import { fetchDaemonIpc } from '../core/daemon-ipc-auth.js';
import { type OnlineDaemonInfo } from '../utils/daemon-discovery.js';
import { type DeviceIsolationActivationOptions } from './device-isolation.js';
export declare class DeviceIsolationDaemonActivationError extends Error {
    constructor(message: string);
}
export interface DeviceIsolationActivationClientDependencies {
    listDaemons?: () => OnlineDaemonInfo[];
    fetchDaemon?: typeof fetchDaemonIpc;
    processStart?: (pid: number) => string | undefined;
    nonceFactory?: () => string;
    expectedDataDir?: string;
    now?: () => Date;
}
export interface ActivateDeviceIsolationOptions extends DeviceIsolationActivationOptions {
    dependencies?: DeviceIsolationActivationClientDependencies;
}
/**
 * Establish the one-way marker without leaving a legacy local CLI capable of
 * reading the first grant journal/device token. Existing valid markers are a
 * completed security transition and are never removed or downgraded.
 */
export declare function activateDeviceCredentialIsolation(options?: ActivateDeviceIsolationOptions): Promise<{
    activated: boolean;
    daemonCount: number;
    markerSha256: string;
}>;
//# sourceMappingURL=device-isolation-activation-client.d.ts.map