@inhuman.tools/policy 0.0.0-stage → 0.1.0

package/dist/reasonable-defaults.d.ts

@@ -0,0 +1,1448 @@
+/** Dist floor. Sole home is `reasonable-defaults.json`. The string is the session file body. */
+export declare const reasonableDefaults: {
+    read_file: string[];
+    read_block: string[];
+    write_file: (string | {
+        path: string;
+        class: string;
+    })[];
+    write_block: (string | {
+        path: string;
+        class: string;
+    })[];
+    ".unix_read": {
+        policy: string;
+        arg_rest_type: string;
+    };
+    ".unix_write": {
+        policy: string;
+        arg_rest_type: string;
+    };
+    ".pkg_install": {
+        policy: string;
+        subcommands: {
+            install: string;
+        };
+    };
+    ".docker_run": {
+        policy: string;
+        matcher: ({
+            flags: {
+                "--privileged": boolean;
+                "--pid"?: undefined;
+                "--network"?: undefined;
+                "--volume"?: undefined;
+                "--mount"?: undefined;
+            };
+            policy: string;
+            class: string;
+        } | {
+            flags: {
+                "--pid": {
+                    value: string;
+                };
+                "--privileged"?: undefined;
+                "--network"?: undefined;
+                "--volume"?: undefined;
+                "--mount"?: undefined;
+            };
+            policy: string;
+            class: string;
+        } | {
+            flags: {
+                "--network": {
+                    alias: string[];
+                    value: string;
+                };
+                "--privileged"?: undefined;
+                "--pid"?: undefined;
+                "--volume"?: undefined;
+                "--mount"?: undefined;
+            };
+            policy: string;
+            class: string;
+        } | {
+            flags: {
+                "--volume": {
+                    alias: string[];
+                    value: string[];
+                };
+                "--privileged"?: undefined;
+                "--pid"?: undefined;
+                "--network"?: undefined;
+                "--mount"?: undefined;
+            };
+            policy: string;
+            class: string;
+        } | {
+            flags: {
+                "--mount": {
+                    value: string;
+                };
+                "--privileged"?: undefined;
+                "--pid"?: undefined;
+                "--network"?: undefined;
+                "--volume"?: undefined;
+            };
+            policy: string;
+            class: string;
+        })[];
+    };
+    bash: {
+        policy: string;
+        class: string;
+        subcommands: {
+            sudo: {
+                policy: string;
+                class: string;
+            };
+            doas: {
+                policy: string;
+                class: string;
+            };
+            dd: {
+                policy: string;
+                class: string;
+                guard: string[];
+            };
+            eval: string;
+            mkfs: {
+                policy: string;
+                class: string;
+            };
+            "mkfs.ext4": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.xfs": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.vfat": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.ntfs": {
+                policy: string;
+                class: string;
+            };
+            fdisk: {
+                policy: string;
+                class: string;
+                guard: string[];
+            };
+            parted: {
+                policy: string;
+                class: string;
+                guard: string[];
+            };
+            shred: {
+                policy: string;
+                class: string;
+            };
+            wipefs: {
+                policy: string;
+                class: string;
+            };
+            shutdown: {
+                policy: string;
+                class: string;
+            };
+            reboot: {
+                policy: string;
+                class: string;
+            };
+            halt: {
+                policy: string;
+                class: string;
+            };
+            poweroff: {
+                policy: string;
+                class: string;
+            };
+            rm: {
+                policy: string;
+                class: string;
+                arg_rest_type: string;
+                matcher: {
+                    flags: {
+                        "--recursive": {
+                            alias: string[];
+                        };
+                        "--force": {
+                            alias: string[];
+                        };
+                    };
+                    matcher: ({
+                        glob: string;
+                        policy: string;
+                        tok?: undefined;
+                    } | {
+                        tok: string;
+                        policy: string;
+                        glob?: undefined;
+                    })[];
+                }[];
+                guard: string[];
+            };
+            chmod: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    "777": {
+                        policy: string;
+                        class: string;
+                    };
+                    "0777": {
+                        policy: string;
+                        class: string;
+                    };
+                    "a+rwx": {
+                        policy: string;
+                        class: string;
+                    };
+                    "a=rwx": {
+                        policy: string;
+                        class: string;
+                    };
+                };
+                matcher: {
+                    flags: {
+                        "--recursive": {
+                            alias: string[];
+                        };
+                    };
+                    policy: string;
+                }[];
+                guard: string[];
+            };
+            chown: {
+                policy: string;
+                class: string;
+                matcher: {
+                    flags: {
+                        "--recursive": {
+                            alias: string[];
+                        };
+                    };
+                    policy: string;
+                }[];
+                guard: string[];
+            };
+            git: {
+                policy: string;
+                class: string;
+                matcher: ({
+                    flags: {
+                        "-c": {
+                            value_type: string;
+                        };
+                        "--config-env"?: undefined;
+                        "-C"?: undefined;
+                        "--git-dir"?: undefined;
+                        "--work-tree"?: undefined;
+                    };
+                    policy?: undefined;
+                    class?: undefined;
+                } | {
+                    flags: {
+                        "--config-env": boolean;
+                        "-c"?: undefined;
+                        "-C"?: undefined;
+                        "--git-dir"?: undefined;
+                        "--work-tree"?: undefined;
+                    };
+                    policy: string;
+                    class: string;
+                } | {
+                    flags: {
+                        "-C": {
+                            value_type: string;
+                        };
+                        "-c"?: undefined;
+                        "--config-env"?: undefined;
+                        "--git-dir"?: undefined;
+                        "--work-tree"?: undefined;
+                    };
+                    policy: string;
+                    class?: undefined;
+                } | {
+                    flags: {
+                        "--git-dir": {
+                            value_type: string;
+                        };
+                        "-c"?: undefined;
+                        "--config-env"?: undefined;
+                        "-C"?: undefined;
+                        "--work-tree"?: undefined;
+                    };
+                    policy: string;
+                    class?: undefined;
+                } | {
+                    flags: {
+                        "--work-tree": {
+                            value_type: string;
+                        };
+                        "-c"?: undefined;
+                        "--config-env"?: undefined;
+                        "-C"?: undefined;
+                        "--git-dir"?: undefined;
+                    };
+                    policy: string;
+                    class?: undefined;
+                })[];
+                subcommands: {
+                    status: string;
+                    diff: {
+                        policy: string;
+                        guard: string[];
+                        flag_paths: {
+                            "--output": string;
+                        };
+                        matcher: ({
+                            flags: {
+                                "--output": {
+                                    abbrev: boolean;
+                                };
+                                "--no-index"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--no-index": {
+                                    abbrev: boolean;
+                                };
+                                "--output"?: undefined;
+                            };
+                            policy?: undefined;
+                            class?: undefined;
+                        })[];
+                    };
+                    log: {
+                        policy: string;
+                        guard: string[];
+                        flag_paths: {
+                            "--output": string;
+                        };
+                    };
+                    show: {
+                        policy: string;
+                        guard: string[];
+                        flag_paths: {
+                            "--output": string;
+                        };
+                    };
+                    "rev-parse": string;
+                    branch: {
+                        policy: string;
+                        matcher: ({
+                            flags: {
+                                "-D": boolean;
+                                "--delete"?: undefined;
+                                "--force"?: undefined;
+                                "-M"?: undefined;
+                                "-C"?: undefined;
+                                "--move"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--delete": {
+                                    alias: string[];
+                                    abbrev: boolean;
+                                };
+                                "--force": {
+                                    alias: string[];
+                                    abbrev: boolean;
+                                };
+                                "-D"?: undefined;
+                                "-M"?: undefined;
+                                "-C"?: undefined;
+                                "--move"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "-M": boolean;
+                                "-D"?: undefined;
+                                "--delete"?: undefined;
+                                "--force"?: undefined;
+                                "-C"?: undefined;
+                                "--move"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "-C": boolean;
+                                "-D"?: undefined;
+                                "--delete"?: undefined;
+                                "--force"?: undefined;
+                                "-M"?: undefined;
+                                "--move"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--force": {
+                                    alias: string[];
+                                    abbrev: boolean;
+                                };
+                                "-D"?: undefined;
+                                "--delete"?: undefined;
+                                "-M"?: undefined;
+                                "-C"?: undefined;
+                                "--move"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--move": {
+                                    alias: string[];
+                                    abbrev: boolean;
+                                };
+                                "--force": {
+                                    alias: string[];
+                                    abbrev: boolean;
+                                };
+                                "-D"?: undefined;
+                                "--delete"?: undefined;
+                                "-M"?: undefined;
+                                "-C"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        })[];
+                    };
+                    add: {
+                        policy: string;
+                        matcher: {
+                            flags: {
+                                "--force": {
+                                    alias: string[];
+                                    abbrev: boolean;
+                                };
+                            };
+                            policy: string;
+                            class: string;
+                        }[];
+                    };
+                    commit: {
+                        policy: string;
+                        matcher: {
+                            flags: {
+                                "--no-verify": {
+                                    alias: string[];
+                                    abbrev: boolean;
+                                };
+                            };
+                            policy: string;
+                            class: string;
+                        }[];
+                        flag_paths: {
+                            "--file": string;
+                            "-F": string;
+                            "--template": string;
+                            "-t": string;
+                        };
+                    };
+                    stash: {
+                        policy: string;
+                        subcommands: {
+                            drop: {
+                                policy: string;
+                                class: string;
+                            };
+                            clear: {
+                                policy: string;
+                                class: string;
+                            };
+                        };
+                    };
+                    fetch: {
+                        policy: string;
+                        matcher: ({
+                            flags: {
+                                "--upload-pack": {
+                                    abbrev: boolean;
+                                };
+                                "--receive-pack"?: undefined;
+                                "--exec"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--receive-pack": {
+                                    abbrev: boolean;
+                                };
+                                "--upload-pack"?: undefined;
+                                "--exec"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--exec": {
+                                    abbrev: boolean;
+                                };
+                                "--upload-pack"?: undefined;
+                                "--receive-pack"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "-u": boolean;
+                                "--upload-pack"?: undefined;
+                                "--receive-pack"?: undefined;
+                                "--exec"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            glob: string[];
+                            policy: string;
+                            class: string;
+                            flags?: undefined;
+                        })[];
+                    };
+                    pull: {
+                        policy: string;
+                        class: string;
+                        matcher: ({
+                            flags: {
+                                "--upload-pack": {
+                                    abbrev: boolean;
+                                };
+                                "--receive-pack"?: undefined;
+                                "--exec"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--receive-pack": {
+                                    abbrev: boolean;
+                                };
+                                "--upload-pack"?: undefined;
+                                "--exec"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--exec": {
+                                    abbrev: boolean;
+                                };
+                                "--upload-pack"?: undefined;
+                                "--receive-pack"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "-u": boolean;
+                                "--upload-pack"?: undefined;
+                                "--receive-pack"?: undefined;
+                                "--exec"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            glob: string[];
+                            policy: string;
+                            class: string;
+                            flags?: undefined;
+                        })[];
+                    };
+                    checkout: {
+                        policy: string;
+                        class: string;
+                        "--": {
+                            policy: string;
+                            arg_rest_type: string;
+                        };
+                    };
+                    push: {
+                        policy: string;
+                        class: string;
+                        matcher: ({
+                            flags: {
+                                "--force": {
+                                    alias: string[];
+                                    abbrev: boolean;
+                                };
+                                "--force-with-lease"?: undefined;
+                                "--no-verify"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--force-with-lease": {
+                                    abbrev: boolean;
+                                };
+                                "--force"?: undefined;
+                                "--no-verify"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--no-verify": {
+                                    abbrev: boolean;
+                                };
+                                "--force"?: undefined;
+                                "--force-with-lease"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        })[];
+                    };
+                    reset: {
+                        policy: string;
+                        class: string;
+                        matcher: {
+                            flags: {
+                                "--hard": {
+                                    abbrev: boolean;
+                                };
+                            };
+                            policy: string;
+                            class: string;
+                        }[];
+                    };
+                    clean: {
+                        policy: string;
+                        class: string;
+                        matcher: {
+                            flags: {
+                                "-f": boolean;
+                                "-d": {
+                                    alias: string[];
+                                };
+                            };
+                            policy: string;
+                        }[];
+                    };
+                    "format-patch": {
+                        policy: string;
+                        class: string;
+                        flag_paths: {
+                            "--output": string;
+                            "-o": string;
+                        };
+                    };
+                    clone: {
+                        policy: string;
+                        class: string;
+                        matcher: ({
+                            flags: {
+                                "--upload-pack": {
+                                    abbrev: boolean;
+                                };
+                                "--receive-pack"?: undefined;
+                                "--exec"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--receive-pack": {
+                                    abbrev: boolean;
+                                };
+                                "--upload-pack"?: undefined;
+                                "--exec"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--exec": {
+                                    abbrev: boolean;
+                                };
+                                "--upload-pack"?: undefined;
+                                "--receive-pack"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "-u": boolean;
+                                "--upload-pack"?: undefined;
+                                "--receive-pack"?: undefined;
+                                "--exec"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            glob: string[];
+                            policy: string;
+                            class: string;
+                            flags?: undefined;
+                        })[];
+                    };
+                    "ls-remote": {
+                        policy: string;
+                        class: string;
+                        matcher: ({
+                            flags: {
+                                "--upload-pack": {
+                                    abbrev: boolean;
+                                };
+                                "--receive-pack"?: undefined;
+                                "--exec"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--receive-pack": {
+                                    abbrev: boolean;
+                                };
+                                "--upload-pack"?: undefined;
+                                "--exec"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--exec": {
+                                    abbrev: boolean;
+                                };
+                                "--upload-pack"?: undefined;
+                                "--receive-pack"?: undefined;
+                                "-u"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "-u": boolean;
+                                "--upload-pack"?: undefined;
+                                "--receive-pack"?: undefined;
+                                "--exec"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            glob: string[];
+                            policy: string;
+                            class: string;
+                            flags?: undefined;
+                        })[];
+                    };
+                };
+                guard: string[];
+            };
+            gh: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    issue: {
+                        policy: string;
+                        class: string;
+                        subcommands: {
+                            list: string;
+                            view: string;
+                            status: string;
+                            delete: string;
+                        };
+                    };
+                    pr: {
+                        policy: string;
+                        class: string;
+                        subcommands: {
+                            list: string;
+                            view: string;
+                            diff: string;
+                            status: string;
+                            checks: string;
+                            merge: string;
+                            create: string;
+                        };
+                    };
+                    run: {
+                        policy: string;
+                        class: string;
+                        subcommands: {
+                            list: string;
+                            view: string;
+                            delete: string;
+                        };
+                    };
+                    search: string;
+                    label: {
+                        policy: string;
+                        class: string;
+                        subcommands: {
+                            list: string;
+                        };
+                    };
+                    release: {
+                        policy: string;
+                        class: string;
+                        subcommands: {
+                            list: string;
+                            view: string;
+                            delete: string;
+                        };
+                    };
+                    secret: {
+                        policy: string;
+                        class: string;
+                    };
+                    auth: {
+                        policy: string;
+                        class: string;
+                    };
+                    gist: {
+                        policy: string;
+                        class: string;
+                    };
+                    repo: {
+                        policy: string;
+                        class: string;
+                        subcommands: {
+                            delete: string;
+                            archive: string;
+                        };
+                    };
+                };
+            };
+            npm: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    run: {
+                        policy: string;
+                        family_args: number;
+                        class: string;
+                    };
+                    install: {
+                        policy: string;
+                        class: string;
+                        matcher: {
+                            flags: {
+                                "--global": {
+                                    alias: string[];
+                                };
+                            };
+                            policy: string;
+                        }[];
+                    };
+                    publish: {
+                        policy: string;
+                        class: string;
+                    };
+                    test: {
+                        policy: string;
+                        class: string;
+                    };
+                    exec: {
+                        policy: string;
+                        class: string;
+                    };
+                    start: {
+                        policy: string;
+                        class: string;
+                    };
+                };
+            };
+            cargo: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    test: {
+                        policy: string;
+                        class: string;
+                    };
+                    run: {
+                        policy: string;
+                        class: string;
+                    };
+                    bench: {
+                        policy: string;
+                        class: string;
+                    };
+                    build: {
+                        policy: string;
+                        class: string;
+                    };
+                    check: {
+                        policy: string;
+                        class: string;
+                    };
+                    clippy: {
+                        policy: string;
+                        class: string;
+                    };
+                    publish: {
+                        policy: string;
+                        class: string;
+                    };
+                };
+            };
+            kubectl: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    get: {
+                        policy: string;
+                        flag_paths: {
+                            "--filename": string;
+                            "-f": string;
+                        };
+                        matcher: ({
+                            glob: string;
+                            policy: string;
+                            class: string;
+                            flags?: undefined;
+                        } | {
+                            flags: {
+                                "--raw": {
+                                    value_type: string;
+                                    value?: undefined;
+                                };
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--raw": {
+                                    value: string;
+                                    value_type?: undefined;
+                                };
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        })[];
+                    };
+                    describe: {
+                        policy: string;
+                        flag_paths: {
+                            "--filename": string;
+                            "-f": string;
+                        };
+                        matcher: ({
+                            glob: string;
+                            policy: string;
+                            class: string;
+                            flags?: undefined;
+                        } | {
+                            flags: {
+                                "--raw": {
+                                    value_type: string;
+                                    value?: undefined;
+                                };
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        } | {
+                            flags: {
+                                "--raw": {
+                                    value: string;
+                                    value_type?: undefined;
+                                };
+                            };
+                            policy: string;
+                            class: string;
+                            glob?: undefined;
+                        })[];
+                    };
+                    logs: string;
+                    exec: string;
+                };
+            };
+            docker: {
+                policy: string;
+                class: string;
+                matcher: ({
+                    flags: {
+                        "--host": {
+                            alias: string[];
+                        };
+                        "--version"?: undefined;
+                    };
+                    policy: string;
+                    class: string;
+                } | {
+                    flags: {
+                        "--version": {
+                            alias: string[];
+                        };
+                        "--host"?: undefined;
+                    };
+                    policy: string;
+                    class?: undefined;
+                })[];
+                subcommands: {
+                    ps: string;
+                    logs: string;
+                    inspect: string;
+                    images: string;
+                    run: {
+                        policy: string;
+                        class: string;
+                        matcher: ({
+                            flags: {
+                                "--privileged": boolean;
+                                "--pid"?: undefined;
+                                "--network"?: undefined;
+                                "--volume"?: undefined;
+                                "--mount"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--pid": {
+                                    value: string;
+                                };
+                                "--privileged"?: undefined;
+                                "--network"?: undefined;
+                                "--volume"?: undefined;
+                                "--mount"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--network": {
+                                    alias: string[];
+                                    value: string;
+                                };
+                                "--privileged"?: undefined;
+                                "--pid"?: undefined;
+                                "--volume"?: undefined;
+                                "--mount"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--volume": {
+                                    alias: string[];
+                                    value: string[];
+                                };
+                                "--privileged"?: undefined;
+                                "--pid"?: undefined;
+                                "--network"?: undefined;
+                                "--mount"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--mount": {
+                                    value: string;
+                                };
+                                "--privileged"?: undefined;
+                                "--pid"?: undefined;
+                                "--network"?: undefined;
+                                "--volume"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        })[];
+                    };
+                    exec: {
+                        policy: string;
+                        class: string;
+                    };
+                    compose: {
+                        policy: string;
+                        class: string;
+                        matcher: ({
+                            flags: {
+                                "--privileged": boolean;
+                                "--pid"?: undefined;
+                                "--network"?: undefined;
+                                "--volume"?: undefined;
+                                "--mount"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--pid": {
+                                    value: string;
+                                };
+                                "--privileged"?: undefined;
+                                "--network"?: undefined;
+                                "--volume"?: undefined;
+                                "--mount"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--network": {
+                                    alias: string[];
+                                    value: string;
+                                };
+                                "--privileged"?: undefined;
+                                "--pid"?: undefined;
+                                "--volume"?: undefined;
+                                "--mount"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--volume": {
+                                    alias: string[];
+                                    value: string[];
+                                };
+                                "--privileged"?: undefined;
+                                "--pid"?: undefined;
+                                "--network"?: undefined;
+                                "--mount"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        } | {
+                            flags: {
+                                "--mount": {
+                                    value: string;
+                                };
+                                "--privileged"?: undefined;
+                                "--pid"?: undefined;
+                                "--network"?: undefined;
+                                "--volume"?: undefined;
+                            };
+                            policy: string;
+                            class: string;
+                        })[];
+                    };
+                };
+            };
+            apt: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    install: string;
+                };
+            };
+            "apt-get": {
+                policy: string;
+                class: string;
+                subcommands: {
+                    install: string;
+                };
+            };
+            brew: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    install: string;
+                };
+            };
+            yum: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    install: string;
+                };
+            };
+            dnf: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    install: string;
+                };
+            };
+            pip: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    install: string;
+                };
+            };
+            pip3: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    install: string;
+                };
+            };
+            gem: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    install: string;
+                };
+            };
+            awk: string;
+            cat: {
+                policy: string;
+                arg_rest_type: string;
+            };
+            cut: {
+                policy: string;
+                arg_rest_type: string;
+            };
+            date: {
+                policy: string;
+                flag_paths: {
+                    "--file": string;
+                    "-f": string;
+                    "--reference": string;
+                    "-r": string;
+                };
+            };
+            diff: {
+                policy: string;
+                arg_rest_type: string;
+                flag_paths: {
+                    "--from-file": string;
+                    "--to-file": string;
+                    "-X": string;
+                    "--exclude-from": string;
+                };
+            };
+            echo: string;
+            false: string;
+            grep: {
+                policy: string;
+                arg_rest_type: string;
+                flag_paths: {
+                    "--file": string;
+                    "-f": string;
+                    "--exclude-from": string;
+                };
+            };
+            head: {
+                policy: string;
+                arg_rest_type: string;
+            };
+            ls: {
+                policy: string;
+                arg_rest_type: string;
+            };
+            mkdir: {
+                policy: string;
+                arg_rest_type: string;
+            };
+            printf: string;
+            pwd: string;
+            sed: {
+                policy: string;
+                guard: string[];
+                matcher: ({
+                    flags: {
+                        "--in-place": {
+                            alias: string[];
+                            abbrev: boolean;
+                        };
+                        "-e"?: undefined;
+                    };
+                    policy: string;
+                    class: string;
+                } | {
+                    flags: {
+                        "-e": {
+                            alias: string[];
+                            value_type: string;
+                        };
+                        "--in-place"?: undefined;
+                    };
+                    policy?: undefined;
+                    class?: undefined;
+                })[];
+            };
+            sort: {
+                policy: string;
+                arg_rest_type: string;
+                flag_paths: {
+                    "--output": string;
+                    "-o": string;
+                    "--files0-from": string;
+                    "--random-source": string;
+                };
+                matcher: ({
+                    flags: {
+                        "--output": {
+                            alias: string[];
+                            abbrev: boolean;
+                        };
+                        "--compress-program"?: undefined;
+                    };
+                    policy: string;
+                    class: string;
+                } | {
+                    flags: {
+                        "--compress-program": {
+                            abbrev: boolean;
+                        };
+                        "--output"?: undefined;
+                    };
+                    policy: string;
+                    class?: undefined;
+                })[];
+            };
+            stat: {
+                policy: string;
+                arg_rest_type: string;
+            };
+            tail: {
+                policy: string;
+                arg_rest_type: string;
+            };
+            tee: {
+                policy: string;
+                arg_rest_type: string;
+            };
+            test: string;
+            touch: {
+                policy: string;
+                arg_rest_type: string;
+                flag_paths: {
+                    "--reference": string;
+                    "-r": string;
+                };
+            };
+            tr: string;
+            true: string;
+            uniq: {
+                policy: string;
+                arg_types: string[];
+                arg_rest_type: string;
+            };
+            wc: {
+                policy: string;
+                arg_rest_type: string;
+                flag_paths: {
+                    "--files0-from": string;
+                };
+            };
+            which: string;
+            curl: {
+                policy: string;
+                class: string;
+            };
+            wget: {
+                policy: string;
+                class: string;
+            };
+            npx: string;
+            pnpm: {
+                policy: string;
+                family_args: number;
+            };
+            yarn: {
+                policy: string;
+                family_args: number;
+            };
+            make: {
+                policy: string;
+                family_args: number;
+            };
+            harness: {
+                policy: string;
+                class: string;
+                subcommands: {
+                    eval: {
+                        policy: string;
+                        matcher: {
+                            flags: {
+                                "--mode": {
+                                    value_type: string;
+                                };
+                            };
+                            policy: string;
+                            matcher: {
+                                flags: {
+                                    "--mode": {
+                                        value: string;
+                                    };
+                                };
+                                policy: string;
+                            }[];
+                        }[];
+                    };
+                };
+            };
+            "mkfs.ext2": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.ext3": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.btrfs": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.f2fs": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.exfat": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.fat": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.msdos": {
+                policy: string;
+                class: string;
+            };
+            "mkfs.minix": {
+                policy: string;
+                class: string;
+            };
+            mke2fs: {
+                policy: string;
+                class: string;
+            };
+            sfdisk: {
+                policy: string;
+                class: string;
+                guard: string[];
+            };
+        };
+    };
+};
+/** Text of {@link reasonableDefaults} for `policyProgram`. `bindPolicy` takes the object. */
+export declare const reasonableDefaultsSource: string;
+//# sourceMappingURL=reasonable-defaults.d.ts.map