export declare const destructiveCommandPatterns: RegExp[];
export declare const exfiltrationPatterns: RegExp[];
export declare const networkScanTools: string[];
export interface CommandSegment {
    raw: string;
    tokens: string[];
    base: string;
    sub: string | undefined;
    elevated: boolean;
}
export declare function splitCommandSegments(command: string): CommandSegment[];
export declare function isApprovedScannerSegment(segment: CommandSegment): boolean;
export declare const readOnlyShellCommands: Set<string>;
export declare const subcommandSafeMap: Record<string, Set<string>>;
export declare function commandHasStatefulSysadminArg(command: string): boolean;
export declare const mutatingArgPatterns: RegExp[];
export declare function commandHasMutatingArg(command: string): boolean;
export declare const mutatingCommandBases: Set<string>;
export declare function commandWritesOrEscalates(command: string): boolean;
export declare function isVersionOrHelpProbe(command: string): boolean;
export declare function commandIsMutating(command: string): boolean;
export declare function commandIsScannerOnly(command: string): boolean;
/**
 * @deprecated Secret-path hard blocks were removed. Patterns retained only
 * for diagnostics / legacy tests — {@link isSecretPath} always returns false
 * so pentest reads of .ssh/.env on targets are never gated by the agent.
 */
export declare const secretPathPatterns: RegExp[];
export declare function isSecretPath(_path: string): boolean;
export declare function containsShellMetacharacter(command: string): boolean;