/** * Command classification: pure pattern detection. * * No impact information here — scanners emit evidence with pattern IDs, * and the verdict engine decides per-target outcomes downstream. */ export interface CommandRule { pattern: RegExp; /** Stable label for the rule (used as match-text hint and binary key). */ signal: string; } /** Commands whose presence in shell text we want to record. */ export declare const COMMAND_RULES: readonly CommandRule[]; /** * Classify a command string against known command patterns. * Returns the first matching rule signal or undefined. */ export declare function classifyCommand(command: string): { signal: string; } | undefined; /** * Classify a standalone binary name (e.g., "python3", "node", "uv"). * Used for MCP server `command` fields where the value is a bare binary name. */ export declare function classifyCommandBinary(binary: string): { signal: string; } | undefined; //# sourceMappingURL=command-classifier.d.ts.map