurn[];
}
/**
 * Decision shape. `modified` rewrites `args`; `deny` halts with a
 * reason the SDK surfaces as a `ToolCallAfter{ok:false}` + `Error`
 * event pair.
 */
export type PermissionDecision = {
    readonly decision: "allow";
} | {
    readonly decision: "deny";
    readonly reason: string;
} | {
    readonly decision: "modify";
    readonly modifiedArgs: unknown;
    readonly reason?: string;
};
export type PermissionHook = (ctx: PermissionHookContext) => PermissionDecision | Promise<PermissionDecision>;
/** Canonical allow decision — pre-frozen to avoid needless allocation. */
export declare const ALLOW: PermissionDecision;
/**
 * Walk the hook chain in order. Returns the first non-allow decision;
 * if every hook allows, returns the shared `ALLOW` sentinel. A `modify`
 * decision rewrites `args` for the remaining hooks — chain authors can
 * intentionally compose redactors by ordering hooks (redact first,
 * policy check second).
 */
export declare function runPermissionChain(hooks: readonly PermissionHook[], ctx: PermissionHookContext): Promise<PermissionDecision>;
/**
 * Compose an ordered chain into a single hook function. Useful when
 * a consumer wants to pass "one hook" at the `runAgent` boundary
 * without caring about the internal composition order.
 */
export declare function composeHooks(...hooks: readonly PermissionHook[]): PermissionHook;
//# sourceMappingURL=permissions.d.ts.map