import { z } from 'zod';
import { Audit } from './audit.js';
import { createHandoffStore, createSessionStore } from './console-handoff.js';
export declare const DEFAULT_CONSOLE_HOST = "127.0.0.1";
declare const ConsolePolicyPatchSchema: z.ZodObject<{
    maxRows: z.ZodOptional<z.ZodNumber>;
    allowTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
    denyTools: z.ZodOptional<z.ZodArray<z.ZodString>>;
    allowTables: z.ZodOptional<z.ZodArray<z.ZodString>>;
    denyTables: z.ZodOptional<z.ZodArray<z.ZodString>>;
    maskColumns: z.ZodOptional<z.ZodArray<z.ZodString>>;
    piiMasking: z.ZodOptional<z.ZodBoolean>;
}, z.core.$strict>;
export type ConsolePolicyPatch = z.infer<typeof ConsolePolicyPatchSchema>;
export declare function validateConsoleConfig(input: unknown): ConsolePolicyPatch;
/**
 * Overlay only the governance fields the console edits. connectors, audit,
 * profiles and actorProfiles stay as they were — dropping them would be a
 * silent policy downgrade.
 */
export declare function mergeConsolePolicyPatch(existing: Record<string, unknown>, patch: ConsolePolicyPatch): Record<string, unknown>;
/** Same-directory temp + rename: a crash mid-write cannot leave a half config. */
export declare function writeConfigAtomic(configFile: string, contents: string): void;
export declare function redactSecretFields(value: unknown): unknown;
export declare function createPlaygroundAudit(auditFile: string): Audit;
export declare function createConsoleApp(opts?: {
    configFile?: string;
    auditFile?: string;
    handoff?: ReturnType<typeof createHandoffStore>;
    sessions?: ReturnType<typeof createSessionStore>;
    onPresence?: () => void;
}): import("express-serve-static-core").Express;
export declare function startConsole(port?: number, host?: string): void;
export {};
//# sourceMappingURL=console.d.ts.map