import type { ArtifactProtectionConfig } from '../types/index.js';
import { type ObservedRemote, type RepositoryClassification, type RepositoryVerifier } from './repository-classification.js';
export type WorkspaceRepositoryProtection = {
    classification: RepositoryClassification;
    artifactProtection: ArtifactProtectionConfig;
    signedPolicyVerified: boolean;
};
/** Read every configured fetch URL. Remote names and URL substrings are never ownership evidence. */
export declare function readRepositoryRemotes(cwd: string): ObservedRemote[];
/** True when cwd belongs to a Git worktree; non-Git projects have no history/index to preflight. */
export declare function isGitRepository(cwd: string): boolean;
/**
 * Resolve the repository boundary before generators write. The built-in verifier
 * is deliberately untrusted: a production control plane must inject a verifier
 * that validates a signed policy bound to immutable provider identity.
 */
export declare function resolveWorkspaceRepositoryProtection(cwd: string, verifier?: RepositoryVerifier): Promise<WorkspaceRepositoryProtection>;