/**
 * Remove one persisted sandbox settings directory, and nothing else.
 *
 * This runs against a path read back from durable state, so it treats that path
 * as untrusted input rather than as a filename it wrote itself. Every property
 * the real path has is re-proved before anything is deleted: the exact
 * `settings.json` basename, the generated parent directory name, a parent that
 * canonicalizes to a known sandbox root, owner-only permissions, no symlinks,
 * and no unexpected sibling entries. A corrupted record therefore cannot turn
 * recovery into an arbitrary-file delete.
 *
 * Shared by process jobs and monitors so both fail closed identically.
 */
export declare function cleanupPersistedSandboxSettings(path: string | null): Promise<boolean>;
//# sourceMappingURL=sandbox-settings-cleanup.d.ts.map