import { type ResolvedAccess } from './access-grant.js';
import type { OrgBus } from './bus.js';
import { ToolActivityTracker } from './tool-activity.js';
import type { OrgDef, OrgRole } from './types.js';
export interface FullAccessSession {
    resolvedAccess: ResolvedAccess;
    /** Set only when resolvedAccess.access === 'full'. */
    tracker?: ToolActivityTracker;
}
/** Resolve this session's access mode and, when active, set up its
 *  tool_activity tracker and audit events. Called once per `runOneSession`
 *  attempt, before the role's git enforcement is built. */
export declare function beginFullAccessSession(bus: OrgBus, role: OrgRole, def: OrgDef | undefined, runtimeKey: string): FullAccessSession;
/** Close any tool_activity call left open by an aborted/erroring stream and
 *  append the one audit-log line for this attempt. No-op when this session
 *  was not running with active full access. */
export declare function endFullAccessSession(session: FullAccessSession, args: {
    org: string;
    role: string;
    cwd: string;
    runtime: string;
    sessionId: string | undefined;
    exitCode: number;
    toolCalls: number;
}): void;
//# sourceMappingURL=session-full-access.d.ts.map