/**
 * Kubectl Gate
 *
 * Evaluates kubectl commands before execution, blocking dangerous operations.
 */
import type { GatePolicy, GateResult, KubectlApplyOptions, CommandResult } from './types.js';
export declare class KubectlGate {
    private policy;
    constructor(policy: GatePolicy);
    /**
     * Execute a kubectl command through the gate.
     */
    exec(args: string[], namespace?: string): Promise<GateResult<CommandResult>>;
    /**
     * Apply a manifest through the gate.
     */
    apply(options: KubectlApplyOptions): Promise<GateResult<CommandResult>>;
    /**
     * Delete resources through the gate.
     * Always escalates by default.
     */
    delete(resource: string, name: string, namespace?: string): Promise<GateResult<CommandResult>>;
    private isSafeOperation;
    private isDangerousOperation;
    private shouldEscalate;
    private shouldExecute;
    private runKubectl;
}
//# sourceMappingURL=kubectl.d.ts.map