import { type AgentTool } from "@caupulican/pi-agent-core";
import type { TSchema } from "typebox";
export interface CredentialExposureBoundary {
    redactSensitiveText(text: string): string;
    protectedFiles?: readonly string[];
    protectedDirectories?: readonly string[];
}
export declare function isProtectedCredentialPath(rawPath: string, cwd: string, boundary?: CredentialExposureBoundary): boolean;
/** Stable model-facing refusal for direct inspection/mutation of credential material. */
export declare function credentialToolBlockReason(toolName: string, args: unknown, cwd: string, boundary?: CredentialExposureBoundary): string | undefined;
/** Apply the same path refusal and output redaction to foreground, extension, scout, and lane tools. */
export declare function wrapToolWithCredentialExposureGuard<TParameters extends TSchema, TDetails>(tool: AgentTool<TParameters, TDetails>, cwd: string, boundary?: CredentialExposureBoundary): AgentTool<TParameters, TDetails>;
//# sourceMappingURL=credential-exposure-guard.d.ts.map