/**
 * R6 — file-tool path classification and tool-call level routing
 * (tm_* aliasing = anti-backdoor).  Split out of the former monolithic
 * envprotect.ts; behavior unchanged.
 *
 * The `tool.execute.before` HOOK FACTORY that used to live here
 * (`createEnvProtectHook`, with its `auditInterception` and its deferral to the
 * approval gate) was deleted with the v1 personality: v2 has no plugin-raised
 * dialog to defer to, and the enforcement that remains on v2 is the per-command
 * classifier at `src/host/v2-guard.ts` (`shellGuard`) riding
 * `permission.hook("evaluate")`.  What stays in this file is the CLASSIFIER
 * SURFACE both personalities' tests pin — the matchers are the product, the
 * v1 hook was only one way to call them.
 */
import { type EnvProtectMode } from "./patterns.js";
/**
 * Classify the path-class arguments of a file tool.  Returns the pattern
 * category when the call must be blocked, null when it may pass.
 */
export declare function classifyPathFields(args: Record<string, unknown> | undefined, mode: EnvProtectMode, extra?: RegExp[]): string | null;
/**
 * Top routing: tool name + tool args -> category to block, or null to pass.
 * `off` always passes (the hook stays installed but is a no-op).
 */
export declare function inspectToolCall(tool: string, args: Record<string, unknown> | undefined, mode: EnvProtectMode, extra?: RegExp[]): string | null;
//# sourceMappingURL=hook.d.ts.map