export type IntegrityReason = 'mcp_gateway_missing' | 'mcp_gateway_stale_path' | 'cursor_hook_missing' | 'cursor_hook_stale_path' | 'cursor_hook_changed' | 'claude_hook_missing' | 'claude_hook_stale_path' | 'claude_hook_changed' | 'daemon_not_running' | 'runtime_bundle_stale';
export interface LocalIntegrityReport {
    ok: boolean;
    reasons: IntegrityReason[];
    checkedAt: string;
    protectedMcpConfigs: number;
    discoveredMcpConfigs: number;
    daemonRunning: boolean;
}
export declare function isDaemonRunning(): boolean;
/**
 * Local-only verification of the protection surfaces that a user-mode agent can
 * observe. It deliberately reports gaps instead of claiming EDR-grade tamper
 * resistance: unsupported clients and non-interactive shells remain visible
 * product limitations.
 */
export declare function getLocalIntegrityReport(options?: {
    requireDaemon?: boolean;
    runtimeBundleFetchedAt?: number;
    runtimeBundleMaxAgeMs?: number;
}): LocalIntegrityReport;