/**
 * Launcher-side handlers for the `ecs_launch` / `ecs_stop` commands.
 *
 * A resident agent with local AWS credentials acts as the "launcher": it
 * receives `ecs_launch` via the normal dispatch path (AppSync) and starts a
 * oneshot ECS task with RunTask, injecting the per-run environment
 * (COMMAND_ID, oneshot token, ...) through containerOverrides.
 *
 * SECURITY: the containerEnv/sidecarEnv payloads may contain
 * AGENT_ONESHOT_TOKEN and, for Tailscale-enabled task definitions, the
 * Tailscale authkey. Their values must never be logged — only log resource
 * identifiers.
 */
import { type CommandResult } from '../types';
/**
 * Handle the `ecs_launch` command: RunTask (FARGATE, awsvpc) with the
 * payload's containerEnv injected via containerOverrides.
 * Returns `{ taskArn }` on success, or a failed result carrying RunTask
 * `failures` details so the API can mark the work command/task as failed.
 */
export declare function ecsLaunch(p: Record<string, unknown>): Promise<CommandResult>;
/**
 * Handle the `ecs_stop` command: best-effort StopTask (used by the API's
 * timeout sweep to reclaim timed-out oneshot containers).
 */
export declare function ecsStop(p: Record<string, unknown>): Promise<CommandResult>;
//# sourceMappingURL=ecs-launcher.d.ts.map