/**
 * Internal execFile wrapper for the build pipeline.
 *
 * SECURITY: everything routes through execFile (argv form) — /bin/sh is never
 * spawned, so shell metacharacters in paths/schemes are literal argv slots
 * (CWE-78 mitigation, same contract as src/ios/simctl-exec.ts and src/adb/exec.ts).
 *
 * Returns a Result instead of throwing: callers need raw stderr to classify
 * (and redact) build failures — see classify-build-error.ts.
 */
export type ToolResult = {
    ok: true;
    stdout: string;
} | {
    ok: false;
    timedOut: boolean;
    stderr: string;
    stdout: string;
};
export declare function runTool(file: string, args: string[], options: {
    timeoutMs: number;
    cwd?: string;
}): Promise<ToolResult>;
//# sourceMappingURL=exec.d.ts.map