/**
 * Default sandbox adapter: a local Node.js child process.
 *
 * This is the historical `run-code` execution path, extracted verbatim so the
 * default runtime behavior is byte-for-byte equivalent to the previous inline
 * implementation in `run-code.ts`:
 *  - The prepared module source is written to a fresh temp dir.
 *  - The child runs with the scrubbed env supplied by the parent (no secrets).
 *  - When the Node permission model is available (`--permission`, or
 *    `--experimental-permission` on Node 20), the child is denied filesystem
 *    access outside its own temp dir, child processes, workers, and native
 *    addons. Outbound network is NOT blocked by the permission model; the env
 *    scrub means such requests carry no credentials, and all authenticated calls
 *    go through the parent's loopback bridge.
 *  - A timeout sends SIGTERM, then SIGKILL after a 2 s grace period.
 *  - Temp files are cleaned up best-effort after the run.
 */
import type { SandboxAdapter, SandboxRunRequest, SandboxRunResult } from "./adapter.js";
/** Sandbox adapter that runs code in a locked-down local Node child process. */
export declare class LocalChildProcessAdapter implements SandboxAdapter {
    readonly id = "local-child-process";
    run(request: SandboxRunRequest): Promise<SandboxRunResult>;
}
//# sourceMappingURL=local-child-process-adapter.d.ts.map