/**
 * Enforced approaches: binding directives attached to agents in
 * `.claude/grimoire.json` (`router.agents.<name>.approaches`). The router
 * injects a mandate at SubagentStart and, for skill-backed approaches,
 * verifies at SubagentStop that the bound skill was invoked — bouncing a
 * non-compliant editing run back exactly once.
 */
import type { ApproachEntry } from './types.js';
/**
 * Marks bounce feedback in the transcript; its presence caps the adherence
 * check at one bounce per run (stateless loop protection). Must never appear
 * in the mandate text, or the check would self-disable on every run.
 */
export declare const APPROACH_CHECK_MARKER = "[grimoire:approach-check]";
/**
 * Reads the enforced approaches configured for an agent. Fail-soft: returns
 * `[]` on missing config, missing router/agents keys, unknown agent, or
 * malformed entries — hooks must never throw over configuration.
 */
export declare function loadAgentApproaches(configDir: string, agentType: string): ApproachEntry[];
/**
 * Builds the file-ownership notice injected at SubagentStart whenever
 * enforcement is active. Independent of approaches: an agent with none still
 * needs to know that a denied edit is a routing decision, not an obstacle.
 *
 * The tool layer already blocks shell writes to owned files; saying so up
 * front is what stops the run from burning turns probing for a way around.
 */
export declare function buildOwnershipNotice(): string;
/**
 * Builds the mandate injected as SubagentStart additionalContext — the
 * agent sees it before its first prompt.
 */
export declare function buildApproachMandate(agentType: string, approaches: readonly ApproachEntry[]): string;
/**
 * Builds the bounce feedback injected as SubagentStop additionalContext —
 * the run continues so the agent can act on it.
 */
export declare function buildApproachFeedback(violated: readonly ApproachEntry[]): string;
/**
 * Result of the SubagentStop adherence check. `violated` is non-empty only
 * when the outcome is `bounced`.
 */
export interface ApproachCheckResult {
    outcome: 'passed' | 'bounced' | 'skipped';
    violated: ApproachEntry[];
}
/**
 * Decides whether a finished run honored its skill-backed approaches.
 * Decision order matters:
 *   1. nothing skill-backed → skipped (nothing verifiable)
 *   2. cancelled/error stop → skipped (don't pile onto a failed run)
 *   3. no transcript → skipped (fail open; hooks never wedge)
 *   4. every bound skill invoked → passed (even after a prior bounce)
 *   5. marker already present → skipped (at most one bounce per run)
 *   6. no edits made → skipped (read-only runs have nothing to enforce)
 *   7. otherwise → bounced with the missing approaches
 */
export declare function evaluateApproachCheck(approaches: readonly ApproachEntry[], transcriptText: string | null, stopReason?: string): ApproachCheckResult;
//# sourceMappingURL=approaches.d.ts.map