import { NATIVE_BEHAVIOR_BOUNDARY, type PluginBehaviorRunnerConfig } from './plugin-behavior-config.js';
export { NATIVE_BEHAVIOR_BOUNDARY, validatePluginBehaviorRunnerConfig, validatePluginBehaviorDeploymentConfig } from './plugin-behavior-config.js';
export type { PluginBehaviorRunnerConfig, PluginBehaviorDeploymentConfig } from './plugin-behavior-config.js';
declare const BOUNDARY = "process-seccomp-v1";
export type PluginBehaviorOperation = {
    readonly kind: 'discover';
} | {
    readonly kind: 'invoke';
    readonly schemaDigest: string;
    readonly calls: readonly {
        readonly id: string;
        readonly toolName: string;
        readonly arguments: unknown;
    }[];
};
export interface PluginBehaviorObservation {
    readonly status: 'observed' | 'unknown';
    readonly quiescent: boolean;
    readonly jobId?: string;
    readonly artifactSha256: string;
    readonly boundary?: typeof BOUNDARY | typeof NATIVE_BEHAVIOR_BOUNDARY;
    readonly runtimeDigest?: string;
    readonly reason?: string;
    readonly environment?: Readonly<{
        node: string;
        cordis: string;
        tools: string;
        systemPrompt: string;
    }>;
    readonly schemaDigest?: string;
    readonly schemas?: readonly unknown[];
    readonly calls?: readonly {
        readonly id: string;
        readonly toolName: string;
        readonly result: unknown;
    }[];
}
export interface PluginBehaviorRunnerInput {
    readonly key: string;
    readonly artifact: Buffer;
    readonly operation: PluginBehaviorOperation;
    readonly signal: AbortSignal;
}
/** Host-only behavior observation. The candidate and worker receive no oracle or promotion authority. */
export declare class PluginBehaviorRunner {
    #private;
    constructor(input: PluginBehaviorRunnerConfig);
    run(input: PluginBehaviorRunnerInput): Promise<PluginBehaviorObservation>;
    close(): Promise<void>;
}
//# sourceMappingURL=plugin-behavior-runner.d.ts.map