/**
 * ASI-05 (OWASP Agentic Top 10) — Unsafe Code Execution: shell-sandbox policy.
 *
 * Microsoft AGT parity for the code-execution gap. The runtime can BLOCK or ALLOW
 * a shell call, but a *permitted* command still runs with full process authority.
 * This is the sandbox-POLICY decision layer the runtime enforces before handing a
 * command to its OS sandbox: confine to an allowlist, deny network egress,
 * privilege escalation, filesystem escapes, and shell-injection chaining (which
 * otherwise defeats the allowlist).
 *
 * Scope: this decides what is permitted. OS-PRIMITIVE isolation (namespaces,
 * seccomp, cgroups, a container/firejail/bubblewrap jail) is the runtime's job —
 * this policy is what it should allow INTO that jail. Pure compute; never throws.
 *
 * @connexum/ai-governance
 */
export interface SandboxPolicy {
    /** Allowlist of permitted binaries (basename). If set, anything else is denied. */
    allowedBinaries?: string[];
    /** Explicit denylist (always denied even if on the allowlist). */
    blockedBinaries?: string[];
    /** Permit network commands (curl/wget/nc/...). Default false. */
    allowNetwork?: boolean;
    /** Permit privilege escalation (sudo/su/setuid). Default false. */
    allowPrivilegeEscalation?: boolean;
    /** Absolute-path prefixes the command may touch. If set, paths outside are denied. */
    allowedPathPrefixes?: string[];
}
export interface SandboxVerdict {
    allowed: boolean;
    reason: string;
    violations: string[];
    /** The resolved binary basename, when parseable. */
    binary?: string;
}
/** Restrictive default: no allowlist (deny unknown binaries), no network, no priv-esc. */
export declare const DEFAULT_SANDBOX_POLICY: SandboxPolicy;
/**
 * Evaluate whether a permitted shell command is acceptable to run inside the
 * sandbox under `policy`. NEVER throws — bad input is denied with a reason.
 */
export declare function evaluateSandboxedCommand(command: string, policy?: SandboxPolicy): SandboxVerdict;
//# sourceMappingURL=shell-sandbox.d.ts.map