import { type ChildProcess } from 'child_process';
import { SandboxRunner, type SandboxOptions } from './runner.js';
/**
 * Linux sandbox using bubblewrap (bwrap).
 *
 * Mounts:
 *   - project root at /workspace (rw)
 *   - private /tmp (if privateTmp)
 *   - empty /home/agent (if emptyHome)
 *   - /usr, /bin, /lib, /lib64, /etc/resolv.conf read-only for basic operation
 *   - /dev minimal (null, zero, urandom)
 *   - /proc
 *
 * Does NOT mount parent directories or the real home.
 */
export declare class BubblewrapRunner extends SandboxRunner {
    readonly name = "bubblewrap";
    private available;
    isAvailable(): boolean;
    spawn(command: string, args: string[], options: SandboxOptions): ChildProcess;
}
//# sourceMappingURL=linux-bwrap.d.ts.map