import * as z from "zod/v4";
import { ClosedEnum } from "../types/enums.js";
import { Result as SafeParseResult } from "../types/fp.js";
import { SDKValidationError } from "./errors/sdkvalidationerror.js";
/**
 * auto: run immediately. manual: needs customer approval before running.
 */
export declare const OperationsPolicyRuleDecision: {
    readonly Auto: "auto";
    readonly Manual: "manual";
};
/**
 * auto: run immediately. manual: needs customer approval before running.
 */
export type OperationsPolicyRuleDecision = ClosedEnum<typeof OperationsPolicyRuleDecision>;
/**
 * For a wildcard pattern (`plugin/*` or `*`) only: the highest risk tier a WILDCARD ACCESS REQUEST against this pattern may cover. Null/absent means no wildcard grant above read-only is allowed for this pattern — write and destructive wildcards require an explicit rule setting this field. Ignored for exact `plugin/operation` rules (a named operation's risk is already its own declared tier) and for the auto/manual invoke decision itself.
 */
export declare const OperationsPolicyRuleMaxRisk: {
    readonly ReadOnly: "read-only";
    readonly Mutating: "mutating";
    readonly Destructive: "destructive";
};
/**
 * For a wildcard pattern (`plugin/*` or `*`) only: the highest risk tier a WILDCARD ACCESS REQUEST against this pattern may cover. Null/absent means no wildcard grant above read-only is allowed for this pattern — write and destructive wildcards require an explicit rule setting this field. Ignored for exact `plugin/operation` rules (a named operation's risk is already its own declared tier) and for the auto/manual invoke decision itself.
 */
export type OperationsPolicyRuleMaxRisk = ClosedEnum<typeof OperationsPolicyRuleMaxRisk>;
export type OperationsPolicyRule = {
    /**
     * `plugin/operation`, `plugin/*`, or `*`.
     */
    pattern: string;
    /**
     * auto: run immediately. manual: needs customer approval before running.
     */
    decision: OperationsPolicyRuleDecision;
    /**
     * For a wildcard pattern (`plugin/*` or `*`) only: the highest risk tier a WILDCARD ACCESS REQUEST against this pattern may cover. Null/absent means no wildcard grant above read-only is allowed for this pattern — write and destructive wildcards require an explicit rule setting this field. Ignored for exact `plugin/operation` rules (a named operation's risk is already its own declared tier) and for the auto/manual invoke decision itself.
     */
    maxRisk?: OperationsPolicyRuleMaxRisk | null | undefined;
};
/** @internal */
export declare const OperationsPolicyRuleDecision$inboundSchema: z.ZodEnum<typeof OperationsPolicyRuleDecision>;
/** @internal */
export declare const OperationsPolicyRuleDecision$outboundSchema: z.ZodEnum<typeof OperationsPolicyRuleDecision>;
/** @internal */
export declare const OperationsPolicyRuleMaxRisk$inboundSchema: z.ZodEnum<typeof OperationsPolicyRuleMaxRisk>;
/** @internal */
export declare const OperationsPolicyRuleMaxRisk$outboundSchema: z.ZodEnum<typeof OperationsPolicyRuleMaxRisk>;
/** @internal */
export declare const OperationsPolicyRule$inboundSchema: z.ZodType<OperationsPolicyRule, unknown>;
/** @internal */
export type OperationsPolicyRule$Outbound = {
    pattern: string;
    decision: string;
    maxRisk?: string | null | undefined;
};
/** @internal */
export declare const OperationsPolicyRule$outboundSchema: z.ZodType<OperationsPolicyRule$Outbound, OperationsPolicyRule>;
export declare function operationsPolicyRuleToJSON(operationsPolicyRule: OperationsPolicyRule): string;
export declare function operationsPolicyRuleFromJSON(jsonString: string): SafeParseResult<OperationsPolicyRule, SDKValidationError>;
//# sourceMappingURL=operationspolicyrule.d.ts.map