/**
 * Path-traversal guard tests.
 *
 * Each tool that accepts an agent-supplied `output` path must refuse
 * `../../etc/passwd`-style traversal attempts.  The guard lives in
 * `safeOutputPath()` (src/core/safe-paths.ts); the tools wrap their
 * execute body in try/catch and return `err(...)` on throw.
 *
 * detect-silence and analyze-hook have no `output` parameter — they are
 * read-only analysis tools.  Their entries below confirm this and verify
 * that passing a rogue value through the schema is silently dropped (Zod
 * strips unknown keys by default).
 */
export {};
//# sourceMappingURL=path-traversal.test.d.ts.map