/**
 * Crewly's credential files: the inventory the runtime credential guard
 * refuses to agents.
 *
 * Spec: specs/2026-10-04-agent-credential-isolation.md (inventory, layer 2).
 * Sealing these files is PR B (same spec); this list is only what the guard
 * matches.
 *
 * @module services/core/credential-files
 */
/** A path agents must not read: a file or a whole directory. */
export interface GuardedPath {
    /** Rule id reported when an agent touches it. */
    id: string;
    /** Absolute path. */
    path: string;
    /** Whole subtree. */
    isDirectory: boolean;
}
/**
 * Every credential location the runtime guard refuses to agents.
 *
 * @returns Paths, de-duplicated
 */
export declare function getGuardedCredentialPaths(): GuardedPath[];
//# sourceMappingURL=credential-files.d.ts.map