/**
 * Factory for the sandboxed bash tool.
 *
 * Extracts all sandbox-specific tool wiring out of main.ts:
 * - Write-access approval prompts
 * - Network domain approval forwarding
 * - Proxy domain prompt wiring
 *
 * main.ts just calls createSandboxBashTool() and pushes the result.
 */
import type { ExtensionContext } from '../../app/extensions/index.js';
import type { SettingsManager } from '../../app/settings-manager.js';
import type { ToolDefinition } from '../../core/core-types.js';
import type { SandboxChoice } from './types.js';
/**
 * Create a fully-wired sandboxed bash tool.
 *
 * Handles:
 * - Routing commands through WSL2 + bwrap
 * - Write-access prompts (allow once / save / deny)
 * - Network domain approval prompts
 */
export declare function createSandboxBashTool(cwd: string, settingsManager: SettingsManager, promptDomainApproval?: (domain: string, ctx: ExtensionContext) => Promise<SandboxChoice | undefined>): ToolDefinition;
//# sourceMappingURL=sandbox-bash-tool.d.ts.map