/** Examine a tool-use request from an agent (Claude/Codex/OpenCode MCP
 *  sidecar relays them all through approval-bus). Returns a deny reason
 *  if it matches a self-protect pattern, otherwise null. Dispatch is
 *  strictly tool-name based — see the DESIGN block above. */
export declare function checkToolUse(toolName: string, input: Record<string, unknown>): {
    deny: true;
    message: string;
} | null;
//# sourceMappingURL=self-protect.d.ts.map