interface AgentConfig {
    description?: string;
    mode?: "primary" | "subagent" | "all";
    prompt?: string;
    temperature?: number;
    permission?: Record<string, unknown>;
    color?: string;
    [key: string]: unknown;
}
/**
 * Load all agent markdown files from the given directory.
 * Returns a Record<string, AgentConfig> keyed by agent name (filename without .md).
 *
 * Install-root grant invariant: the oracle is authored `skill: allow` and the
 * realpath of this package, read before either host receives an agent. Move the
 * external-directory map after every authored action, and its root rule after
 * every authored resource: both hosts use last-match-wins, and v2 translation
 * preserves insertion order. Other permissions and user overrides stay intact.
 * Missing/non-allow skill permission (including protected agents' deny) disables
 * injection. Unresolvable or unrepresentable roots abort loading on both hosts,
 * never widen a literal path: their matchers expand both `*` and `?`, normalize
 * backslashes, and offer no literal wildcard escape. Regex punctuation is already
 * escaped by the hosts; POSIX literal backslashes cannot be represented safely.
 */
export declare function loadAgents(agentDir: string, installRoot?: string): Record<string, AgentConfig>;
export {};
//# sourceMappingURL=load-agents.d.ts.map