export interface BashAllowedPrefixesCheck {
    allowed: boolean;
    reason?: string;
}
export type BashRestrictionProfile = "workflow" | "read-only";
export interface BashRestrictionOptions {
    profile?: BashRestrictionProfile;
}
export declare function normalizeReadOnlyBashCommand(command: string): string | undefined;
export declare function checkBashAllowedPrefixes(command: string, allowedPrefixes: readonly string[] | undefined, options?: BashRestrictionOptions): BashAllowedPrefixesCheck;