/**
 * @cleocode/git-shim — Harness-agnostic git fence (T1118 + T1591 + T1761 + T1852).
 *
 * Re-exports the denylist + boundary predicates so other packages can inspect
 * the shim's enforcement without executing the binary. The shim binary itself
 * lives at `dist/shim.js` and is registered as the `git` bin entry in
 * package.json.
 *
 * @task T1118
 * @task T1121
 * @task T1591
 * @task T1761
 * @task T1852
 * @packageDocumentation
 */
export type { AuditOutcome, AuditRecord } from './audit-log.js';
export { resolveAuditLogPath, writeAuditRecord } from './audit-log.js';
export type { BoundaryViolation } from './boundary.js';
export { commitHasInlineMessage, extractCommitMessages, validateAddPaths, validateCherryPickSource, validateCommitSubject, validateMergeAllowed, } from './boundary.js';
export { findDeniedOp, GIT_OP_DENYLIST, RESTRICTED_ROLES } from './denylist.js';
export { enforceAbsolutePathBoundary, evaluateIsolationBoundary, isCwdInsideWorktree, MUTATION_SUBCOMMANDS, } from './isolation-boundary.js';
export { extractTaskIdFromWorktreePath, isInsideWorktreesRoot, isPathInsideWorktree, resolveActiveWorktree, resolveCleoWorktreesRoot, resolveProjectWorktreeRoot, } from './worktree-path.js';
/**
 * Install the shim symlink so that `git` resolves to this shim when
 * the shim directory is on PATH.
 *
 * Creates `<shimDir>/git` as a symlink pointing at the shim binary.
 * The shim binary itself is the `dist/shim.js` file emitted by tsc.
 *
 * @param shimDir - Directory to place the `git` symlink in.
 * @param shimBinPath - Absolute path to the compiled shim binary (dist/shim.js).
 * @returns Whether the symlink was created or already existed.
 * @task T1118
 * @task T1121
 */
export declare function installShimSymlink(shimDir: string, shimBinPath: string): Promise<boolean>;
//# sourceMappingURL=index.d.ts.map