export interface ExecutionWorldProbe {
    /** Override `/usr/bin/bwrap` detection (tests). */
    bwrapPresent?: boolean;
}
/** True when Linux bubblewrap will wrap `agim_exec` (default-on if installed). */
export declare function isExecSandboxConfigured(probe?: ExecutionWorldProbe): boolean;
/** Read/list/grep confinement — opt-in (`AGIM_NATIVE_FS_RESTRICT=1`). */
export declare function isNativeFsReadRestricted(): boolean;
/**
 * Write confinement. `=1` always confines. `=0` always unconfines (loud when
 * the exec sandbox is on). Unset follows the exec sandbox so bwrap cannot be
 * sidestepped with `agim_write_file`.
 */
export declare function isNativeFsWriteRestricted(probe?: ExecutionWorldProbe): boolean;
/** One-shot warning: exec sandbox on, but writes were explicitly unconfined. */
export declare function warnWriteUnconfinedIfSandbox(probe?: ExecutionWorldProbe): void;
/** Test-only: reset the one-shot warning latch. */
export declare function _resetExecutionWorldWarningsForTests(): void;
//# sourceMappingURL=execution-world.d.ts.map