/**
 * Auto-detect the best available sandbox backend for the current platform.
 *
 * Priority:
 *   macOS → sandbox-exec (built-in) → docker → off
 *   Linux → bubblewrap → firejail → docker → off
 */
import type { SandboxBackend } from './backend';
import type { Logger } from '../types';
export type SandboxMode = 'off' | 'docker' | 'sandbox-exec' | 'bubblewrap' | 'auto';
export interface AutoDetectResult {
    /** Resolved backend (null = off). */
    backend: SandboxBackend | null;
    /** The mode that was resolved to. */
    resolvedMode: string;
    /** Human-readable reason for the resolution. */
    reason: string;
}
/**
 * Resolve the `auto` sandbox mode to a concrete backend.
 * For explicit modes other than `auto`, validates availability.
 */
export declare function resolveSandboxBackend(mode: SandboxMode, logger: Logger): Promise<AutoDetectResult>;
//# sourceMappingURL=auto-detect.d.ts.map