/**
 * DockerSandboxStrategy — full isolation via Docker containers.
 *
 * Provides deterministic filesystem, network control, and resource limits.
 * Falls back to TempDirSandboxStrategy when Docker is unavailable.
 *
 * Docker interaction uses the `docker` CLI via `execFileSync` (array form,
 * no shell) to prevent shell injection from task-supplied values like
 * image names or task IDs.
 *
 * @see docs/archive/exec-plans/architecture-overhaul/phase-4-agent-harness.md
 */
import type { SandboxArtifacts, SandboxInfo, SandboxProvisionOptions, SandboxStrategy } from "./sandbox-strategy.js";
export declare class DockerSandboxStrategy implements SandboxStrategy {
    readonly name = "Docker Container";
    readonly type: "docker";
    isAvailable(): Promise<boolean>;
    provision(options: SandboxProvisionOptions): Promise<SandboxInfo>;
    collectArtifacts(sandbox: SandboxInfo): Promise<SandboxArtifacts>;
    teardown(sandbox: SandboxInfo): Promise<void>;
}
