export declare function checkGitPolicy(cmd: string, level: 'none' | 'read' | 'commit' | 'push', opts?: {
    /** The role's Bash runs inside the SDK's OS sandbox for THIS session —
     *  the runtime result from resolveRoleGitEnforcement, never the config. */
    osSandboxed?: boolean;
}): string | null;
//# sourceMappingURL=policy-git.d.ts.map