/**
 * Conservative read-only command classifier for plan mode.
 *
 * Deny-by-default: false negatives are safe (a read-only command merely stays
 * blocked), false positives are not (a mutating command would slip through).
 * Plan mode gates bash on `isReadOnlyCommand`; anything this function cannot
 * prove is read-only falls back to the existing plan-mode block.
 */
/**
 * Returns true only when every segment of the command is provably read-only.
 */
export declare function isReadOnlyCommand(command: string): boolean;
//# sourceMappingURL=read-only-bash.d.ts.map