/**
 * Bug-Box Platform Capabilities Detection
 *
 * Probes the current OS for available isolation primitives.
 * Each check is safe, unprivileged, and fast (<50ms per probe).
 * Results are used by bugbox.ts to decide which isolation layers to apply.
 */
export interface PlatformCapabilities {
    /** Current OS: 'linux', 'win32', or 'darwin' */
    platform: NodeJS.Platform;
    /** Linux: can we run `unshare` for PID/network namespace isolation? */
    hasUnshare: boolean;
    /** Linux: is cgroups v2 available for resource limits? */
    hasCgroupsV2: boolean;
    /** Windows: Job Objects are always available for process/resource limits */
    hasJobObjects: boolean;
    /** Windows: can we create firewall rules via `netsh`? */
    hasNetsh: boolean;
    /** macOS: can we use `sandbox-exec` for profile-based sandboxing? */
    hasSandboxExec: boolean;
}
/**
 * Checks whether a command is available on the system PATH.
 * Uses `where` on Windows and `which` on Unix.
 * Never throws — returns false for any error.
 */
export declare function commandExists(name: string): boolean;
/**
 * Detects which isolation primitives are available on the current platform.
 * Safe to call repeatedly — each call re-probes (no caching).
 */
export declare function detectCapabilities(): PlatformCapabilities;
//# sourceMappingURL=capabilities.d.ts.map