/**
 * Core sandbox API: command transformer.
 *
 * Takes a user command and resolved sandbox state,
 * returns a spawn-ready WrappedCommand.
 */
import type { SandboxState, WrapOptions, WrappedCommand } from './types.js';
/**
 * Wrap a shell command with WSL + bwrap isolation.
 *
 * Returns a WrappedCommand that the caller spawns with child_process.spawn().
 * The sandbox owns command construction; the caller owns process lifecycle.
 *
 * The `command` parameter is trusted — it comes from the agent, not from user input.
 * Socket paths are validated to prevent injection.
 *
 * @param options.cwd - Override the working directory (Linux path).
 * @param options.httpSocketPath - HTTP proxy socket (set by SandboxManager).
 * @param options.socksSocketPath - SOCKS5 proxy socket (set by SandboxManager).
 */
export declare function wrapCommand(command: string, state: SandboxState, options?: WrapOptions): WrappedCommand;
//# sourceMappingURL=wrap-command.d.ts.map