import type { ResolvedAccess } from './access-grant.js';
import type { AgentMessage, AgentRunner, OrgToolDef } from './agent-runner.js';
import type { OrgEffortLevel, resolveRoleCostTier } from './cost-tier.js';
import type { StreamOptions } from './mailbox.js';
import { type resolveRoleProvider } from './provider.js';
import type { resolveRoleGitEnforcement, roleAuthorityMask } from './role-sandbox.js';
import type { SessionOpts } from './session-types.js';
/** The AgentRunner.run() arguments for one session, built by runOneSession. */
export declare function sessionRunArgs(opts: SessionOpts, s: {
    runner: AgentRunner;
    tools: OrgToolDef[];
    streamOpts: StreamOptions | undefined;
    gitEnforcement: ReturnType<typeof resolveRoleGitEnforcement>;
    model: string;
    tier: ReturnType<typeof resolveRoleCostTier>;
    /** The tier's effort, else the runtime's default (defaultRoleEffort). */
    effort: OrgEffortLevel | undefined;
    prov: ReturnType<typeof resolveRoleProvider>;
    resume: string | undefined;
    authorityMask: ReturnType<typeof roleAuthorityMask>;
    abort: AbortController;
    /** #365: resolved by session-run.ts's resolveRoleAccess before this
     *  session's git enforcement/authority mask are built. Absent/`'scoped'`
     *  reproduces every field below byte-for-byte. */
    resolvedAccess?: ResolvedAccess;
    /** Sections orgs: the variables that point a non-Claude runner at its role's private directory (documents/runtime-isolation.ts). */
    runtimeEnv?: Record<string, string>;
    /** The role's Monomind Mesh name and unread mail (mesh/managed-presence.ts), appended to its system prompt. */
    meshNote?: string;
    /** codex only: filtered policy.sandbox.allowWrite (codex-write-roots.ts). */
    writableRoots?: string[];
}): Parameters<AgentRunner['run']>[0];
export declare function openSessionStream(opts: SessionOpts, stream: AsyncIterable<AgentMessage>, abort: AbortController): Promise<AsyncGenerator<AgentMessage>>;
//# sourceMappingURL=session-stream.d.ts.map