/**
 * Returns the list of valid account UUIDs found under `accountsDir`. A dir is
 * "valid" iff its name is a UUID AND it contains a parseable `account.json`.
 * Corruption-discipline: a present-but-unparseable account.json EXCLUDES the
 * dir (over-prune one suspect account beats under-prune the leak it might
 * be hiding).
 */
export declare function enumerateValidAccountIds(accountsDir: string): string[];
/**
 * Resolves the canonical accounts dir from `MAXY_PLATFORM_ROOT`. Mirrors the
 * pattern at platform/ui/app/lib/claude-agent/account.ts:9
 * (`ACCOUNTS_DIR = resolve(PLATFORM_ROOT, "..", "data/accounts")`).
 *
 * Loud-throws when the env var is unset — graph-write's gate must not fall
 * open silently.
 */
export declare function getAccountsDirFromEnv(): string;
/**
 * Test-only cache reset. Production callers must not invoke this — the cache
 * is a deliberate boot-time invariant (see module doc).
 */
export declare function _resetEnumerationCache(): void;
/**
 * boot-time env-vs-disk validator. Compares `process.env.ACCOUNT_ID`
 * (stamped by the brand systemd unit's `Environment=ACCOUNT_ID=` line) against
 * the on-disk account set returned by `enumerateValidAccountIds`. The Hono
 * server calls this once at boot before binding the listener; on FATAL it
 * emits a structured `[graph-health] account-id-env FATAL` line and exits 1
 * so systemd's restart loop surfaces the misconfiguration in journalctl.
 *
 * Pure function — no I/O, no env reads, no exits — caller passes both inputs.
 * Reasons enumerate the four observable boot states (success + three failures)
 * with no fallback path; the writeNodeWithEdges gate cannot trust an env that
 * does not match disk, and silently degrading would re-create the silent-leak
 * class the gate exists to close (`.docs/neo4j.md` "Account isolation invariant").
 */
export type AccountIdEnvValidationFailureReason = "missing" | "no-on-disk-account" | "mismatch";
export type AccountIdEnvValidation = {
    ok: true;
    envId: string;
    diskIds: string[];
} | {
    ok: false;
    reason: AccountIdEnvValidationFailureReason;
    envId: string | null;
    diskIds: string[];
};
export declare function validateAccountIdEnv(envValue: string | undefined, diskIds: string[]): AccountIdEnvValidation;
//# sourceMappingURL=index.d.ts.map