import { CompileResult } from "./compile.js";
import { ClosureEntry } from "./closureValidator.js";
import type { TrustedModules } from "./trustedModules.js";
export { compileValidatedClosure } from "./compileValidatedClosure.js";
export type CompileSandboxedArgs = {
    entry: ClosureEntry;
    /** Confinement boundary for local imports. "" = no local imports possible. */
    dir: string;
    /** Enforce the reviewed JS-globals allowlist. `--agency-only` sets this, and
     *  so does `compile(strict: true)` from `std::agency`; the trusted runtime
     *  fork path leaves it off. See compileValidatedClosure. */
    enforceJsGlobals?: boolean;
    fingerprintModuleIds?: boolean;
    /** Resolved trusted modules. Only std::workflow passes a non-empty list;
     *  see docs/dev/runtime/trusted-modules.md. */
    trustedModules?: TrustedModules[];
};
export declare function compileSandboxed(args: CompileSandboxedArgs): CompileResult;
export type AgencyOnlyCompile = {
    ok: true;
    scriptPath: string;
} | {
    ok: false;
    errors: string[];
};
/** `--agency-only`: compile `sourceFile` through the validator and write the
 *  result beside the sources, `<name>.js` next to each `<name>.agency`, the
 *  same layout `compile()` produces. A refusal is returned, not thrown. */
export declare function compileAgencyOnly(sourceFile: string): AgencyOnlyCompile;