/**
 * WASM Tool Sandbox: Isolation and credential boundary for tool execution.
 *
 * @module cli/lib/sandbox
 */

export { WasmToolHost } from './wasm-tool-host.js';
export { CredentialBoundary } from './credential-boundary.js';
export { SandboxedToolAdapter } from './adapter.js';
export { loadCredentialConfig, validateAllowlist } from './credential-config.js';
