/**
 * dangerous-patterns.ts — Tool approval gate (v6.0.0)
 *
 * Pattern: Hermes Agent `tools/approval.py:546-770` (30+ regex patterns)
 * + OpenFang `crates/openfang-skills/src/verify.rs` + OpenClaw
 * `src/security/external-content.ts:28-43`.
 *
 * Detects dangerous commands and blocks/requires approval before tool
 * execution. Every tool that takes a "command" or "path" argument runs
 * through `checkDangerous()` before being dispatched. Framework-agnostic
 * — used by both the SDK MCP server and any Claude Code hook scripts.
 */
export type ApprovalDecision = "allow" | "require-approval" | "deny";
export interface ApprovalCheck {
    decision: ApprovalDecision;
    reason?: string;
    /** The pattern that matched (for audit log). */
    pattern?: string;
}
export declare function checkDangerous(args: Record<string, unknown>): ApprovalCheck;
export declare function listDangerousPatterns(): string[];
export declare function getDangerousPatternStats(): {
    total: number;
    deny: number;
    requireApproval: number;
};
//# sourceMappingURL=dangerous-patterns.d.ts.map