import type { LocalRunner, LocalRunnerSetting } from "./config.ts";
import type { HostCapabilities } from "./host.ts";
/**
 * Resolve `local.runner` from config + host capabilities into a concrete
 * backend. `auto` defaults to safehouse on macOS and sdx on Linux — both
 * are the deny-first paths for their platform. `none` and the explicit names
 * pass through unchanged so users always get exactly what they asked for.
 * Pure: takes everything it needs as arguments so the dispatcher can test
 * platform pivots without touching real hosts.
 */
export declare function resolveLocalRunner(setting: LocalRunnerSetting, host: HostCapabilities): LocalRunner;
/**
 * Verify the host can run the chosen local isolation backend before we
 * create a worktree. The runner has already been resolved from
 * `config.local.runner` (via `resolveLocalRunner`), so `auto` never gets
 * here — the caller passes `safehouse`, `sdx`, or `none`.
 *
 * `none` is a deliberately unsafe escape hatch. It is never selected
 * implicitly (`auto` picks `safehouse`/`sdx`); when the user has set it
 * explicitly, this helper logs a single warning so the unsandboxed launch
 * is visible in groundcrew's log, but does not throw.
 */
export declare function assertLocalRunnerRequirements(host: HostCapabilities, runner: LocalRunner): void;
//# sourceMappingURL=localRunner.d.ts.map