import { BotGuardConfig } from '../config';
export interface InstallHookArgs {
    project?: string;
    shieldId?: string;
    shieldKey?: string;
    apiUrl?: string;
    shadow?: string;
    failClosed?: string;
    events?: string;
}
export interface ManagedHookRepairResult {
    file: string;
    existed: boolean;
    managedEntries: number;
    staleEntries: number;
    /**
     * Managed entries whose command carries a hand-added `--shadow true` — the
     * standard installer/repair path never writes it, so its presence means the
     * managed entry was edited to silently downgrade enforcement. The hook
     * itself ignores the flag on managed invocations; this count makes the
     * tamper VISIBLE (integrity report -> fleet console).
     */
    weakenedEntries?: number;
    changed: boolean;
}
export declare function inspectCursorManagedHooks(): ManagedHookRepairResult;
/**
 * Repair only FCD-managed entries in place. Existing event selection,
 * failClosed flags, timeouts, and unrelated hooks are preserved.
 */
export declare function repairCursorManagedHooks(): ManagedHookRepairResult;
export declare function installCursorHookCommand(args: InstallHookArgs, config: BotGuardConfig): Promise<void>;
export declare function uninstallCursorHookCommand(args: InstallHookArgs): Promise<void>;