export declare const REPO_ACCESS_MANIFEST_PATHS: readonly [".aiwg/ops/security/repo-access.manifest.yaml", ".aiwg/security/repo-access.manifest.yaml"];
export declare const REPO_ACCESS_ACTIONS: readonly ["read", "write", "commit", "push", "issue-comment", "service-action", "destructive"];
export type RepoAccessAction = typeof REPO_ACCESS_ACTIONS[number];
export interface RepoAccessEntry {
    name: string;
    path: string;
    actions: RepoAccessAction[];
    notes?: string;
}
export interface RepoAccessManifest {
    version: string;
    path: string;
    projectRoot: string;
    defaultPolicy: 'deny';
    repos: RepoAccessEntry[];
}
export interface RepoAccessDecision {
    allowed: boolean;
    action: RepoAccessAction;
    requestedPath: string;
    matchedRepo: RepoAccessEntry | null;
    reason: string;
}
export declare function findRepoAccessManifest(startDir?: string): string | null;
export declare function loadRepoAccessManifest(startDir?: string): RepoAccessManifest;
export declare function findRepoEntry(manifest: RepoAccessManifest, requestedPath: string, cwd?: string): RepoAccessEntry | null;
export declare function checkRepoAccess(manifest: RepoAccessManifest, requestedPath: string, action: RepoAccessAction, cwd?: string): RepoAccessDecision;
export declare function formatRepoAccessEntry(entry: RepoAccessEntry): string;
//# sourceMappingURL=repo-access.d.ts.map