/**
 * The universal install-or-connect one-liner. The installer is idempotent,
 * `connect` adds only this deployment/workspace, and the agent is left running
 * as the ordinary background service. It is safe on a machine already serving
 * other Opengeni instances.
 *
 * It ALWAYS bakes `OPENGENI_API_URL=${origin}` so the agent targets *this*
 * deployment rather than relying on the managed-cloud fallback. Pass:
 *  - `{ workspaceId }` for the interactive (human device-approve) path — adds
 *    `OPENGENI_WORKSPACE_ID` so the user never hand-types the workspace UUID.
 *  - `{ enrollToken }` for the headless / fleet path — adds
 *    `OPENGENI_ENROLL_TOKEN` (a short-lived secret) so the machine enrolls with
 *    zero approve clicks.
 *  - nothing — the bare interactive install (still origin-pinned).
 */
export declare function installOneLiner(baseUrl: string, opts?: {
    workspaceId?: string | undefined;
    enrollToken?: string | undefined;
}): string;
/** The same-origin device-flow approval page. */
export declare function deviceVerificationUri(baseUrl: string): string;
/**
 * The PowerShell counterpart of {@link installOneLiner} for Windows, with the
 * same origin pinning. Values are single-quoted so PowerShell never expands them.
 */
export declare function installOneLinerWindows(baseUrl: string, opts?: {
    workspaceId?: string | undefined;
    enrollToken?: string | undefined;
}): string;
/** The operating systems a connect command is offered for. */
export type ConnectOs = "macos" | "linux" | "windows";
/**
 * The OS a connect command should target by default for this browser. Mac is
 * the default when the browser does not say (most people connect their own
 * laptop); Linux desktops and Chromebooks pick Linux.
 */
export declare function detectConnectOs(userAgent: string | undefined): ConnectOs;
/** The connect command for an OS: PowerShell on Windows, `sh` on Mac and Linux. */
export declare function installCommandFor(os: ConnectOs, baseUrl: string, opts?: {
    workspaceId?: string | undefined;
    enrollToken?: string | undefined;
}): string;