export type PermissionDecision = "allow" | "ask" | "deny";
export type PermissionRules = Record<string, PermissionDecision>;
export interface PermissionConfig {
    rules?: PermissionRules;
}
export declare const PERMISSION_POLICY_ENV = "PI_SUBAGENT_PERMISSION_POLICY";
export declare const PERMISSION_AUDIT_PATH_ENV = "PI_SUBAGENT_PERMISSION_AUDIT_PATH";
export declare function validatePermissionRules(value: unknown, label: string): PermissionRules | undefined;
export declare function validatePermissionConfig(value: unknown, label?: string): PermissionConfig | undefined;
export declare function resolvePermissionRules(globalConfig?: PermissionConfig, agentRules?: PermissionRules): PermissionRules | undefined;
export declare function permissionDecision(rules: PermissionRules | undefined, toolName: string): PermissionDecision;
export declare function encodePermissionRules(rules: PermissionRules | undefined): string | undefined;
export declare function decodePermissionRules(encoded: string | undefined): PermissionRules | undefined;
export declare function permissionArgsPreview(input: unknown): string;
export declare function appendPermissionAudit(filePath: string | undefined, record: Record<string, unknown>): void;
//# sourceMappingURL=permissions.d.ts.map