import { z } from 'zod';
/** Per-role provider config. Default (absent) = subscription login of local Claude Code.
 *
 *  @deprecated kind: 'gemini' | 'openai' — these only set GEMINI_API_KEY /
 *  OPENAI_API_KEY on the child env (see provider.ts); no runtime actually
 *  reads them (daemon.ts's autoRuntimeFromProvider has no case for either),
 *  so the role silently falls through to the default ClaudeAgentRunner and
 *  runs on Claude regardless. daemon.ts#startOrg warns loudly at start time
 *  when this happens. Use kind: 'vercel-api-key' with vendor: 'google' or
 *  vendor: 'openai' instead — that path actually routes to the requested
 *  provider via VercelAgentRunner. */
export declare const ProviderSchema: z.ZodObject<{
    kind: z.ZodDefault<z.ZodEnum<{
        antigravity: "antigravity";
        "api-key": "api-key";
        "base-url": "base-url";
        bedrock: "bedrock";
        codex: "codex";
        gemini: "gemini";
        openai: "openai";
        subscription: "subscription";
        "vercel-api-key": "vercel-api-key";
        vertex: "vertex";
    }>>;
    vendor: z.ZodOptional<z.ZodEnum<{
        alibaba: "alibaba";
        anthropic: "anthropic";
        cohere: "cohere";
        deepseek: "deepseek";
        fireworks: "fireworks";
        glm: "glm";
        google: "google";
        groq: "groq";
        mistral: "mistral";
        ollama: "ollama";
        openai: "openai";
        "openai-compatible": "openai-compatible";
        openrouter: "openrouter";
        perplexity: "perplexity";
        together: "together";
        xai: "xai";
    }>>;
    apiKeyEnv: z.ZodOptional<z.ZodString>;
    apiKey: z.ZodOptional<z.ZodString>;
    baseUrl: z.ZodOptional<z.ZodString>;
    authTokenEnv: z.ZodOptional<z.ZodString>;
    authToken: z.ZodOptional<z.ZodString>;
    usageProxy: z.ZodOptional<z.ZodBoolean>;
    usageProxyEnvVar: z.ZodOptional<z.ZodString>;
}, z.core.$strict>;
export declare const FenceAllowlistRuleSchema: z.ZodObject<{
    id: z.ZodString;
    pattern: z.ZodString;
    types: z.ZodDefault<z.ZodArray<z.ZodEnum<{
        context_manipulation: "context_manipulation";
        data_exfiltration: "data_exfiltration";
        encoding_attack: "encoding_attack";
        instruction_override: "instruction_override";
        jailbreak: "jailbreak";
        pii_exposure: "pii_exposure";
        prompt_injection: "prompt_injection";
        role_switching: "role_switching";
        unknown: "unknown";
    }>>>;
    context: z.ZodOptional<z.ZodString>;
    reason: z.ZodOptional<z.ZodString>;
    source: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
export declare const FenceConfigSchema: z.ZodObject<{
    enabled: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
    confidenceThreshold: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
    enablePIIDetection: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
    scanMessages: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
    scanOutput: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
    abortThreshold: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
    allowlist: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
        id: z.ZodString;
        pattern: z.ZodString;
        types: z.ZodDefault<z.ZodArray<z.ZodEnum<{
            context_manipulation: "context_manipulation";
            data_exfiltration: "data_exfiltration";
            encoding_attack: "encoding_attack";
            instruction_override: "instruction_override";
            jailbreak: "jailbreak";
            pii_exposure: "pii_exposure";
            prompt_injection: "prompt_injection";
            role_switching: "role_switching";
            unknown: "unknown";
        }>>>;
        context: z.ZodOptional<z.ZodString>;
        reason: z.ZodOptional<z.ZodString>;
        source: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>>>;
}, z.core.$loose>;
export type FenceConfig = z.infer<typeof FenceConfigSchema>;
export type FenceAllowlistRule = z.infer<typeof FenceAllowlistRuleSchema>;
export declare const RolePolicySchema: z.ZodObject<{
    allowTools: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
    denyTools: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
    fileWrite: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
    fileRead: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
    webAllow: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
    maxTokens: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
    maxTokensBasis: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
        billable: "billable";
        uncached: "uncached";
    }>>>;
    maxUsd: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
    git: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
        commit: "commit";
        none: "none";
        push: "push";
        read: "read";
    }>>>;
    sandbox: z.ZodOptional<z.ZodOptional<z.ZodObject<{
        mode: z.ZodOptional<z.ZodEnum<{
            auto: "auto";
            off: "off";
            required: "required";
        }>>;
        allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
        deniedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
        allowWrite: z.ZodOptional<z.ZodArray<z.ZodString>>;
        denyWrite: z.ZodOptional<z.ZodArray<z.ZodString>>;
        denyExec: z.ZodOptional<z.ZodArray<z.ZodString>>;
        denyRead: z.ZodOptional<z.ZodArray<z.ZodString>>;
        homeWriteAllow: z.ZodOptional<z.ZodArray<z.ZodString>>;
        allowUnixSockets: z.ZodOptional<z.ZodBoolean>;
    }, z.core.$strict>>>;
    fence: z.ZodOptional<z.ZodOptional<z.ZodObject<{
        enabled: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
        confidenceThreshold: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
        enablePIIDetection: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
        scanMessages: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
        scanOutput: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
        abortThreshold: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
        allowlist: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
            id: z.ZodString;
            pattern: z.ZodString;
            types: z.ZodDefault<z.ZodArray<z.ZodEnum<{
                context_manipulation: "context_manipulation";
                data_exfiltration: "data_exfiltration";
                encoding_attack: "encoding_attack";
                instruction_override: "instruction_override";
                jailbreak: "jailbreak";
                pii_exposure: "pii_exposure";
                prompt_injection: "prompt_injection";
                role_switching: "role_switching";
                unknown: "unknown";
            }>>>;
            context: z.ZodOptional<z.ZodString>;
            reason: z.ZodOptional<z.ZodString>;
            source: z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>>>;
    }, z.core.$loose>>>;
    autoApproveTools: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
    approvalTools: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
    access: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
        full: "full";
        scoped: "scoped";
    }>>>;
    settings: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodEnum<{
        local: "local";
        project: "project";
        user: "user";
    }>>>>;
    access_ack: z.ZodOptional<z.ZodOptional<z.ZodObject<{
        by: z.ZodLiteral<"human">;
        at: z.ZodString;
        hash: z.ZodString;
        sig: z.ZodOptional<z.ZodString>;
    }, z.core.$strict>>>;
}, z.core.$loose>;
//# sourceMappingURL=types-policy.d.ts.map