export type { WorkerToolProvider } from './worker-provider.js';
export declare const nativeToolNames: readonly ["read", "write", "edit", "bash", "grep", "find", "ls"];
export type NativeToolName = typeof nativeToolNames[number];
export type WorkerOperationName = NativeToolName | 'user_bash';
export interface WorkerOptions {
    workspace: string;
    /** Protected installation's package.json; never supplied by the model. */
    piPackageContext: string;
    /** Trusted util-linux setpriv executable, used to make privilege gain irreversible. */
    privilegeGuard: string;
    workerUid: number;
    workerGid: number;
    hostUid: number;
    path: string;
    startupTimeoutMs: number;
    operationTimeoutMs: number;
    maxConcurrentOperations: number;
    maxResultBytes: number;
    /** Optional trusted host integration, validated inside the protected installation. */
    toolProviderModule?: string;
}
/** Bootstrap while privileged; drop host privileges before enabling memory. */
export declare class NativeToolWorker {
    #private;
    constructor(options: WorkerOptions);
    get workspace(): string;
    assertIsolated(): Promise<void>;
    execute(name: WorkerOperationName, parameters: Record<string, unknown>, signal?: AbortSignal, onUpdate?: (value: unknown) => void): Promise<unknown>;
    close(): void;
}