export type RiskLevel = "high" | "medium" | "low";
export type RiskFinding = {
    level: RiskLevel;
    name: string;
    message: string;
    command: string;
};
export type AnalyzerOptions = {
    extraBlockedCommands?: string[];
    extraAllowedCommands?: string[];
};
export declare function analyzeBashCommand(source: string, options?: AnalyzerOptions): RiskFinding[];
/**
 * Extract the top-level command names from a bash source string, with wrapper
 * commands (sudo, xargs, env, timeout, …) unwrapped to the inner command.
 *
 * Used by the risk-guard to enforce a read-only command allowlist for agents
 * that declared `readOnly: true`. Returns lowercased command names only —
 * arguments and redirections are not included in the returned list.
 */
export declare function extractCommandNames(source: string): string[];
export declare function pickHighestFinding(findings: RiskFinding[]): RiskFinding | null;