type SystemTrustApi = {
    getCACertificates?: (type?: 'default' | 'system') => string[];
    setDefaultCACertificates?: (certificates: string[]) => void;
};
/** CLI startup only: preserve bundled/extra CAs and add OS-managed trust. */
export declare function configureSystemTrust(api?: SystemTrustApi): boolean;
/** Whether configureSystemTrust added the OS certificates; TLS advice suggests a newer Node only when it couldn't. */
export declare function isSystemTrustConfigured(): boolean;
export {};