/**
 * Install / remove the agent firewall into a Claude Code settings file by
 * merging a PostToolUse hook that runs the guard on untrusted tool output.
 * Idempotent and non-destructive: existing hooks are preserved, ours are tagged
 * so they can be cleanly removed.
 */
/** Tools whose output is untrusted external content (PostToolUse content guard). */
export declare const DEFAULT_GUARDED_TOOLS: string[];
/** Command-executing tools screened before they run (PreToolUse command guard). */
export declare const DEFAULT_COMMAND_TOOLS: string[];
/** File-writing tools screened for sensitive paths / secrets (PreToolUse). */
export declare const DEFAULT_FILE_TOOLS: string[];
export declare function settingsPath(scope?: "user" | "project"): string;
/** Absolute command Claude Code runs for each guarded tool result. Resolved to
 *  the running CLI so it works even without a global `nexus` on PATH. */
export declare function guardCommand(): string;
export type InstallResult = {
    path: string;
    contentTools: string[];
    commandTools: string[];
    created: boolean;
    alreadyInstalled: boolean;
};
export declare function installGuard(opts?: {
    scope?: "user" | "project";
    tools?: string[];
    commandTools?: string[];
    timeout?: number;
}): InstallResult;
export declare function uninstallGuard(opts?: {
    scope?: "user" | "project";
}): {
    path: string;
    removed: number;
};
export declare function guardStatus(opts?: {
    scope?: "user" | "project";
}): {
    path: string;
    installed: boolean;
    contentTools: string[];
    commandTools: string[];
};