/**
 * Leaper Agent – Tirith Security
 * Pre-exec command security scanning via tirith binary.
 */
export type SecurityDecision = 'allow' | 'block' | 'warn' | 'unknown';
export interface SecurityFinding {
    rule: string;
    severity: 'low' | 'medium' | 'high' | 'critical';
    message: string;
}
export interface CommandSecurityResult {
    decision: SecurityDecision;
    command: string;
    findings: SecurityFinding[];
    summary?: string;
    error?: string;
    tirith_available: boolean;
}
export interface TirithConfig {
    enabled: boolean;
    fail_open: boolean;
    timeout_ms: number;
    auto_install: boolean;
}
export declare function loadTirithConfig(): TirithConfig;
export declare function detectTarget(): string;
export declare function tirithBinaryName(): string;
export declare function isMarkerStale(): Promise<boolean>;
export declare function installTirith(): Promise<string | null>;
export declare function resolveTirithPath(): Promise<string | null>;
export declare function checkCommandSecurity(command: string): Promise<CommandSecurityResult>;
export declare function ensureInstalled(): Promise<boolean>;
//# sourceMappingURL=tirith.d.ts.map