/** Opening marker of the generated block, as it appears in guards/L0-tooling.md. */
export declare const L0_DOC_BEGIN = "<!-- BEGIN GENERATED \u2014 L0ToolingDoc.render() in ai-hook-rules/src/core/l0-tooling-doc.ts; run `pnpm guards:generate` -->";
/** Closing marker. Everything between the two is machine-owned; everything outside is prose. */
export declare const L0_DOC_END = "<!-- END GENERATED \u2014 hand-written prose resumes here -->";
/**
 * The generated section of guards/L0-tooling.md, and the splice that puts it there.
 *
 * A class rather than a family of module functions (see l1-doc.ts, which predates the rule): the
 * renderer, the extractor and the splicer are one unit, and the spec drives all three.
 */
export declare class L0ToolingDoc {
    /** The whole generated block, WITHOUT the markers — those belong to the file, not to the renderer. */
    render(): string;
    /**
     * The generated text of `doc`, exactly as committed. Throws when a marker is missing or doubled —
     * a silently-unspliced doc is the drift this whole arrangement exists to end.
     */
    extract(doc: string): string;
    /** `doc` with the generated block replaced by today's render. Preserves every byte outside it. */
    splice(doc: string): string;
    /** A markdown cell: a literal `|` inside a value would end the column. */
    private cell;
    private preamble;
    private faultTable;
    /**
     * The cures, one row per option. LITERAL commands only, rendered from `L0_FAULTS[].cures` — the same
     * array `webpieces.guard-matrix.md` renders its Fix sections from, so the two can never prescribe
     * different commands for one fault.
     */
    private fixTable;
    private matrixTable;
    private allowlistTable;
    /**
     * Fault `S`'s subject: the THREE managed things, and the two registrations rendered from
     * `shimCommand()` — which is what makes "they are ABSOLUTE" a fact this doc cannot get wrong.
     */
    private managedSurface;
    /**
     * The audit line, rendered from `SHIM_LOG_FIELDS` + `SHIM_LOG_VERDICTS`. The optional field prints
     * in brackets because that is exactly what it is: `bin=` appears only when it differs from `shim=`.
     */
    private auditLine;
    private logPaths;
}