export type ShellRisk = 'read' | 'mutating' | 'dangerous' | 'unknown';
export interface ShellCommandClassification {
    command: string;
    risk: ShellRisk;
    reasons: string[];
    blockedByDefault: boolean;
    usesOutsideCwd: boolean;
}
export interface AgentSafetyConfig {
    cwd: string;
    allowDangerousShell: boolean;
    allowOutsideCwd: boolean;
    requireShellApproval: boolean;
    commandTimeoutMs: number;
    maxOutputBytes: number;
    auditLogPath?: string;
}
export interface OutputChunk {
    text: string;
    usedBytes: number;
    truncated: boolean;
}
export declare const DEFAULT_AGENT_COMMAND_TIMEOUT_MS = 120000;
export declare const DEFAULT_AGENT_MAX_OUTPUT_BYTES = 262144;
export declare function defaultAgentAuditLogPath(cwd: string, now?: Date): string;
export declare function classifyShellCommand(command: string): ShellCommandClassification;
export declare function isPathInside(root: string, candidate: string): boolean;
export declare function redactText(value: string): string;
export declare function takeOutputChunk(chunk: string, usedBytes: number, maxBytes: number): OutputChunk;
export declare function redactAuditPayload<T>(payload: T): T;