/**
 * @license
 * Copyright 2026 Google LLC
 * SPDX-License-Identifier: Apache-2.0
 */
import { type SandboxManager, type SandboxRequest, type SandboxedCommand } from '../../services/sandboxManager.js';
import { type EnvironmentSanitizationConfig } from '../../services/environmentSanitization.js';
/**
 * Options for configuring the LinuxSandboxManager.
 */
export interface LinuxSandboxOptions {
    /** The primary workspace path to bind into the sandbox. */
    workspace: string;
    /** Additional paths to bind into the sandbox. */
    allowedPaths?: string[];
    /** Optional base sanitization config. */
    sanitizationConfig?: EnvironmentSanitizationConfig;
}
/**
 * A SandboxManager implementation for Linux that uses Bubblewrap (bwrap).
 */
export declare class LinuxSandboxManager implements SandboxManager {
    private readonly options;
    constructor(options: LinuxSandboxOptions);
    prepareCommand(req: SandboxRequest): Promise<SandboxedCommand>;
}
