import type { ScopedSql } from './scope-host.js';
/**
 * Refuse a statement whose write target is a `_substrat_*` table.
 *
 * Throws a `forbidden` (`reason: 'spine_write'`) — module code reaching the spine
 * is a fault in the module, not in the caller's permissions, and the message names
 * the table so the author sees which line to delete.
 */
export declare function assertNoSpineWrite(sql: string): void;
/**
 * Wrap a module-facing `ScopedSql` so every statement passes `assertNoSpineWrite`
 * first. `query` is guarded too: SQLite runs `INSERT … RETURNING` perfectly well
 * through a `.all()`, so guarding only `exec` would leave the door open.
 */
export declare function guardSpine(inner: ScopedSql): ScopedSql;
//# sourceMappingURL=spine-guard.d.ts.map