import type { BaseToolHandler } from "../../../../../agentCore/agent_executionEngine/basic_toolLayer/baseTools/baseToolDefinition.js";
import type { BaseToolExecutorPort } from "../../../../../agentCore/agent_executionEngine/basic_toolLayer/baseTools/baseToolExecutorPort.js";
import { type ShellExecutionGuardOutput, type ShellExecutionGuardRequest, type ShellExecutionGuardResult } from "./core.js";
import { type ShellExecutionGuardDependencies, type ShellExecutionGuardProvider, type ShellExecutionGuardPracticeProviderName, type ShellExecutionGuardProviderPractice } from "./dependencies.js";
export type ShellExecutionGuardBestPracticeRequest = ShellExecutionGuardRequest & {
    executor?: BaseToolExecutorPort;
    provider?: ShellExecutionGuardProvider;
    preferredProvider?: ShellExecutionGuardPracticeProviderName;
};
export type ShellExecutionGuardHandlerInput = Omit<ShellExecutionGuardBestPracticeRequest, "executor" | "provider">;
export type ShellExecutionGuardPracticeSelection = {
    providerName: ShellExecutionGuardPracticeProviderName;
    practice: ShellExecutionGuardProviderPractice;
    provider?: ShellExecutionGuardProvider;
};
export declare const shellExecutionGuardProviderPractices: readonly [{
    readonly providerName: "anthropic";
    readonly source: {
        readonly kind: "cli";
        readonly label: "Claude Code shell permission and command risk guard";
        readonly path: "/home/proview/Desktop/three/claude_code_2_1_88/tools/BashTool";
    };
    readonly directCliSupport: true;
    readonly sideEffectPolicy: "runtime-governed";
    readonly notes: readonly ["Claude Code separates command parsing, read-only checks, path checks, and permission prompts before BashTool execution.", "Praxis emits guard material only; TAP/runtime owns final approval, sandbox, and sudo policy."];
    readonly createProvider: ({ provider, executor }: ShellExecutionGuardDependencies) => ShellExecutionGuardProvider | undefined;
}, {
    readonly providerName: "openai";
    readonly source: {
        readonly kind: "cli";
        readonly label: "Codex sandboxing and shell approval requirement before exec";
        readonly path: "/home/proview/Desktop/three/codex_rust_0_123_0/codex-rs/core/src/tools/sandboxing.rs";
    };
    readonly directCliSupport: true;
    readonly sideEffectPolicy: "runtime-governed";
    readonly notes: readonly ["Codex computes approval requirements before shell runtime dispatch.", "Guard generation classifies risk without spawning processes."];
    readonly createProvider: ({ provider, executor }: ShellExecutionGuardDependencies) => ShellExecutionGuardProvider | undefined;
}, {
    readonly providerName: "deepmind";
    readonly source: {
        readonly kind: "cli";
        readonly label: "Gemini CLI ShellToolInvocation confirmation and policy update";
        readonly path: "/home/proview/Desktop/three/gemini_cli_0_39_0/packages/core/src/tools/shell.ts";
    };
    readonly directCliSupport: true;
    readonly sideEffectPolicy: "runtime-governed";
    readonly notes: readonly ["Gemini CLI extracts command roots, redirection, and confirmation details before execution.", "Praxis keeps this as a side-effect-free guard envelope."];
    readonly createProvider: ({ provider, executor }: ShellExecutionGuardDependencies) => ShellExecutionGuardProvider | undefined;
}];
export declare const shellExecutionGuardBestPracticeDescriptor: {
    readonly toolId: "shell.executionGuard";
    readonly bestPractice: "runtime-governed-shell-execution-guard";
    readonly sourcePriority: readonly ["cli", "agent-sdk", "api-sdk", "praxis-native"];
    readonly providerOrder: readonly ["anthropic", "openai", "deepmind"];
    readonly dependencies: ({
        dependencyId: string;
        kind: "permission";
        required: true;
        description: string;
    } | {
        dependencyId: string;
        kind: "runtime";
        required: false;
        description: string;
    })[];
};
export declare function selectShellExecutionGuardPractice(dependencies?: ShellExecutionGuardDependencies & {
    preferredProvider?: ShellExecutionGuardPracticeProviderName;
}): ShellExecutionGuardPracticeSelection;
export declare function buildShellExecutionGuardBestPractice(request?: ShellExecutionGuardBestPracticeRequest): Promise<ShellExecutionGuardResult>;
export declare const shellExecutionGuardBaseToolDefinition: import("../../../../../agentCore/agent_executionEngine/basic_toolLayer/baseTools/baseToolDefinition.js").BaseToolDefinition<ShellExecutionGuardHandlerInput, ShellExecutionGuardOutput>;
export declare const shellExecutionGuardHandler: BaseToolHandler<ShellExecutionGuardHandlerInput, ShellExecutionGuardOutput>;
