export interface SafeGitSyncOptions {
    readonly maxBuffer?: number;
    readonly timeoutMs?: number;
    readonly stderr?: 'pipe' | 'ignore';
}
/**
 * Build the argument vector used for every RuFlo-controlled Git subprocess.
 *
 * `core.fsmonitor` is command-bearing repository-local configuration. A copied
 * repository can therefore select a host command that Git executes while
 * refreshing its index. Command-line `-c` has higher precedence than local
 * repository configuration, so this invariant must precede every repository
 * operation that RuFlo performs itself.
 *
 * This deliberately does not claim that every command-bearing Git setting is
 * neutralized. Keep the wrapper as the single policy point so additional
 * reviewed overrides can be added without auditing every caller again.
 */
export declare function safeGitArgv(repoRoot: string, args: readonly string[]): string[];
export declare function safeGitTextSync(repoRoot: string, args: readonly string[], options?: SafeGitSyncOptions): string;
export declare function safeGitBufferSync(repoRoot: string, args: readonly string[], options?: SafeGitSyncOptions): Buffer;
//# sourceMappingURL=safe-git.d.ts.map