/**
 * Sandbox policies — pure data describing the file/network reach of tools.
 *
 * Mirrors `python/src/adk_fluent/_harness/_sandbox.py`. Sandbox policies
 * are passed to the workspace/processes/web tool factories so individual
 * tool calls can be vetted at runtime.
 */
export interface SandboxPolicyOptions {
    /** Workspace root — every read/write must resolve under this directory. */
    workspace?: string | null;
    /** Allow `bash`/`process` style tools? */
    allowShell?: boolean;
    /** Allow network egress (web, fetch, MCP)? */
    allowNetwork?: boolean;
    /** Additional read-only paths outside the workspace. */
    readPaths?: Iterable<string>;
    /** Additional writable paths outside the workspace. */
    writePaths?: Iterable<string>;
    /** Hard cap on bash output capture (bytes). */
    maxOutputBytes?: number;
}
export declare class SandboxPolicy {
    readonly workspace: string | null;
    readonly allowShell: boolean;
    readonly allowNetwork: boolean;
    readonly readPaths: ReadonlySet<string>;
    readonly writePaths: ReadonlySet<string>;
    readonly maxOutputBytes: number;
    constructor(opts?: SandboxPolicyOptions);
    /** Throw if `target` cannot be read under this policy. */
    checkRead(target: string): string;
    /** Throw if `target` cannot be written under this policy. */
    checkWrite(target: string): string;
    private checkAccess;
}
//# sourceMappingURL=sandbox.d.ts.map