import type { DaoCoreConfig } from "../../../config/types.daocore.js";
export type ExecSafeBinCoverageHit = {
    scopePath: string;
    bin: string;
    kind: "missingProfile" | "riskySemantics";
    isInterpreter?: boolean;
    warning?: string;
};
export type ExecSafeBinTrustedDirHintHit = {
    scopePath: string;
    bin: string;
    resolvedPath: string;
};
export declare function scanExecSafeBinCoverage(cfg: DaoCoreConfig): ExecSafeBinCoverageHit[];
export declare function scanExecSafeBinTrustedDirHints(cfg: DaoCoreConfig): ExecSafeBinTrustedDirHintHit[];
export declare function collectExecSafeBinCoverageWarnings(params: {
    hits: ExecSafeBinCoverageHit[];
    doctorFixCommand: string;
}): string[];
export declare function collectExecSafeBinTrustedDirHintWarnings(hits: ExecSafeBinTrustedDirHintHit[]): string[];
export declare function maybeRepairExecSafeBinProfiles(cfg: DaoCoreConfig): {
    config: DaoCoreConfig;
    changes: string[];
    warnings: string[];
};
