import { z } from 'zod';
import { type TRunPolicyConfig } from './run-policy-types.js';
/**
 * Validates the policy file structure itself.
 * The structure mirrors TRunPolicyConfig (place + dirFilters array).
 */
declare const PolicyFileSchema: z.ZodObject<{
    $schema: z.ZodOptional<z.ZodString>;
    type: z.ZodDefault<z.ZodLiteral<"object">>;
    properties: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
    definitions: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
    $defs: z.ZodOptional<z.ZodObject<{}, z.core.$loose>>;
    required: z.ZodOptional<z.ZodArray<z.ZodString>>;
    allOf: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
    anyOf: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
    oneOf: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
    deny: z.ZodDefault<z.ZodArray<z.ZodObject<{
        place: z.ZodOptional<z.ZodString>;
        dir: z.ZodOptional<z.ZodString>;
        access: z.ZodOptional<z.ZodEnum<{
            r: "r";
            a: "a";
            w: "w";
        }>>;
    }, z.core.$strip>>>;
}, z.core.$loose>;
export type TRunPolicy = z.infer<typeof PolicyFileSchema>;
/** Load and parse a policy file */
export declare function loadRunPolicy(schemaPath: string): TRunPolicy;
/**
 * Validate a runtime config against a loaded policy.
 * Builds a strict Zod schema dynamically from the policy definition.
 */
export declare function buildConfigValidator(policy: TRunPolicy): z.ZodObject<{
    [x: string]: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
}, z.core.$loose>;
/**
 * Validate a config against a loaded policy, returning array of error strings.
 */
export declare function validateRunPolicyConfig(config: TRunPolicyConfig, policy: TRunPolicy, schemaPath: string): string[];
/** Load policy, validate config, throw on failure. */
export declare function loadAndValidateRunPolicy(config: TRunPolicyConfig, schemaPath: string): TRunPolicy;
export {};
//# sourceMappingURL=run-policy-schema.d.ts.map