import type { KlawConfig } from "../../../config/types.klaw.js";
export type ExecSafeBinCoverageHit = {
    scopePath: string;
    bin: string;
    kind: "missingProfile" | "riskySemantics";
    isInterpreter?: boolean;
    warning?: string;
};
export type ExecSafeBinTrustedDirHintHit = {
    scopePath: string;
    bin: string;
    resolvedPath: string;
};
export declare function scanExecSafeBinCoverage(cfg: KlawConfig): ExecSafeBinCoverageHit[];
export declare function scanExecSafeBinTrustedDirHints(cfg: KlawConfig): ExecSafeBinTrustedDirHintHit[];
export declare function collectExecSafeBinCoverageWarnings(params: {
    hits: ExecSafeBinCoverageHit[];
    doctorFixCommand: string;
}): string[];
export declare function collectExecSafeBinTrustedDirHintWarnings(hits: ExecSafeBinTrustedDirHintHit[]): string[];
export declare function maybeRepairExecSafeBinProfiles(cfg: KlawConfig): {
    config: KlawConfig;
    changes: string[];
    warnings: string[];
};
