import type { IsolationResources } from './types.js';
export interface ResourceArgs {
    argv: string[];
    warnings: string[];
}
/**
 * Build the `systemd-run --user --scope -p … --` prefix that caps the agent
 * process's cgroup-v2 scope. It composes outside the sandbox wrapper so both
 * the adapter and its sandboxed child remain inside the transient scope.
 *
 * mem/pids are always enforced (their controllers are delegated to `--user` by
 * default). cpu degrades to a warning when the cpu controller is not delegated.
 */
export declare function resourceArgs(res: IsolationResources, cpuDelegated: boolean): ResourceArgs;
/** Whether the cpu cgroup-v2 controller is delegated to this user manager. */
export declare function cpuControllerDelegated(read?: (p: string) => string): boolean;