import type { CommandHandlers, RunningCommand } from "./executor.js";
export interface SecureCommandRequest {
    argv: string[];
    allowedCommands: string[];
    input?: string;
    cwd?: string;
    env?: Record<string, string>;
}
/**
 * Run a sandboxed command. Performs all pre-flight checks synchronously and
 * throws on any failure (bad platform/privilege, unknown user, empty or
 * disallowed argv, oversized input) — the caller maps the throw to agent:error.
 * On success returns a RunningCommand whose kill() tears down the process tree,
 * exactly like the legacy executor.
 */
export declare function executeSecureCommand(req: SecureCommandRequest, handlers: CommandHandlers): RunningCommand;