/**
 * Render the session code on screen for the running agent.
 *
 * `reveal` controls whether the FULL code or only the masked form is shown.
 * Callers MUST gate it on a real interactive terminal (`process.stdout.isTTY`):
 *  - FOREGROUND interactive runs (`npx`, `aicommander-agent run` in a terminal)
 *    have a TTY and pass reveal=true. The user launched it in their own terminal
 *    to obtain the code there, so showing the masked form would make the
 *    foreground flow unusable.
 *  - The masked form (reveal=false) is used in every non-TTY context. Crucially
 *    this includes the systemd SERVICE path: `run` is supervised there and its
 *    stdout is inherited into journald (StandardOutput=journal), so revealing
 *    would persist the root-exec credential in the journal (readable by root and
 *    by systemd-journal/adm-group users) and leak it into exported logs /
 *    screen-shares — exactly what masking exists to prevent. `status --reveal`
 *    (root-gated) remains the way to query the full code on a service host.
 *
 * The "keep secret" warning is shown in BOTH modes.
 */
export declare function showCode(sessionCode: string, serverUrl: string, reveal?: boolean): void;
export declare function showReconnecting(attempt: number, delayMs: number): void;
export declare function showRelayConnected(): void;
export type LocalOperation = "command" | "secure-exec" | "elevated-exec";
/**
 * Render command lifecycle metadata without rendering relay-controlled payloads.
 *
 * Shell command text is never accepted by this API. Secure exec may include its
 * allowlisted executable basename, but only when it is a short, printable bare
 * name; argv, cwd, env, input, and output are never display inputs.
 */
export declare function showExecuting(operation: LocalOperation, executableBasename?: string): void;
export declare function showDone(operation: LocalOperation, exitCode: number, durationMs: number): void;