import { Verb } from "./PolicyTypes.js";
export interface ScriptScanResult {
    /** Verbs the script needs BEYOND `execute`. Today this is `["write"]` or `[]`. */
    readonly verbs: readonly Verb[];
    /** Why, in the order found. Surfaced to the user so a refusal is explainable. */
    readonly reasons: readonly string[];
    /** True when the scan could not resolve something and escalated as a result. */
    readonly escalated: boolean;
}
/**
 * Reports the extra permission a script needs.
 *
 * Call this with the script that will ACTUALLY be sent — after any `{param}`
 * substitution. Scanning the pre-substitution text is a hole you could drive a
 * parameter value of `gr.insert()` through.
 */
export declare function scanScript(script: string): ScriptScanResult;
/** Convenience: what a background script needs in total. */
export declare function requirementForScript(script: string): {
    verbs: Verb[];
    reasons: readonly string[];
};