/**
 * SkillShield — Unified Runtime Security Engine
 *
 * Combines: Pre-scan (guard) + Network Policy + Filesystem Jail +
 * Runtime Monitor + Kill Switch + Audit Trail
 *
 * This is what makes SkillShield unique:
 * - Snyk/Cisco only scan before install
 * - NVIDIA OpenShell needs Linux + enterprise infra
 * - Aegis only intercepts LLM API calls
 * - SkillShield does scan + runtime in one CLI, cross-platform
 */
export { NetworkPolicyEngine, parseNetworkPolicy } from './network-policy.js';
export type { NetworkPolicy, NetworkViolation } from './network-policy.js';
export { FilesystemJail, parseFilesystemPolicy } from './filesystem-jail.js';
export type { FilesystemPolicy, FilesystemViolation } from './filesystem-jail.js';
export { RuntimeMonitor, getDefaultMonitorPolicy } from './runtime-monitor.js';
export type { MonitorPolicy, RuntimeEvent, MonitorReport } from './runtime-monitor.js';
export { AuditTrail } from './audit-trail.js';
export type { AuditEntry, AuditEventType } from './audit-trail.js';
import { NetworkPolicyEngine, type NetworkPolicy } from './network-policy.js';
import { FilesystemJail, type FilesystemPolicy } from './filesystem-jail.js';
import { RuntimeMonitor, type MonitorPolicy } from './runtime-monitor.js';
import { AuditTrail } from './audit-trail.js';
export interface ShieldConfig {
    skillId: string;
    /** SKILL.md frontmatter for policy extraction */
    frontmatter?: Record<string, unknown>;
    /** Override network policy */
    networkPolicy?: Partial<NetworkPolicy>;
    /** Override filesystem policy */
    filesystemPolicy?: Partial<FilesystemPolicy>;
    /** Override monitor policy */
    monitorPolicy?: Partial<MonitorPolicy>;
    /** Working directory for the skill */
    workDir?: string;
    /** Enable audit trail (default: true) */
    enableAudit?: boolean;
    /** Verbose logging */
    verbose?: boolean;
}
export interface ShieldReport {
    skillId: string;
    timestamp: string;
    /** Pre-execution scan results */
    scanScore: number;
    scanStatus: string;
    /** Runtime results */
    killed: boolean;
    killReason?: string;
    durationMs: number;
    /** Violations across all layers */
    networkViolations: number;
    filesystemViolations: number;
    runtimeThreats: number;
    totalViolations: number;
    /** Audit trail hash (for verification) */
    auditHash: string | null;
    auditLength: number;
    auditVerified: boolean;
}
/**
 * The main Shield — orchestrates all security layers.
 */
export declare class SkillShield {
    private config;
    network: NetworkPolicyEngine;
    filesystem: FilesystemJail;
    monitor: RuntimeMonitor;
    audit: AuditTrail;
    constructor(config: ShieldConfig);
    /**
     * Generate the combined enforcement code that wraps skill execution.
     * This code is prepended to the skill's execution context.
     */
    generateEnforcementWrapper(): string;
    /**
     * Get the final shield report after execution.
     */
    getReport(scanScore: number, scanStatus: string, durationMs: number): ShieldReport;
}
//# sourceMappingURL=index.d.ts.map