import { c as InferCredentialSetAuth, i as AssertUniqueCredentialSetIds, p as Primitive, s as CredentialSetId, t as AnyCredentialSet } from "./CredentialSet-lUr_8nN3.mjs";
import { p as JsonObject } from "./schemas-DXcT2SRm.mjs";
import { z } from "zod";

//#region src/sandbox/schemas.d.ts
declare const SandboxManifestSchema: z.ZodObject<{
  manifestVersion: z.ZodLiteral<1>;
  type: z.ZodLiteral<"sandbox">;
  id: z.ZodString;
  name: z.ZodString;
  description: z.ZodOptional<z.ZodString>;
  workdir: z.ZodOptional<z.ZodString>;
  runCommands: z.ZodArray<z.ZodString>;
  setupCommands: z.ZodArray<z.ZodString>;
  credentialSets: z.ZodArray<z.ZodObject<{
    manifestVersion: z.ZodLiteral<1>;
    type: z.ZodLiteral<"credentialSet">;
    id: z.ZodString;
    name: z.ZodString;
    description: z.ZodOptional<z.ZodString>;
    auth: z.ZodType<JsonObject, unknown, z.core.$ZodTypeInternals<JsonObject, unknown>>;
    credentialType: z.ZodEnum<{
      oauth: "oauth";
      manual: "manual";
    }>;
    exposure: z.ZodOptional<z.ZodEnum<{
      "user-runtime": "user-runtime";
      "platform-only": "platform-only";
    }>>;
    proxy: z.ZodOptional<z.ZodObject<{
      hosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
      hostPatterns: z.ZodOptional<z.ZodArray<z.ZodString>>;
      injection: z.ZodOptional<z.ZodObject<{
        headers: z.ZodOptional<z.ZodBoolean>;
        basicAuth: z.ZodOptional<z.ZodBoolean>;
        queryParams: z.ZodOptional<z.ZodBoolean>;
        body: z.ZodOptional<z.ZodBoolean>;
      }, z.core.$strip>>;
    }, z.core.$strip>>;
    needsRawSecret: z.ZodOptional<z.ZodBoolean>;
  }, z.core.$strip>>;
  env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
    kind: z.ZodLiteral<"literal">;
    value: z.ZodString;
  }, z.core.$strip>, z.ZodObject<{
    kind: z.ZodLiteral<"credential">;
    credentialSetId: z.ZodString;
    key: z.ZodString;
  }, z.core.$strip>], "kind">>>;
  fileSources: z.ZodArray<z.ZodObject<{
    path: z.ZodString;
    target: z.ZodOptional<z.ZodString>;
  }, z.core.$strip>>;
}, z.core.$strip>;
type SandboxManifest = z.infer<typeof SandboxManifestSchema>;
//#endregion
//#region src/shared/credential-bindings.d.ts
interface CredentialReference {
  readonly credentialSetId: string;
  readonly key: string;
}
type ManifestValue = {
  readonly kind: 'literal';
  readonly value: string;
} | {
  readonly kind: 'credential';
  readonly credentialSetId: string;
  readonly key: string;
};
type BindingValue = string | CredentialReference;
type CredentialReferenceNamespace<TCredentialSets extends readonly AnyCredentialSet[], TCredentialId extends CredentialSetId<TCredentialSets[number]>> = Readonly<{ readonly [TCredentialKey in keyof InferCredentialSetAuth<Extract<TCredentialSets[number], {
  id: TCredentialId;
}>> & string]: CredentialReference }>;
type BindingCredentials<TCredentialSets extends readonly AnyCredentialSet[] | undefined> = TCredentialSets extends readonly AnyCredentialSet[] ? Readonly<{ readonly [TCredentialId in CredentialSetId<TCredentialSets[number]>]: CredentialReferenceNamespace<TCredentialSets, TCredentialId> }> : Record<string, never>;
type CredentialBindingContext<TCredentialSets extends readonly AnyCredentialSet[]> = Readonly<{
  credentials: Readonly<BindingCredentials<TCredentialSets>>;
}>;
//#endregion
//#region src/sandbox/types.d.ts
type SandboxFileSource = Readonly<{
  path: string;
  target?: string;
}>;
type SkillSource = {
  readonly path: string;
};
type SandboxCredentialContext<TCredentialSets extends readonly AnyCredentialSet[]> = CredentialBindingContext<TCredentialSets>;
type SandboxEnvBindingBuilder<TCredentialSets extends readonly AnyCredentialSet[]> = (ctx: SandboxCredentialContext<TCredentialSets>) => Readonly<Record<string, BindingValue>>;
interface SandboxConfig<TCredentialSets extends readonly AnyCredentialSet[] = readonly []> {
  id?: string;
  name?: string;
  description?: string;
  workdir?: string;
  runCommands?: readonly string[];
  setupCommands?: readonly string[];
  credentialSets?: TCredentialSets & AssertUniqueCredentialSetIds<TCredentialSets>;
  env?: SandboxEnvBindingBuilder<TCredentialSets>;
  fileSources?: readonly SandboxFileSource[];
}
type AnySandbox = Sandbox<readonly AnyCredentialSet[]>;
//#endregion
//#region src/sandbox/Sandbox.d.ts
declare class Sandbox<TCredentialSets extends readonly AnyCredentialSet[] = readonly []> extends Primitive<SandboxManifest> {
  #private;
  readonly kind: "sandbox";
  readonly id: string;
  readonly name: string;
  readonly description?: string;
  readonly workdir: string;
  readonly runCommands: readonly string[];
  readonly setupCommands: readonly string[];
  readonly credentialSets: TCredentialSets;
  readonly envManifest?: Readonly<Record<string, ManifestValue>>;
  readonly fileSourcesManifest: readonly SandboxFileSource[];
  constructor(config?: SandboxConfig<TCredentialSets>);
  configure(overrides: {
    name?: string;
    description?: string;
    workdir?: string;
    runCommands?: readonly string[];
    setupCommands?: readonly string[];
    env?: SandboxConfig<TCredentialSets>['env'];
    fileSources?: SandboxConfig<TCredentialSets>['fileSources'];
    credentialSets?: TCredentialSets;
  }): Sandbox<TCredentialSets>;
  toManifest(): SandboxManifest;
}
//#endregion
export { SkillSource as a, SandboxFileSource as i, AnySandbox as n, SandboxManifest as o, SandboxConfig as r, Sandbox as t };