/**
 * WSL2 + bubblewrap sandbox core for the agent shell layer.
 *
 * Core contract: config in, sandboxed command out.
 * The caller owns process lifecycle; the sandbox owns isolation.
 */
export type { SandboxConfig, SandboxState, WrappedCommand } from './types.js';
export { buildBwrapArgs } from './bwrap.js';
export { toLinuxPath } from './paths.js';
export { DEFAULT_DISTRO, resolveSandboxConfig } from './resolve.js';
export { wrapCommand } from './wrap-command.js';
export { startNetworkProxy, type NetworkProxyHandle } from './network/index.js';
export { isDistroInstalled, isWsl2Available } from './wsl-detect.js';
export { enableWsl2, ensureWslSandbox } from './wsl-setup.js';
//# sourceMappingURL=index.d.ts.map