@h-rig/isolation-plugin 0.0.6-alpha.156 → 0.0.6-alpha.158

package/dist/src/sandbox/orchestrator.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Sandbox orchestrator — thin public API for wrapWithRuntimeSandbox().
+ *
+ * Delegates to resolveBackend() for backend selection and the backend's
+ * wrap() method for command transformation. The orchestrator itself contains
+ * only the shouldSandboxRuntime gate and the check-ordering logic.
+ */
+import { type RuntimeDescriptor, type RuntimeSandboxPlan } from "./backend";
+/**
+ * Wrap a command with the appropriate runtime sandbox.
+ *
+ * Check ordering:
+ * 1. resolveBackend first (handles mode=off, returns NoSandboxBackend)
+ * 2. When backend.kind === "none", skip shouldSandboxRuntime entirely
+ * 3. Otherwise, check shouldSandboxRuntime before delegating to backend.wrap()
+ */
+export declare function wrapWithRuntimeSandbox(options: {
+    projectRoot: string;
+    runtime: RuntimeDescriptor;
+    command: string[];
+}): Promise<RuntimeSandboxPlan>;