/**
 * Cognigate Sandbox Module
 *
 * Provides tier-based execution isolation for agents including:
 * - Sandbox lifecycle management
 * - Network policy enforcement
 * - Filesystem isolation
 * - Capability brokering
 *
 * @packageDocumentation
 */
export { NetworkAccessLevel, FilesystemAccessLevel, SandboxRuntime, SandboxState, type TierCapabilities, TIER_CAPABILITIES, type SandboxConfig, type NetworkPolicy, type FilesystemPolicy, type ResourceLimits, type ExecutionContext, type EgressRule, type DnsPolicy, type NetworkRateLimits, type MountConfig, type OverlayConfig, type SecretMount, type DiskQuotas, type SandboxInstance, type ResourceUsage, type SandboxExecutionResult, type NetworkActivityLog, type FilesystemActivityLog, type PolicyViolation, type SandboxAttestationData, } from './types.js';
export { SandboxService, createSandboxService, getSandboxService, } from './sandbox-service.js';
export { NetworkPolicyEnforcer, createNetworkPolicyEnforcer, getNetworkPolicyEnforcer, type NetworkNamespaceConfig, type IptablesRule, type ConnectionEntry, } from './network-policy.js';
export { FilesystemPolicyEnforcer, createFilesystemPolicyEnforcer, getFilesystemPolicyEnforcer, type OverlayMount, type AccessControlEntry, type MountState, type ActiveMount, } from './filesystem-policy.js';
export { CapabilityBroker, createCapabilityBroker, getCapabilityBroker, type CapabilityRequest, type CapabilityType, type CapabilityDetails, type CapabilityDecision, type CapabilityConditions, type GrantedCapability, } from './capability-broker.js';
//# sourceMappingURL=index.d.ts.map