/**
 * macOS sandbox-exec backend.
 *
 * Uses `sandbox-exec -p <profile>` (macOS only) to run commands in a
 * sandbox with restricted file-system, network, and process access.
 *
 * The profile allows read-write to the project directory and read-only
 * to system paths (/usr, /bin, /Library). Network is denied by default.
 */
import type { SandboxBackend } from './backend';
export declare function createSandboxExecBackend(): SandboxBackend;
//# sourceMappingURL=sandbox-exec.d.ts.map