import type { PluginConfig } from '../types';
type PermissionRule = {
    permission: string;
    pattern: string;
    action: 'allow' | 'deny';
};
export declare const LOOP_PERMISSION_RULESET: PermissionRule[];
/**
 * Builds the permission ruleset for loop sessions.
 *
 * - Worktree loops get a blanket allow-all (isolated environment).
 * - In-place loops omit the allow-all so the agent's own permissions apply.
 * - Agent tool exclusions are appended as deny rules at the end so they
 *   take precedence over the allow-all via the harness's findLast semantics.
 * - Adds external_directory allow rule for worktree logging when configured AND needed.
 *   Note: With host-session dispatch, worktree sessions no longer need direct host log access.
 *   This parameter is kept for backward compatibility but should be null for new designs.
 */
export declare function buildLoopPermissionRuleset(config: PluginConfig, logDirectory?: string | null, options?: {
    isWorktree?: boolean;
    agentExclusions?: string[];
}): PermissionRule[];
export {};
//# sourceMappingURL=loop.d.ts.map