/**
 * `remixmate exec -- <command> [args...]`
 *
 * Runs an arbitrary command with the resolved credential injected into its
 * environment (`PRIV_TOKEN` + `MM_API_BASE_URL`), using the same gateway that
 * skill dispatch uses.
 *
 * This is the general form of the invariant the auth rework establishes: Node
 * is the only thing that reads the credential store / keychain / device flow,
 * and every child process receives the result through its environment. Without
 * it, maintenance scripts that import `registry_loader` directly (e.g.
 * scripts/test-template-pipeline.py) would have to re-implement credential
 * lookup — which is exactly the duplication, and the cross-origin token leak,
 * that was just removed.
 *
 * The token is never printed; it only ever reaches the child's environment.
 */
export declare function runExec(argv: string[]): Promise<number>;