import type { Capability, ToolDeclaration, CapabilityPromptSection, CapabilityAction } from './index.js';
/**
 * Injects policy text into the system prompt as 'policy' sections.
 * Optionally filters input/output text — currently a passthrough placeholder
 * that future processor integration can populate.
 */
export declare class GuardrailCapability implements Capability {
    private policies;
    constructor(policies: string[]);
    getTools(): ToolDeclaration[];
    getPromptSections(): CapabilityPromptSection[];
    processToolResult(_toolName: string, _args: unknown, _result: unknown): CapabilityAction | null;
    /**
     * Evaluate whether an input text is permitted by this guardrail.
     * Returns `{ allowed: true }` until a processor is wired in.
     */
    filterInput(_text: string): {
        allowed: boolean;
        reason?: string;
    };
    /**
     * Evaluate whether an output text is permitted and optionally modify it.
     * Returns `{ allowed: true }` until a processor is wired in.
     */
    filterOutput(_text: string): {
        allowed: boolean;
        modified?: string;
    };
}