import { type Serializable } from "node:child_process";
import { type ConfigurationVerificationOwner } from "../configuration/configuration-verify-ownership.js";
export declare class OwnedWorkerError extends Error {
    readonly code: "CANCELLED" | "TIMEOUT" | "WORKER_FAILED" | "CLEANUP_FAILED";
    constructor(code: "CANCELLED" | "TIMEOUT" | "WORKER_FAILED" | "CLEANUP_FAILED");
}
export interface OwnedWorkerOptions<T> {
    /** 仅可信内部入口；不得接受 HTTP 输入。 */
    entrypoint: string;
    args?: string[];
    cwd: string;
    directory: string;
    owner: ConfigurationVerificationOwner;
    request: Serializable;
    timeoutMs: number;
    signal?: AbortSignal;
    decode(value: unknown): T;
    lifecycle: {
        cleanupAllowed: boolean;
    };
}
/** 进程与凭据隔离，不构成恶意扩展的文件系统或网络沙箱。 */
export declare function runOwnedWorker<T>(options: OwnedWorkerOptions<T>): Promise<T>;
//# sourceMappingURL=owned-worker.d.ts.map