/**
 * Closed, deterministic automatic-workflow catalog.
 *
 * The inbound text is used only as an exact selector.  No substring, token,
 * argument, or normalized user value reaches the returned descriptor.  This
 * makes the descriptor safe to place in a deterministic-deidentification
 * template; arbitrary natural language must use the owner-explicit
 * `/workflow save` route instead.
 */
export interface DeterministicallyDeidentifiedWorkflowTemplate {
    /** Stable reviewed catalog identity, not an owner-provided name. */
    readonly catalogId: string;
    readonly name: string;
    readonly prompt: string;
    readonly schedule: Readonly<{
        readonly kind: 'cron';
        readonly expression: string;
        readonly timezone: string;
    }>;
    readonly timeoutMs: number;
    readonly toolCatalogIds: readonly ['assistant.agent-turn'];
}
/**
 * Return a reviewed content-free descriptor only for an exact closed-set
 * phrase.  Deliberately do not trim, fold case, parse arguments, or extract
 * entities: those conveniences would turn unreviewed owner data into a
 * purported deidentification proof.
 */
export declare function deriveDeterministicallyDeidentifiedWorkflowTemplate(text: string): Readonly<DeterministicallyDeidentifiedWorkflowTemplate> | undefined;
/**
 * Validate a durable catalog receipt without consulting owner-controlled text.
 * This is deliberately separate from the phrase selector above so registry
 * recovery can prove that a stored deterministic receipt still points at the
 * same reviewed static descriptor.
 */
export declare function getDeterministicallyDeidentifiedWorkflowTemplate(catalogId: string): Readonly<DeterministicallyDeidentifiedWorkflowTemplate> | undefined;
//# sourceMappingURL=workflow-auto-producer.d.ts.map