import type { Adapter } from "../adapter.js";
export interface CrossShellInspection {
    adapter: Adapter;
    cwd: unknown;
    toolName: unknown;
    toolInput: unknown;
}
/**
 * Deny only the unsafe hybrid shape: Windows-native Codex, WSL UNC workspace,
 * shell tool, and a direct wsl.exe -> bash -c/-lc command-string invocation.
 */
export declare function unsafeCrossShellReason(input: CrossShellInspection): string | null;
//# sourceMappingURL=unsafe-cross-shell.d.ts.map