/**
 * `shell_exec` primitive — gated shell-command execution stub (AUTO.3).
 *
 * AUTO.3 lands the CAPABILITY GATE only. The actual exec path (spawn/argv
 * separation, stdout/stderr capture, timeout, signal handling) lands in
 * AUTO.5 — until then, this primitive performs the gate check, returns a
 * verdict-routed error on deny, and emits a `not-implemented` error on
 * allow so that downstream callers can't accidentally bypass the future
 * exec wiring.
 *
 * The "stub but gated" posture is intentional — wiring the gate now means
 * AUTO.5 inherits the security model and only has to add the spawn layer.
 *
 * Imports from: zod, ../runtime/result.js, ../runtime/capability_gate.js,
 *   ./registry.js.
 * Imported by: src/functions/index.ts (registry wiring).
 */
import type { CapabilityGate } from '../runtime/capability_gate.js';
import type { FunctionRegistry } from './registry.js';
export declare function registerShellExecFunction(registry: FunctionRegistry, opts: {
    gate: CapabilityGate;
}): void;
//# sourceMappingURL=shell_exec.d.ts.map