import type { KlawConfig } from "../config/types.klaw.js";
import type { NodeSession } from "./node-registry.js";
export declare const DEFAULT_DANGEROUS_NODE_COMMANDS: string[];
export declare function listDangerousPluginNodeCommands(): string[];
export declare function isForegroundRestrictedPluginNodeCommand(command: string): boolean;
type NodeCommandPolicyNode = Pick<NodeSession, "platform" | "deviceFamily"> & Partial<Pick<NodeSession, "caps" | "commands" | "connId" | "nodeId">> & {
    approvedCommands?: readonly string[];
};
export declare function resolveNodeCommandAllowlist(cfg: KlawConfig, node?: NodeCommandPolicyNode): Set<string>;
export declare function resolveNodePairingCommandAllowlist(cfg: KlawConfig, node?: NodeCommandPolicyNode): Set<string>;
export declare function normalizeDeclaredNodeCommands(params: {
    declaredCommands?: readonly string[];
    allowlist: Set<string>;
}): string[];
export declare function isNodeCommandAllowed(params: {
    command: string;
    declaredCommands?: string[];
    allowlist: Set<string>;
}): {
    ok: true;
} | {
    ok: false;
    reason: string;
};
export {};