/**
 * Minimal PowerShell mutation classifier — mirrors bash-risk.ts's
 * `mutatesFilesystem` signal so plan mode has no PowerShell bypass.
 * Conservative / fail-closed: anything not clearly read-only is "mutating".
 * v1 known over-blocks (acceptable in read-only plan mode): some non-FS verb
 * cmdlets like Set-Location / Clear-Host classify as mutating.
 */
export interface PowerShellRiskClassification {
    mutatesFilesystem: boolean;
    reasons: string[];
    command: string;
}
export declare function classifyPowerShellCommand(command: unknown): PowerShellRiskClassification;
