import { NativeToolWorker, type WorkerOptions } from './tool-worker.js';
/** Hosts must require this capability before relying on custom worker guards. */
export declare const protectedWorkerProviderApiVersion = 1;
export interface ProtectedPaths {
    workspace: string;
    agentDir: string;
    stateDir: string;
    installationDir: string;
    hostUid: number;
    workerUid: number;
    workerGid: number;
}
/** Canonical paths returned here must be used throughout the subsequent bootstrap. */
export declare function validateProtectedPaths(options: ProtectedPaths): Promise<ProtectedPaths>;
/** Single-host CLI bootstrap. Multi-user hosts must provision each worker explicitly. */
export declare function bootstrapProtectedWorker(options: ProtectedPaths & Omit<WorkerOptions, 'workspace' | 'hostUid' | 'workerUid' | 'workerGid'> & {
    hostGid: number;
}): Promise<{
    worker: NativeToolWorker;
    paths: ProtectedPaths;
    piPackageContext: string;
}>;