/**
 * #502 review round 5: the operator approving a path the plant watch
 * (planted-paths.ts) would otherwise quarantine — explicitly, one path at a
 * time, with `monomind org approve-paths <path>…`. Signing an org never
 * approves anything as a side effect.
 *
 * Candidates are the paths the watch would quarantine at its next check:
 * a protected path that was recorded missing and now exists, and a Claude
 * Code global config that was not there at the first look. Before the first
 * look (#548) no Claude config is a candidate: `strayClaudeConfigs` trusts
 * every one present when it records that look.
 */
export interface ApprovalCtx {
    root: string;
    operatorDir?: string;
    home?: string;
    env?: NodeJS.ProcessEnv;
}
/** What `approve-paths` could newly trust (and the watch would quarantine). */
export declare function approvalCandidates(c: ApprovalCtx): string[];
/** Claude configs monomind's first look will trust — empty once it is recorded. */
export declare function firstLookConfigs(c: ApprovalCtx): string[];
/** Approve exactly `paths`. Returns what was approved and what was not a
 *  candidate (left untouched). */
export declare function approvePaths(c: ApprovalCtx, paths: string[]): {
    approved: string[];
    notCandidates: string[];
};
//# sourceMappingURL=plant-approvals.d.ts.map