/**
 * Pre-execution command scanner — Tirith-inspired.
 * Runs AFTER tool-policy says "allow" but BEFORE child_process.spawn.
 * Detects: pipe-to-interpreter, homograph URLs, terminal injection, cloud metadata SSRF.
 */
export interface ScanThreat {
    type: "pipe_to_interpreter" | "homograph_url" | "terminal_injection" | "cloud_metadata_ssrf" | "dangerous_redirect";
    description: string;
    severity: "low" | "medium" | "high" | "critical";
    matched: string;
}
export interface ScanResult {
    verdict: "allow" | "warn" | "block";
    threats: ScanThreat[];
}
export declare function scanCommand(command: string): ScanResult;
