/**
 * Per-tool risk classification. Single source of truth for "what kind of
 * side effect does this tool produce." Consumed by the abandoned-grant
 * predicate (Slice 2).
 *
 * - `bash` and `TaskCreate(command)` delegate to `classifyBashCommand`
 *   from `bash-risk.ts` (Task S1-4).
 * - `Edit` / `Write` / `NotebookEdit` are path-aware (Task S1-5).
 * - All registered tools must have an explicit classification — see
 *   the exhaustive test in S1-7.
 *
 * Fail-safe: unknown tools default to `mutating` (require permission).
 */
import type { RiskClass } from './protocol/task-permission-types.js';
export declare function classifyToolRisk(toolName: string, args: Record<string, unknown>): RiskClass;
