/**
 * Exec Kill Guard — Intercepts exec tool kill commands and prevents them from
 * terminating WrongStack processes.
 *
 * Unlike bash-kill-guard.ts which parses a raw shell string, this module
 * works with the exec tool's (command, args) format. It handles:
 * - taskkill /F /IM node.exe (name-based)
 * - taskkill /F /PID 1234 (PID-based)
 * - Stop-Process -Name "node" -Force (PowerShell cmdlet)
 * - kill -9 12345 / pkill node (POSIX via allowlisted commands)
 * - wmic process where "name='node.exe'" delete
 * - node -e "process.kill(12345)" (eval-based kill)
 * - Any script that contains kill commands (exec'd via shell interpreters)
 *
 * This is one defense-in-depth layer — the primary guard is the
 * PreToolUse hook in the process-guard plugin, and the permission
 * policy's YOLO destructive detection.
 */
export interface ExecKillCheckResult {
    blocked: boolean;
    reason?: string;
}
/**
 * Check if an exec (command, args) pair is a kill operation targeting
 * a protected WrongStack process. Returns { blocked: true, reason } when
 * the command should be blocked, or { blocked: false } when it's safe.
 */
export declare function checkExecKillCommand(cmd: string, args: readonly string[]): Promise<ExecKillCheckResult>;
//# sourceMappingURL=exec-kill-guard.d.ts.map