import { readWritePolicy, type FabricWritePolicy } from "./write-guard.js";
export { readWritePolicy, type FabricWritePolicy };
/** Stable PI_FABRIC_LINEAGE contract for a child process. */
export interface FabricAgentLineage {
    version: 1;
    rootSessionId: string;
    parentSessionId?: string;
    parentRunId?: string;
    runId: string;
    depth: number;
    childIndex: number;
    worker: true;
}
export declare const readAgentLineage: (raw?: string | undefined) => FabricAgentLineage | undefined;
export interface AgentWritePolicyRequest {
    readOnly?: boolean;
    writableRoots?: string[];
    shell?: "deny" | "unconfined";
}
export declare const requestsWritePolicy: (request: AgentWritePolicyRequest) => boolean;
/** Shape checks that must pass before admission or worktree side effects. */
export declare const checkWritePolicyRequest: (request: AgentWritePolicyRequest) => void;
/**
 * Effective child policy: explicit request narrowed by the caller's own
 * PI_FABRIC_WRITE_POLICY. A confined caller cannot drop readOnly, enable an
 * unconfined shell, or name roots outside its own; an empty request inherits.
 */
export declare const resolveChildWritePolicy: (request: AgentWritePolicyRequest, parent: FabricWritePolicy | undefined, cwd: string) => FabricWritePolicy | undefined;
//# sourceMappingURL=child-env.d.ts.map