/**
 * Autonomy enforcement hook for tool dispatch.
 *
 * Integrates command-risk classification with the before-tool-call hook pipeline.
 * Called for exec-like tools (shell, exec, apply_patch) to classify and enforce
 * the configured autonomy level.
 *
 * Usage in pi-tools.before-tool-call.ts:
 *   import { checkCommandAutonomy } from "../security/autonomy-enforcement.js";
 *   // ... inside runBeforeToolCallHook:
 *   const autonomyResult = checkCommandAutonomy({ toolName, params, config });
 *   if (autonomyResult?.blocked) return autonomyResult;
 */
import type { MinionConfig } from "../config/config.js";
export type AutonomyCheckResult = {
    blocked: true;
    reason: string;
} | {
    blocked: false;
} | null;
/**
 * Check whether a tool call should be allowed under the current autonomy config.
 *
 * Returns `null` if the tool is not an exec-like tool (no check needed).
 * Returns `{ blocked: false }` if allowed.
 * Returns `{ blocked: true, reason }` if the command is blocked by the autonomy mode.
 */
export declare function checkCommandAutonomy(params: {
    toolName: string;
    toolParams: unknown;
    config: MinionConfig | undefined;
}): AutonomyCheckResult;
