/**
 * Permissions v2 — Path scope restriction policy rule evaluator.
 *
 * PathScopeRule matches tool calls that operate on file paths, restricting
 * or allowing access based on whether the path argument matches any of the
 * specified path patterns. Supports glob-style `**` wildcards.
 * Independently testable.
 */
import type { PathScopeRule, EvaluationStep } from '../types.js';
/** Result returned by evaluatePathScopeRule. */
export interface PathScopeRuleResult {
    matched: boolean;
    step: EvaluationStep;
}
/**
 * evaluatePathScopeRule — Evaluates a single PathScopeRule against a tool call.
 *
 * Returns `matched: true` when:
 *   1. The tool name matches the rule's `toolPattern`, AND
 *   2. A path argument is found, AND
 *   3. The normalized absolute path matches at least one of the rule's `pathPatterns`.
 *
 * @param rule     — The PathScopeRule to evaluate.
 * @param toolName — Name of the tool being called.
 * @param args     — Arguments passed to the tool.
 */
export declare function evaluatePathScopeRule(rule: PathScopeRule, toolName: string, args: Record<string, unknown>, projectRoot?: string): PathScopeRuleResult;
//# sourceMappingURL=path-scope.d.ts.map