/** Examine a tool-use request from an agent (Claude/Codex/OpenCode MCP
 *  sidecar relays them all through approval-bus; native exec also calls
 *  this from the dispatcher). Returns a deny reason if it matches a
 *  self-protect pattern, otherwise null. Dispatch is by tool *intent*
 *  (exec vs write), including native `agim_*` names. */
export declare function checkToolUse(toolName: string, input: Record<string, unknown>): {
    deny: true;
    message: string;
} | null;
//# sourceMappingURL=self-protect.d.ts.map