import { z } from 'zod';
import type { ConariumConfig } from './types.js';
export declare const GovernancePolicySchema: z.ZodObject<{
    allowTables: z.ZodOptional<z.ZodArray<z.ZodString>>;
    denyTables: z.ZodOptional<z.ZodArray<z.ZodString>>;
    maskColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
    protectedColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
    maxRows: z.ZodOptional<z.ZodNumber>;
    dialect: z.ZodOptional<z.ZodEnum<{
        mssql: "mssql";
        oracle: "oracle";
        postgres: "postgres";
    }>>;
    maskLabelledNames: z.ZodOptional<z.ZodBoolean>;
    allowTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
    denyTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
    allowConnectors: z.ZodOptional<z.ZodArray<z.ZodString>>;
    denyConnectors: z.ZodOptional<z.ZodArray<z.ZodString>>;
    profiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
        maskColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
        maxRows: z.ZodOptional<z.ZodNumber>;
        maskLabelledNames: z.ZodOptional<z.ZodBoolean>;
    }, z.core.$strict>>>;
    actorProfiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
    scanCharCap: z.ZodOptional<z.ZodNumber>;
    detectors: z.ZodOptional<z.ZodObject<{
        ip: z.ZodOptional<z.ZodBoolean>;
        mrz: z.ZodOptional<z.ZodBoolean>;
    }, z.core.$strict>>;
    customPatterns: z.ZodOptional<z.ZodArray<z.ZodObject<{
        name: z.ZodString;
        pattern: z.ZodString;
        columns: z.ZodOptional<z.ZodArray<z.ZodString>>;
        label: z.ZodOptional<z.ZodString>;
        sample: z.ZodOptional<z.ZodString>;
    }, z.core.$strict>>>;
}, z.core.$strict>;
export declare const AuditConfigSchema: z.ZodObject<{
    sink: z.ZodOptional<z.ZodString>;
    failClosed: z.ZodOptional<z.ZodBoolean>;
    receiptSink: z.ZodOptional<z.ZodString>;
    receiptModel: z.ZodOptional<z.ZodObject<{
        provider: z.ZodString;
        name: z.ZodString;
        version: z.ZodString;
    }, z.core.$strip>>;
    receiptClient: z.ZodOptional<z.ZodObject<{
        name: z.ZodString;
        version: z.ZodString;
    }, z.core.$strip>>;
    receiptDestination: z.ZodOptional<z.ZodString>;
}, z.core.$strict>;
export declare const ConnectorConfigSchema: z.ZodObject<{
    type: z.ZodEnum<{
        "custom-sql": "custom-sql";
        docs: "docs";
        files: "files";
        jira: "jira";
        openapi: "openapi";
        postgres: "postgres";
        slack: "slack";
        supabase: "supabase";
        "supabase-rest": "supabase-rest";
    }>;
    name: z.ZodString;
    description: z.ZodString;
    config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
}, z.core.$strict>;
export declare const ConariumConfigSchema: z.ZodObject<{
    connectors: z.ZodArray<z.ZodObject<{
        type: z.ZodEnum<{
            "custom-sql": "custom-sql";
            docs: "docs";
            files: "files";
            jira: "jira";
            openapi: "openapi";
            postgres: "postgres";
            slack: "slack";
            supabase: "supabase";
            "supabase-rest": "supabase-rest";
        }>;
        name: z.ZodString;
        description: z.ZodString;
        config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
    }, z.core.$strict>>;
    serverName: z.ZodOptional<z.ZodString>;
    serverVersion: z.ZodOptional<z.ZodString>;
    consumer: z.ZodOptional<z.ZodString>;
    policy: z.ZodOptional<z.ZodObject<{
        allowTables: z.ZodOptional<z.ZodArray<z.ZodString>>;
        denyTables: z.ZodOptional<z.ZodArray<z.ZodString>>;
        maskColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
        protectedColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
        maxRows: z.ZodOptional<z.ZodNumber>;
        dialect: z.ZodOptional<z.ZodEnum<{
            mssql: "mssql";
            oracle: "oracle";
            postgres: "postgres";
        }>>;
        maskLabelledNames: z.ZodOptional<z.ZodBoolean>;
        allowTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
        denyTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
        allowConnectors: z.ZodOptional<z.ZodArray<z.ZodString>>;
        denyConnectors: z.ZodOptional<z.ZodArray<z.ZodString>>;
        profiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
            maskColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
            maxRows: z.ZodOptional<z.ZodNumber>;
            maskLabelledNames: z.ZodOptional<z.ZodBoolean>;
        }, z.core.$strict>>>;
        actorProfiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        scanCharCap: z.ZodOptional<z.ZodNumber>;
        detectors: z.ZodOptional<z.ZodObject<{
            ip: z.ZodOptional<z.ZodBoolean>;
            mrz: z.ZodOptional<z.ZodBoolean>;
        }, z.core.$strict>>;
        customPatterns: z.ZodOptional<z.ZodArray<z.ZodObject<{
            name: z.ZodString;
            pattern: z.ZodString;
            columns: z.ZodOptional<z.ZodArray<z.ZodString>>;
            label: z.ZodOptional<z.ZodString>;
            sample: z.ZodOptional<z.ZodString>;
        }, z.core.$strict>>>;
    }, z.core.$strict>>;
    audit: z.ZodOptional<z.ZodObject<{
        sink: z.ZodOptional<z.ZodString>;
        failClosed: z.ZodOptional<z.ZodBoolean>;
        receiptSink: z.ZodOptional<z.ZodString>;
        receiptModel: z.ZodOptional<z.ZodObject<{
            provider: z.ZodString;
            name: z.ZodString;
            version: z.ZodString;
        }, z.core.$strip>>;
        receiptClient: z.ZodOptional<z.ZodObject<{
            name: z.ZodString;
            version: z.ZodString;
        }, z.core.$strip>>;
        receiptDestination: z.ZodOptional<z.ZodString>;
    }, z.core.$strict>>;
    profile: z.ZodOptional<z.ZodLiteral<"production">>;
}, z.core.$strict>;
export declare function isProductionProfile(cfg?: {
    profile?: string;
} | null): boolean;
/** Fail-closed production proof profile. Missing keys refuse boot. */
export declare function enforceProductionProfile(cfg?: {
    profile?: string;
} | null): void;
/** Default 0 (unchanged). Production profile: 60 unless explicitly 0. */
export declare function resolveHttpRatePerMin(cfg?: {
    profile?: string;
} | null): number;
/** `type: "demo"` is started with `--demo`, not a config file. */
export declare function rejectFileDemoConnector(raw: unknown): void;
export declare function parseConariumConfig(raw: unknown): ConariumConfig;
/**
 * A plugged-in executor is an unknown engine. Applying the omitted-dialect
 * postgres default would parse that engine with the Postgres gate — a silent
 * hole. custom-sql therefore requires an explicit policy.dialect.
 */
export declare function assertCustomSqlDialect(cfg: ConariumConfig): void;
//# sourceMappingURL=config.d.ts.map