import type { InputProcessor } from '../../types/processors.js';
export interface PromptInjectionGuardOptions {
    /** User-facing message when a pattern matches. */
    message?: string;
    id?: string;
}
/**
 * Deterministic prompt-injection guard over inbound user text. Reuses the
 * injection pattern set that already protects persistent memory writes
 * (`scanMemoryWrite`) — one audited pattern source, two enforcement points.
 *
 * False positive cost: the turn is refused with a polite message and the user
 * can rephrase. False negative cost: instruction override — so the patterns
 * err toward catching more.
 */
export declare function createPromptInjectionGuard(options?: PromptInjectionGuardOptions): InputProcessor;