import type { Capability, CapabilityContext, CapabilityPlanDetails, CapabilityVerification, RollbackContext } from "./types.js";
import type { CapabilityExecutor } from "./executor.js";
import { NodePermissionExecutor } from "./executor.js";
export type DockerMount = {
    source: string;
    target: string;
    readOnly?: boolean;
};
export type DockerExecutorOptions = {
    dockerCommand?: string;
    image?: string;
    timeoutMs?: number;
    memory?: string;
    cpus?: number;
    pidsLimit?: number;
    environment?: Readonly<Record<string, string>>;
    mounts?: readonly DockerMount[];
    network?: "auto" | "none" | "bridge";
};
export declare function isDockerAvailable(command?: string, timeoutMs?: number): Promise<boolean>;
export declare class DockerExecutor implements CapabilityExecutor {
    private readonly options;
    constructor(options?: DockerExecutorOptions);
    private source;
    private lifecycle;
    execute(capability: Capability, input: unknown, context: CapabilityContext): Promise<unknown>;
    plan(capability: Capability, input: unknown): Promise<CapabilityPlanDetails>;
    verify(capability: Capability, output: unknown, context: CapabilityContext): Promise<boolean | CapabilityVerification | undefined>;
    rollback(capability: Capability, context: RollbackContext<unknown, unknown>): Promise<unknown>;
}
export type AutoIsolatedExecutorOptions = {
    docker?: DockerExecutorOptions;
    node?: ConstructorParameters<typeof NodePermissionExecutor>[0];
    preferDocker?: boolean;
};
export declare class AutoIsolatedExecutor implements CapabilityExecutor {
    private readonly options;
    private dockerAvailable?;
    private readonly docker;
    private readonly node;
    constructor(options?: AutoIsolatedExecutorOptions);
    private target;
    execute(capability: Capability, input: unknown, context: CapabilityContext): Promise<unknown>;
    plan(capability: Capability, input: unknown): Promise<CapabilityPlanDetails>;
    verify(capability: Capability, output: unknown, context: CapabilityContext): Promise<boolean | CapabilityVerification | undefined>;
    rollback(capability: Capability, context: RollbackContext<unknown, unknown>): Promise<unknown>;
}
//# sourceMappingURL=docker.d.ts.map