/**
 * Wallet secret-material guard for the model-facing file tools.
 *
 * Franklin IS the wallet: a steered model (prompt injection via a fetched page,
 * MCP result, file contents, etc.) that can Read/Write/Edit arbitrary paths
 * could exfiltrate, destroy, or — worst — SUBSTITUTE the private key so future
 * on-chain x402 spends sign from an attacker's key. Write's `dangerousPaths`
 * blocklist already covers ~/.ssh, ~/.aws, ~/.gnupg, ... but historically
 * missed the BlockRun key store this product is built around. These helpers
 * close that gap for Write, Edit, AND Read.
 */
/**
 * True if `resolvedAbsPath` is — or resolves through a symlink to — a wallet
 * private-key file. Callers must pass an already-absolute path.
 */
export declare function isWalletKeyPath(resolvedAbsPath: string): boolean;
/** Exported for tests / reuse. */
export declare const WALLET_KEY_PATHS: string[];