import type { PermissionMode } from "../permissions/index.js";
import type { PreparedDockerSandbox } from "./prepareDockerSandbox.js";
export declare function createDockerSandboxCommand(options: {
    command: string;
    commandCwd: string;
    mode: Exclude<PermissionMode, "full_access">;
    networkBridgeRoot?: string;
    networkUnixProxySockets?: {
        authenticationToken: string;
        http: string;
        loopback?: readonly {
            path: string;
            port: number;
        }[];
        socks: string;
    };
    protectedPaths?: readonly string[];
    readyProjectConfigNames?: readonly ("happy.toml" | "rig.toml")[];
    runtime: PreparedDockerSandbox;
    shell: string;
    workspaceCwd: string;
}): string[];
export declare function createDockerNetworkRelayScript(command: string, sockets: NonNullable<Parameters<typeof createDockerSandboxCommand>[0]["networkUnixProxySockets"]>, options?: {
    includeProxyPorts?: boolean;
}): string;