import type { SandboxOptions, SandboxResult } from '../../types/sandbox.js';
/**
 * Run a command inside a bwrap (bubblewrap) sandbox on Linux.
 * Restrictions:
 *   - Filesystem writes restricted to projectRoot + /tmp
 *   - Network egress blocked (--unshare-net)
 *   - Dies with parent process (--die-with-parent)
 *   - LD_PRELOAD and related env vars stripped
 */
export declare function runWithBwrap(command: string, args: string[], options: SandboxOptions): Promise<SandboxResult>;
//# sourceMappingURL=runner-bwrap.d.ts.map