/**
 * Tests for the T1761 isolation boundary check in the git-shim.
 *
 * Verifies:
 * - `isCwdInsideWorktree` correctly identifies in/out-of-boundary paths.
 * - `evaluateIsolationBoundary` fires ONLY for:
 *     - CLEO_AGENT_ROLE=worker
 *     - CLEO_WORKTREE_ROOT set to an absolute path
 *     - A mutation subcommand (add, commit, rm, mv, restore, apply, am)
 *     - cwd outside CLEO_WORKTREE_ROOT
 * - The check is skipped for non-worker roles (lead, subagent, orchestrator).
 * - The check is skipped when CLEO_WORKTREE_ROOT is absent.
 * - The check is skipped for read-only subcommands (log, status, diff).
 * - The check passes when cwd equals the worktree root or is a descendant.
 * - Drift detection: `ISOLATION_ENV_KEYS` from `@cleocode/contracts` contains
 *   exactly the two keys consumed by `evaluateIsolationBoundary`
 *   (`CLEO_WORKTREE_ROOT` and `CLEO_AGENT_ROLE`), so a schema change in
 *   contracts will cause this test to fail loudly.
 *
 * @task T1761
 */
export {};
//# sourceMappingURL=isolation-boundary.test.d.ts.map