/** Kernel socket inodes bound under `dir` per /proc/net/unix content. Pure. */
export declare function unixInodesUnderDir(procNetUnix: string, dir: string): Set<string>;
/** Socket inodes among fd link targets (`socket:[123]` → "123"). Pure. */
export declare function socketInodesFromFdLinks(links: string[]): Set<string>;
/** How many simultaneous connections one probe run opens (and therefore the
 *  minimum appear∧vanish inode count a candidate must show to qualify). */
export declare const PROBE_CONNECTIONS = 2;
/**
 * The pids whose fd table gained AT LEAST `minCount` dir-bound socket inodes
 * between `before` and `during` that are gone again in `final` — i.e. the
 * accept()/close() lifecycle of OUR probe connections. Pure (testable): the
 * causal core. `minCount` must equal the number of connections the probe
 * opened: a single stray short-lived sibling connection then can never
 * qualify on its own (the Codex combo finding — target accept slow + one
 * sibling short in-window — yields zero candidates, fail-closed).
 */
export declare function attributeOwners(pids: number[], before: Map<number, Set<string>>, during: Map<number, Set<string>>, final: Map<number, Set<string>>, dirBoundInodes: Set<string>, minCount: number): number[];
//# sourceMappingURL=zellij-socket-probe.d.ts.map