import type { SessionPermissions } from "@/types";
import type { SandboxConfig, SandboxDockerConfig, SandboxExecArgs, SandboxExecResult, SandboxReadArgs, SandboxReadResult, SandboxWriteArgs, SandboxWriteResult } from "./sandboxTypes.js";
export declare class Sandbox {
    readonly homeDir: string;
    readonly workingDir: string;
    readonly permissions: SessionPermissions;
    readonly docker: SandboxDockerConfig | undefined;
    constructor(config: SandboxConfig);
    /**
     * Read from the host filesystem with sandbox read checks.
     * Expects: args.path is absolute or relative to workingDir.
     */
    read(args: SandboxReadArgs): Promise<SandboxReadResult>;
    /**
     * Write UTF-8 content to host filesystem with sandbox write checks.
     * Expects: args.path is an absolute path.
     */
    write(args: SandboxWriteArgs): Promise<SandboxWriteResult>;
    /**
     * Execute a shell command inside sandbox-runtime.
     * Expects: args.command is non-empty and network allowlist is explicit.
     */
    exec(args: SandboxExecArgs): Promise<SandboxExecResult>;
    private permissionsEffectiveResolve;
    private readInputPathResolve;
    private pathContainerToHost;
}
//# sourceMappingURL=sandbox.d.ts.map