/**
 * Memory Firewall
 *
 * Orchestrates all detection modules to scan memory writes for threats.
 * Combines instruction detection, privilege escalation detection,
 * encoding obfuscation detection, and anomaly scoring into a single
 * firewall analysis result.
 */
import type { FirewallAnalysis, DefenceSource, DefenceConfig } from '../types.js';
import type { SanitisationCategory } from '../input-sanitisation/index.js';
export { detectInstructions } from './instruction-detector.js';
export type { InstructionDetectionResult } from './instruction-detector.js';
export { detectPrivilegeEscalation } from './privilege-detector.js';
export type { PrivilegeDetectionResult } from './privilege-detector.js';
export { detectEncoding } from './encoding-detector.js';
export type { EncodingDetectionResult } from './encoding-detector.js';
export { detectMarkdownImageExfil } from './markdown-image-detector.js';
export type { MarkdownImageExfilResult } from './markdown-image-detector.js';
export { scoreAnomaly } from './anomaly-scorer.js';
/**
 * Run the full firewall analysis pipeline on memory content.
 */
export declare function analyzeFirewall(content: string, title: string, source: DefenceSource, trustScore: number, config: DefenceConfig, 
/**
 * Categories stripped by Layer 1 sanitisation BEFORE this content arrived.
 * The sanitiser removes zero-width/bidi bytes, so the encoding detector below
 * never sees them — feeding the strip signal back in lets the verdict reflect
 * the smuggling attempt instead of silently allowing the cleaned content.
 */
preSanitisationStrips?: SanitisationCategory[]): FirewallAnalysis;
