/**
 * Bubblewrap argument builder.
 *
 * Pure function: all I/O was done at resolve time.
 * Takes a SandboxState and returns a bwrap CLI argument array.
 */
import type { SandboxState, WrapOptions } from './types.js';
/** /etc entries to individually bind-mount when network is enabled. */
declare const ETC_ENTRIES_FOR_NETWORK: string[];
/**
 * Build bwrap command-line arguments from resolved sandbox state.
 *
 * Pure function — all filesystem probing was done by resolveSandboxConfig().
 */
export declare function buildBwrapArgs(state: SandboxState, options?: WrapOptions): string[];
export { ETC_ENTRIES_FOR_NETWORK };
//# sourceMappingURL=bwrap.d.ts.map