import type { OrgDef } from '../types.js';
import type { Findings } from './definition-util.js';
export declare const runnerRootFor: (orgDir: string) => string;
/** One role's private source directories. */
export declare const privateRunnerRoot: (orgDir: string, role: string) => string;
/** Claude Code's directories holding transcripts, file backups and debug logs. */
export declare function claudeNativeDirs(home: string, env: NodeJS.ProcessEnv): string[];
export interface NativeBind {
    src: string;
    dest: string;
}
/** The private directory of a role's runner process, for a runtime that has one (`config-env`, `private-home`). */
export declare const runtimeDirFor: (orgDir: string, role: string, runtime: string) => string;
/**
 * The private mounts of one role: none unless the org is on the sections surface.
 * Claude gets one private source per native directory, bound over it. A runtime
 * with a private directory of its own gets that directory bound over itself
 * (read-write), which keeps it writable inside the read-only runner root while the
 * other roles' directories are hidden.
 */
export declare function nativeBinds(def: {
    sections?: unknown;
} | undefined, orgDir: string, role: string, runtime: string, home: string, env: NodeJS.ProcessEnv): NativeBind[];
/** Creates each private source directory, for the destinations that exist (a private directory bound over itself is created). */
export declare function ensureNativeSources(binds: NativeBind[]): NativeBind[];
/**
 * The environment of one role's runner process and the staging behind it: the
 * private directory is created, the credentials the CLI needs are linked into it
 * (the real home is only read), and the variables that point the CLI at it are
 * returned. Empty for an org without sections and for runtimes without a private directory.
 */
export declare function runtimeIsolationEnv(def: {
    sections?: unknown;
} | undefined, orgDir: string, role: string, runtime: string, home: string, env: NodeJS.ProcessEnv): Record<string, string>;
/** Findings for roles whose runtime has no usable entry in the isolation registry. */
export declare function copyInventoryFindings(def: OrgDef, env?: NodeJS.ProcessEnv): Findings;
//# sourceMappingURL=copy-inventory.d.ts.map