import { AgentSandboxEnabledValue } from "@codingame/monaco-vscode-api/vscode/vs/platform/sandbox/common/settings";
/**
 * Top-level keys the agent host's root config bag exposes for sandboxing.
 * All sandbox-related values live nested under {@link AgentHostSandboxConfigKey.Sandbox}
 * — the persisted JSON has a single `"sandbox": { ... }` object rather than a
 * dozen flat keys.
 */
export declare enum AgentHostSandboxConfigKey {
    Sandbox = "sandbox"
}
/**
 * Well-known sub-keys inside the agent host's `sandbox` object. These are
 * intentionally a flat, prefix-free namespace owned by the agent host —
 * distinct from the workbench's `chat.agent.sandbox.*` setting IDs. Hosts
 * (today: the workbench client) translate from their setting IDs to these
 * keys when forwarding values via a `RootConfigChanged` action.
 */
export declare enum AgentHostSandboxKey {
    Enabled = "enabled",
    WindowsEnabled = "enabled.windows",
    AllowNetwork = "allowNetwork",
    AllowUnsandboxedCommands = "allowUnsandboxedCommands",
    LinuxFileSystem = "fileSystem.linux",
    MacFileSystem = "fileSystem.mac",
    WindowsFileSystem = "fileSystem.windows",
    AdvancedRuntime = "advanced.runtime",
    AllowedNetworkDomains = "allowedNetworkDomains",
    DeniedNetworkDomains = "deniedNetworkDomains"
}
/** Shape of the persisted/forwarded `sandbox` object. */
export type ISandboxConfigValue = Partial<{
    [AgentHostSandboxKey.Enabled]: AgentSandboxEnabledValue;
    [AgentHostSandboxKey.WindowsEnabled]: AgentSandboxEnabledValue;
    [AgentHostSandboxKey.AllowNetwork]: boolean;
    [AgentHostSandboxKey.AllowUnsandboxedCommands]: boolean;
    [AgentHostSandboxKey.LinuxFileSystem]: Record<string, unknown>;
    [AgentHostSandboxKey.MacFileSystem]: Record<string, unknown>;
    [AgentHostSandboxKey.WindowsFileSystem]: Record<string, unknown>;
    [AgentHostSandboxKey.AdvancedRuntime]: Record<string, unknown>;
    [AgentHostSandboxKey.AllowedNetworkDomains]: string[];
    [AgentHostSandboxKey.DeniedNetworkDomains]: string[];
}>;
/**
 * Schema for the subset of workbench sandbox settings that hosts (today: the
 * workbench client) may forward into the agent host's root config bag.
 *
 * The agent host's terminal sandbox engine reads these values through
 * {@link IAgentConfigurationService.getRootValue}. Only the modern,
 * normalized form of each setting is declared here — the workbench is
 * expected to:
 *
 *  - map legacy boolean sandbox enabled values to the `'on' | 'off' | 'allowNetwork'`
 *    agent-host enum, and
 *  - migrate values from any deprecated setting IDs to their modern key
 *
 * before pushing a `RootConfigChanged` action. That keeps the agent-host
 * schema (and validation) free of backward-compat baggage.
 */
export declare const sandboxConfigSchema: import("./agentHostSchema.js").ISchema<{
    sandbox: import("./agentHostSchema.js").ISchemaProperty<Partial<{
        enabled: AgentSandboxEnabledValue;
        "enabled.windows": AgentSandboxEnabledValue;
        allowNetwork: boolean;
        allowUnsandboxedCommands: boolean;
        "fileSystem.linux": Record<string, unknown>;
        "fileSystem.mac": Record<string, unknown>;
        "fileSystem.windows": Record<string, unknown>;
        "advanced.runtime": Record<string, unknown>;
        allowedNetworkDomains: string[];
        deniedNetworkDomains: string[];
    }>>;
}>;
/**
 * Maps modern workbench sandbox setting IDs (the ones the engine asks about)
 * to the sub-keys inside the agent host's `sandbox` config object.
 *
 * Deprecated setting IDs are intentionally absent: hosts forwarding values
 * into the agent host are expected to migrate deprecated → modern IDs
 * before dispatching `RootConfigChanged`.
 */
export declare const sandboxSettingIdToAgentHostKey: Readonly<Record<string, AgentHostSandboxKey>>;