export type CapsuleFsIsolationMode = "off" | "bwrap";
export interface CapsuleFsConfinement {
    nodeBin: string;
    nodeExecArgv: string[];
    workerPath: string;
    deployDir: string;
    pondSrcDir: string;
    pondNodeModulesDir: string;
}
export declare const SYSTEM_RO_PATHS: string[];
export declare function resolveFsIsolationMode(value: string | undefined | null): CapsuleFsIsolationMode;
export declare function bwrapAvailable(): boolean;
export declare function buildBwrapArgv(c: CapsuleFsConfinement): string[];
//# sourceMappingURL=capsule-fs-sandbox.d.ts.map