import { type Exec } from '../exec.js';
import type { IsolationBackend, NetworkMode } from './types.js';
/**
 * Only `deny` unshares the network namespace. `broker`
 * keeps the host network so ours messaging through a loopback TCP daemon keeps
 * working; hardening `broker` to `--unshare-net` plus
 * a loopback forwarder is not implemented. `allow`/`allowlist` also keep host net.
 */
export declare function unsharesNet(network: NetworkMode): boolean;
export declare function makeBubblewrapBackend(exec?: Exec): IsolationBackend;