/**
 * escape hatch family — `shell`. Typed, but flagged: a raw shell step run by
 * exactly one component is the "capability-per-component" smell the model
 * exists to avoid (see docs/components/capabilities.mdx#the-discipline).
 * `reason` is required so lint (COMP006) can flag an escape hatch used without
 * a stated justification.
 */
import type { Capability } from "../capability.js";
import { type ProcessRunner } from "./process-runner.js";
export interface ShellInput {
    /** Command to run. */
    cmd: string;
    /** Working directory. Default: process cwd. */
    cwd?: string;
    /** Additional environment variables. */
    env?: Record<string, string>;
    /** Required justification for reaching past the capability set — lint-checked. */
    reason: string;
}
export interface ShellOutput {
    /** Captured stdout. */
    stdout: string;
    /** Process exit code. Always 0 on success — a non-zero exit rejects the run. */
    exitCode: number;
}
/**
 * Run an arbitrary shell command through the injectable {@link ProcessRunner}.
 * The escape hatch — typed, lint-flagged, and requires a `reason`. A non-zero
 * exit rejects (with the command's own stderr), failing the step like any other
 * capability error, so `onFailure`/rollback fires.
 */
export declare function createShellCapability(processRunner?: ProcessRunner): Capability<ShellInput, ShellOutput>;
/** Default `shell` capability, backed by the real process runner. */
export declare const shellCapability: Capability<ShellInput, ShellOutput>;
//# sourceMappingURL=shell.d.ts.map