import type { SandboxOptions, SandboxResult } from '../../types/sandbox.js';
/**
 * Run a command inside an Apple sandbox-exec sandbox on macOS.
 * Restrictions:
 *   - Filesystem writes restricted to projectRoot + /tmp via profile param
 *   - Network egress blocked by default (profile denies network)
 *   - LD_PRELOAD / DYLD_* env vars stripped
 */
export declare function runWithSandboxExec(command: string, args: string[], options: SandboxOptions): Promise<SandboxResult>;
//# sourceMappingURL=runner-sandbox-exec.d.ts.map