import type { PermissionRuleEntry } from "./types.js";
/**
 * File path patterns considered sensitive — reading/writing these
 * is blocked in group sessions. Used by the file access guard.
 */
export declare const GROUP_SENSITIVE_FILE_PATTERNS: readonly RegExp[];
/**
 * Returns the set of permission rules to inject for group sessions.
 * These should be prepended to the rule engine (first-match wins).
 */
export declare function getGroupSecurityRules(): PermissionRuleEntry[];
/**
 * Checks if a file path matches sensitive patterns blocked in group mode.
 */
export declare function isGroupSensitivePath(filePath: string): boolean;
