/**
 * Bubblewrap (Linux bwrap)
 *
 * Linux sandboxing using user namespaces and bind mounts.
 * https://github.com/containers/bubblewrap
 */
import type { NativeSandboxConfig } from './types.js';
/**
 * Build the bwrap command arguments for the given configuration.
 *
 * @param command - The full shell command string to run inside the sandbox
 * @param workspacePath - The workspace directory (mounted read-write)
 * @param config - Additional sandbox configuration
 * @returns Wrapped command and arguments for bwrap
 */
export declare function buildBwrapCommand(command: string, workspacePath: string, config: NativeSandboxConfig): {
    command: string;
    args: string[];
};
//# sourceMappingURL=bubblewrap.d.ts.map