/**
 * Permission gate — prompts before bash/write/edit/webfetch/websearch; checks
 * modes.{mode}.auto_allow from the merged (global + project) config; persists
 * "always" choices back to the global config. Hard enforcement (denied tools,
 * enabled_tools allowlists, bash command patterns, .webtoolsignore hosts)
 * applies even without a UI.
 */
import type { ExtensionAPI } from "../../core/extensions/types.js";
export declare function setupPermissionGate(hoo: ExtensionAPI): void;
//# sourceMappingURL=permission-gate.d.ts.map