/**
 * SandboxStage - DefenseInDepthBox activation.
 *
 * Activates the defense-in-depth sandbox before script interpretation.
 * The handle is stored on the context for cleanup in the pipeline's
 * finally block.
 */
import type { DefenseInDepthConfig } from "../../security/types.js";
import type { PipelineContext, PipelineStage, StageResult } from "../types.js";
export declare class SandboxStage implements PipelineStage {
    readonly name = "sandbox";
    private readonly config;
    constructor(config: DefenseInDepthConfig | boolean | undefined);
    execute(context: PipelineContext): Promise<StageResult>;
}
