import { type PlatformBinding } from './binding.js';
import { type DeviceCredentialPathOptions, type DevicePublicStatus } from './device.js';
import { type DeviceEnrollmentApi } from './device-enroll.js';
export type { DeviceEnrollmentApi } from './device-enroll.js';
export interface DeviceCommandDependencies extends DeviceCredentialPathOptions {
    env?: NodeJS.ProcessEnv;
    dataDir?: string;
    startPid?: number;
    stdout?: (line: string) => void;
    stderr?: (line: string) => void;
    readBinding?: () => PlatformBinding | null;
    createClient?: (issuer: string) => DeviceEnrollmentApi;
    hostName?: () => string;
    isAgentContext?: () => boolean;
    now?: () => Date;
    isolationSupported?: () => boolean;
    ensureIsolationMarker?: () => {
        created: boolean;
        path: string;
    };
    activateIsolation?: () => Promise<{
        activated: boolean;
        daemonCount: number;
    }>;
}
/**
 * UX guard for accidental invocation from a managed AI CLI. The mandatory OS
 * credential mask is the actual security boundary; this early check only
 * provides a clearer error. Never trust child-controlled SESSION_DATA_DIR/HOME
 * when consulting the daemon breadcrumb and PID markers.
 */
export declare function isManagedAgentDeviceCommandContext(options?: Pick<DeviceCommandDependencies, 'env' | 'dataDir' | 'startPid'>): boolean;
export declare function serializeDevicePublicStatus(status: DevicePublicStatus): string;
export declare function runDeviceCommand(args: string[], dependencies?: DeviceCommandDependencies): Promise<number>;
//# sourceMappingURL=device-command.d.ts.map