/**
 * BugBox Container — Lightweight process isolation without Docker
 *
 * Uses native OS primitives per platform:
 *   Linux:   unshare (user+pid+mount+net namespaces), cgroups v2, fuse-overlayfs
 *   Windows: Job Objects, netsh firewall rules
 *   macOS:   sandbox-exec
 *
 * No daemon, no images, no root required (Linux user namespaces are unprivileged).
 */
export interface ContainerConfig {
    command: string[];
    workingDir: string;
    environment: Record<string, string>;
    timeoutMs: number;
    limits?: {
        maxMemoryMB?: number;
        maxCpuPercent?: number;
        maxPids?: number;
    };
    network: 'none' | 'loopback' | 'full';
    filesystem: 'readonly' | 'overlay' | 'full';
}
export interface ContainerResult {
    command: string[];
    environment: Record<string, string>;
    workingDir: string;
    layersApplied: string[];
    layersFailed: string[];
    cleanup: () => void;
    description: string;
}
export declare function createContainer(config: ContainerConfig): ContainerResult;
//# sourceMappingURL=container.d.ts.map