import type { AgentContext } from "../agent/context/AgentContext.js";
import type { AnyDefinedTool } from "../agent/types.js";
import type { Model, Provider } from "@slopus/rig-execution";
import type { PermissionReviewAgent } from "./PermissionReviewAgent.js";
/**
 * Builds the sister agent that reviews Auto permission decisions.
 *
 * The caller supplies a context whose filesystem and shell are already bound to their own
 * read-only permissions, so the reviewer cannot change the workspace and cannot be widened by the
 * agent it reviews. Its permission mode is never Auto, which is what stops a review from
 * recursing into another review.
 *
 * The reviewer keeps its history across reviews, matching Codex's guardian. Because it does, each
 * review sends only the conversation it has not already seen; resending the whole transcript would
 * duplicate every earlier review's context inside the next one.
 */
export declare function createPermissionReviewSideAgent(options: {
    context: AgentContext;
    id: string;
    model: Model;
    provider: Provider;
    /** Reads the user's global SECURITY.md again before every review. */
    readSecurityPolicy?: () => Promise<string | undefined>;
    startDate?: string;
    tools: readonly AnyDefinedTool[];
}): PermissionReviewAgent;