import type { PermissionMode } from "../../permissions/index.js";
export declare function createMacOsSeatbeltCommand(options: {
    /**
     * Run this exact argument vector instead of a shell command. Background readers use it so they
     * never build a shell string and never source the user's login profile.
     */
    argv?: readonly string[];
    additionalWritablePaths?: readonly string[];
    /**
     * Writable even when it sits inside a protected path, for a caller whose own folder is nested
     * under something it must not otherwise touch. Stated after the protections, so it re-opens
     * exactly these paths and nothing around them.
     */
    alwaysWritablePaths?: readonly string[];
    /** Whether the sandboxed process may create child processes. Defaults to true. */
    allowSubprocesses?: boolean;
    command: string;
    cwd: string;
    environment?: NodeJS.ProcessEnv;
    filesystemFullAccess?: boolean;
    mode: PermissionMode;
    networkAllowLocalBinding?: boolean;
    networkAllowedLoopbackPorts?: readonly number[];
    networkFullAccess?: boolean;
    path?: string;
    protectProjectMetadata?: boolean;
    protectedPaths?: readonly string[];
    shell: string;
    temporaryDirectory?: string;
    unixSocketPaths?: readonly string[];
}): Promise<{
    args: readonly string[];
    command: string;
}>;