/**
 * WSL2 + bubblewrap sandbox core for the agent shell layer.
 *
 * Core contract: config in, sandboxed command out.
 * The caller owns process lifecycle; the sandbox owns isolation.
 */
// Lower-level API — for callers who need direct control
export { buildBwrapArgs } from './bwrap.js';
export { toLinuxPath } from './paths.js';
export { DEFAULT_DISTRO, resolveSandboxConfig } from './resolve.js';
export { wrapCommand } from './wrap-command.js';
// Network proxy
export { startNetworkProxy } from './network/index.js';
// WSL setup utilities — used by /sandbox command, not by sandboxing itself
export { isDistroInstalled, isWsl2Available } from './wsl-detect.js';
export { enableWsl2, ensureWslSandbox } from './wsl-setup.js';
//# sourceMappingURL=index.js.map