export type GeneratedArtifactPathPattern = {
    kind: 'exact';
    value: string;
} | {
    kind: 'glob';
    value: string;
};
export type GeneratedArtifactDescriptor = {
    pathPattern: GeneratedArtifactPathPattern;
    owner: 'setup-agents' | 'customer' | 'salesforce-platform';
    generator: string | null;
    managedMarker: string | null;
    sensitivity: 'proprietary' | 'customer-safe' | 'out-of-scope';
    directoryOwnership: 'exclusive' | 'shared';
    customerPolicy: 'protect' | 'safe' | 'out-of-scope';
};
/**
 * Canonical, deliberately conservative inventory for the #670 foundation.
 * Shared runtime directories are represented by exact files or marker-qualified
 * generated-name patterns; they are never represented by a blanket parent rule.
 */
export declare const GENERATED_ARTIFACT_REGISTRY: readonly GeneratedArtifactDescriptor[];
/** Rejects malformed descriptors and any setup-agents policy claiming a shared parent wholesale. */
export declare function validateGeneratedArtifactRegistry(registry?: readonly GeneratedArtifactDescriptor[]): void;
/**
 * Returns stable Git ignore patterns. Shared-directory globs are coverage
 * descriptors only; callers add the exact files actually generated there.
 */
export declare function getCustomerProtectionIgnorePatterns(exactGeneratedPaths?: readonly string[], registry?: readonly GeneratedArtifactDescriptor[]): string[];