/**
 * Per-session CLEO_OWNER_OVERRIDE cap (T1501 / P0-5).
 *
 * Enforces a hard cap (default: 10, or the owner's sealed
 * `evidence.overrideCapPerSession`, T13787) on how many times
 * `CLEO_OWNER_OVERRIDE` may be used within a single session. Above the cap the
 * call is rejected with `E_OVERRIDE_CAP_EXCEEDED`. The former
 * `CLEO_OWNER_OVERRIDE_WAIVER` file no longer lifts the cap (T13787): any agent
 * could write one; a set waiver is ignored and audited.
 *
 * The running count is persisted in
 * `.cleo/audit/session-override-count.<sessionId>.json` so it survives across
 * multiple CLI invocations within the same session (each invocation is its own
 * process).
 *
 * ## Worktree-context exemption (T1504)
 *
 * Overrides that originate from a worktree-orchestrate workflow are tagged with
 * `workTreeContext: true` and excluded from the per-session cap counter.  They
 * are still logged in full to force-bypass.jsonl for audit purposes.
 *
 * Detection: the `command` argument contains a path segment matching the
 * canonical worktree layout (`/worktrees/`).  This heuristic is controlled by
 * the `CLEO_OVERRIDE_EXEMPT_WORKTREE` env var (defaults to `true`).
 *
 * @adr ADR-059
 * @task T1501
 * @task T1504
 */
/**
 * Default maximum CLEO_OWNER_OVERRIDE uses per session (T1501 / P0-5).
 *
 * Raised from 3 → 10 by T1504: orchestrate sessions legitimately spawn multiple
 * workers that each re-verify, so the original 3 was too low.
 */
export declare const DEFAULT_OVERRIDE_CAP_PER_SESSION = 10;
/**
 * The per-project setting that replaces the default cap (T13787). Only the
 * owner path in `override-cap-setting.ts` may change it.
 */
export declare const OVERRIDE_CAP_SETTING = "evidence.overrideCapPerSession";
/** The largest cap the owner may set; a larger value is clamped to it (T13787). */
export declare const MAX_OVERRIDE_CAP_PER_SESSION = 100;
/** The owner command that changes the cap, named in every refusal (T13787). */
export declare const OVERRIDE_CAP_OWNER_COMMAND = "cleo config set evidence.overrideCapPerSession <n>";
/**
 * Canonical worktree path segment used to detect worktree-orchestrate context
 * (T1504 / ADR-059 §D3).
 *
 * When a `command` string contains this segment the override is considered
 * originating from an orchestrate worktree and is exempt from the per-session
 * cap counter (but still logged).
 */
export declare const WORKTREE_PATH_SEGMENT = "/worktrees/";
/**
 * Whether worktree-context overrides are exempt from the per-session cap counter.
 *
 * Controlled by the `CLEO_OVERRIDE_EXEMPT_WORKTREE` environment variable.
 * Defaults to `true`.  Set to `"0"` or `"false"` to disable the exemption.
 *
 * @task T1504
 */
export declare function isWorktreeExemptionEnabled(): boolean;
/**
 * Detect whether a CLI command string originates from a worktree-orchestrate
 * workflow by checking for the canonical worktree path segment.
 *
 * @param command - The CLI command line string (e.g. from `process.argv`).
 * @returns `true` when the command path contains `/worktrees/`.
 *
 * @task T1504
 */
export declare function isWorktreeContext(command: string): boolean;
/**
 * Resolve the path of the per-session override count file.
 *
 * @param projectRoot - Absolute path to the project root.
 * @param sessionId - Active session ID (use "global" when no session).
 * @returns Absolute path to `.cleo/audit/session-override-count.<sessionId>.json`.
 *
 * @task T1501
 */
export declare function getSessionOverrideCountPath(projectRoot: string, sessionId: string): string;
/**
 * Read the persisted override count for a session.
 *
 * Returns 0 when the file does not exist (new session or first override).
 *
 * @param projectRoot - Absolute path to the project root.
 * @param sessionId - Active session ID.
 * @returns Current override count for the session.
 *
 * @task T1501
 */
export declare function readSessionOverrideCount(projectRoot: string, sessionId: string): number;
/**
 * Persist the override count for a session.
 *
 * Errors are swallowed — persistence failures must not block the override
 * write.  The count file is advisory; the real audit trail is force-bypass.jsonl.
 *
 * @param projectRoot - Absolute path to the project root.
 * @param sessionId - Active session ID.
 * @param count - Updated count to persist.
 *
 * @task T1501
 */
export declare function writeSessionOverrideCount(projectRoot: string, sessionId: string, count: number): void;
/**
 * Clear the persisted override count for a session.
 *
 * Called at session end to reset the counter so a subsequent session always
 * starts at zero (T9505 — BUG #5: override-cap session-end cleanup).
 *
 * Errors are swallowed — a missing or already-deleted file is treated as
 * already cleared.  Clearing failures must never block session end.
 *
 * @param projectRoot - Absolute path to the project root.
 * @param sessionId - The session ID whose counter file should be removed.
 *
 * @task T9505
 */
export declare function clearSessionOverrideCount(projectRoot: string, sessionId: string): void;
/** Result of the override cap check. */
export interface OverrideCapResult {
    /** Whether the override is permitted. */
    allowed: boolean;
    /** Error code when not allowed (E_OVERRIDE_CAP_EXCEEDED). */
    errorCode?: string;
    /** Human-readable message. */
    errorMessage?: string;
    /** 1-based ordinal of this override within the session (populated on success). */
    sessionOverrideOrdinal?: number;
    /**
     * True when the override was exempt from the cap counter because it originated
     * from a worktree-orchestrate workflow (T1504 / ADR-059 §D3).
     *
     * Worktree-context overrides are still logged in force-bypass.jsonl.
     */
    workTreeContext?: boolean;
}
/**
 * Check and enforce the per-session CLEO_OWNER_OVERRIDE cap.
 *
 * Reads the persisted count, checks it against the cap, increments the count
 * on success, and returns the ordinal.
 *
 * ## Worktree-context exemption (T1504 / ADR-059 §D3)
 *
 * When `command` contains `/worktrees/` AND `CLEO_OVERRIDE_EXEMPT_WORKTREE` is
 * not disabled, the override is permitted without counting against the cap.  It
 * is still logged in force-bypass.jsonl with `workTreeContext: true`.
 *
 * @param projectRoot - Absolute path to the project root.
 * @param sessionId - Active session ID ("global" when no session is active).
 * @param cap - Maximum overrides allowed per session (default: 10); callers pass
 *   the project's owner setting from `resolveOverrideCap` (T13787).
 * @param command - CLI command string used for worktree-context detection (optional).
 * @returns `OverrideCapResult` indicating whether the override is permitted.
 *
 * @task T1501
 * @task T1504
 * @adr ADR-059
 */
export declare function checkAndIncrementOverrideCap(projectRoot: string, sessionId: string, cap?: number, command?: string): OverrideCapResult;
//# sourceMappingURL=override-cap.d.ts.map