export type PermissionDecision = 'allow' | 'ask' | 'deny';
export type ActionRisk = 'read-only' | 'local-write' | 'network-dependency' | 'org-read' | 'org-mutate-deploy' | 'git-remote-shared' | 'destructive';
export type CommandPermission = {
    id: string;
    risk: ActionRisk;
    decision: PermissionDecision;
    commands: string[];
    description: string;
};
export type CommandPermissionResult = {
    decision: PermissionDecision;
    risk: ActionRisk;
    ruleId: string;
    argv: string[];
    reason: string;
};
export type RuntimePermissionSupport = {
    runtime: 'claude' | 'codex' | 'cursor' | 'opencode';
    enforcement: 'native-command-policy' | 'approval-only' | 'unsupported';
    detail: string;
};
export declare const COMMAND_PERMISSION_POLICY: readonly Readonly<{
    commands: readonly string[];
    id: string;
    risk: ActionRisk;
    decision: PermissionDecision;
    description: string;
}>[];
export declare const COMMAND_PERMISSION_POLICY_DIGEST: string;
export declare const RUNTIME_PERMISSION_SUPPORT: readonly RuntimePermissionSupport[];
export declare function classifyCommand(command: string | readonly string[]): CommandPermissionResult;
export declare function openCodeBashPermissions(role: 'developer' | 'reviewer'): Record<string, PermissionDecision>;