import { z } from 'zod';
/** A stdio MCP server whose tools are exposed to one role as
 *  `<prefix>__<mcpToolName>` (M1, capability `org-tool-providers`).
 *  `env` values are literal — never expanded, never read from secrets. */
export declare const ToolProviderSchema: z.ZodObject<{
    kind: z.ZodLiteral<"mcp-stdio">;
    name: z.ZodString;
    command: z.ZodString;
    args: z.ZodDefault<z.ZodArray<z.ZodString>>;
    env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
    allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
    prefix: z.ZodOptional<z.ZodString>;
    timeout_ms: z.ZodDefault<z.ZodNumber>;
    idle_ms: z.ZodDefault<z.ZodNumber>;
}, z.core.$loose>;
export type ToolProviderConfig = z.infer<typeof ToolProviderSchema>;
/** M2 (capability `org-endpoint-roles`): an endpoint role's delivery target. */
export declare const EndpointSchema: z.ZodObject<{
    url: z.ZodString;
    credential_file: z.ZodOptional<z.ZodString>;
    timeout_ms: z.ZodOptional<z.ZodNumber>;
    input_hint: z.ZodOptional<z.ZodString>;
}, z.core.$loose>;
export type EndpointConfig = z.infer<typeof EndpointSchema>;
/** Upper bound for `max_tool_rounds` (#326): each round is a full model turn,
 *  so the cap still has to stop a model that keeps calling tools. */
export declare const MAX_TOOL_ROUNDS_LIMIT = 200;
/** Upper bound for a blocked task's re-check interval (#329), in minutes —
 *  both run_config.block_recheck_minutes and org_task_block's
 *  recheckAfterMinutes. A block may last hours; its assignee may not go
 *  unasked for longer than this. */
export declare const MAX_BLOCK_RECHECK_MINUTES = 60;
/** Upper bound of run_config.max_role_resets (resets per role per run). */
export declare const MAX_ROLE_RESETS = 100;
export declare const RoleSchema: z.ZodObject<{
    id: z.ZodString;
    title: z.ZodDefault<z.ZodString>;
    type: z.ZodDefault<z.ZodString>;
    reports_to: z.ZodDefault<z.ZodNullable<z.ZodString>>;
    responsibilities: z.ZodDefault<z.ZodArray<z.ZodString>>;
    instructions_file: z.ZodOptional<z.ZodString>;
    skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
    skill_pool: z.ZodOptional<z.ZodArray<z.ZodString>>;
    blueprint: z.ZodOptional<z.ZodString>;
    ui: z.ZodOptional<z.ZodObject<{
        x: z.ZodOptional<z.ZodNumber>;
        y: z.ZodOptional<z.ZodNumber>;
        icon: z.ZodOptional<z.ZodString>;
        color: z.ZodOptional<z.ZodString>;
    }, z.core.$loose>>;
    adapter_config: z.ZodOptional<z.ZodObject<{
        model: z.ZodOptional<z.ZodOptional<z.ZodString>>;
        max_tokens: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
        provider: z.ZodOptional<z.ZodOptional<z.ZodString>>;
    }, z.core.$strip>>;
    provider: z.ZodOptional<z.ZodObject<{
        kind: z.ZodDefault<z.ZodEnum<{
            antigravity: "antigravity";
            "api-key": "api-key";
            "base-url": "base-url";
            bedrock: "bedrock";
            codex: "codex";
            gemini: "gemini";
            openai: "openai";
            subscription: "subscription";
            "vercel-api-key": "vercel-api-key";
            vertex: "vertex";
        }>>;
        vendor: z.ZodOptional<z.ZodEnum<{
            alibaba: "alibaba";
            anthropic: "anthropic";
            cohere: "cohere";
            deepseek: "deepseek";
            fireworks: "fireworks";
            glm: "glm";
            google: "google";
            groq: "groq";
            mistral: "mistral";
            ollama: "ollama";
            openai: "openai";
            "openai-compatible": "openai-compatible";
            openrouter: "openrouter";
            perplexity: "perplexity";
            together: "together";
            xai: "xai";
        }>>;
        apiKeyEnv: z.ZodOptional<z.ZodString>;
        apiKey: z.ZodOptional<z.ZodString>;
        baseUrl: z.ZodOptional<z.ZodString>;
        authTokenEnv: z.ZodOptional<z.ZodString>;
        authToken: z.ZodOptional<z.ZodString>;
        usageProxy: z.ZodOptional<z.ZodBoolean>;
        usageProxyEnvVar: z.ZodOptional<z.ZodString>;
    }, z.core.$strict>>;
    policy: z.ZodOptional<z.ZodObject<{
        allowTools: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
        denyTools: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
        fileWrite: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
        fileRead: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
        webAllow: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
        maxTokens: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
        maxTokensBasis: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
            billable: "billable";
            uncached: "uncached";
        }>>>;
        maxUsd: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
        git: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
            commit: "commit";
            none: "none";
            push: "push";
            read: "read";
        }>>>;
        sandbox: z.ZodOptional<z.ZodOptional<z.ZodObject<{
            mode: z.ZodOptional<z.ZodEnum<{
                auto: "auto";
                off: "off";
                required: "required";
            }>>;
            allowedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
            deniedDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
            allowWrite: z.ZodOptional<z.ZodArray<z.ZodString>>;
            denyWrite: z.ZodOptional<z.ZodArray<z.ZodString>>;
            denyExec: z.ZodOptional<z.ZodArray<z.ZodString>>;
            denyRead: z.ZodOptional<z.ZodArray<z.ZodString>>;
            homeWriteAllow: z.ZodOptional<z.ZodArray<z.ZodString>>;
            allowUnixSockets: z.ZodOptional<z.ZodBoolean>;
        }, z.core.$strict>>>;
        fence: z.ZodOptional<z.ZodOptional<z.ZodObject<{
            enabled: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
            confidenceThreshold: z.ZodOptional<z.ZodOptional<z.ZodNumber>>;
            enablePIIDetection: z.ZodOptional<z.ZodOptional<z.ZodBoolean>>;
            scanMessages: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
            scanOutput: z.ZodOptional<z.ZodDefault<z.ZodBoolean>>;
            abortThreshold: z.ZodOptional<z.ZodDefault<z.ZodNumber>>;
            allowlist: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodObject<{
                id: z.ZodString;
                pattern: z.ZodString;
                types: z.ZodDefault<z.ZodArray<z.ZodEnum<{
                    context_manipulation: "context_manipulation";
                    data_exfiltration: "data_exfiltration";
                    encoding_attack: "encoding_attack";
                    instruction_override: "instruction_override";
                    jailbreak: "jailbreak";
                    pii_exposure: "pii_exposure";
                    prompt_injection: "prompt_injection";
                    role_switching: "role_switching";
                    unknown: "unknown";
                }>>>;
                context: z.ZodOptional<z.ZodString>;
                reason: z.ZodOptional<z.ZodString>;
                source: z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>>>;
        }, z.core.$loose>>>;
        autoApproveTools: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
        approvalTools: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
        access: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
            full: "full";
            scoped: "scoped";
        }>>>;
        settings: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodEnum<{
            local: "local";
            project: "project";
            user: "user";
        }>>>>;
        access_ack: z.ZodOptional<z.ZodOptional<z.ZodObject<{
            by: z.ZodLiteral<"human">;
            at: z.ZodString;
            hash: z.ZodString;
            sig: z.ZodOptional<z.ZodString>;
        }, z.core.$strict>>>;
    }, z.core.$loose>>;
    session_scope: z.ZodOptional<z.ZodEnum<{
        role: "role";
        task: "task";
    }>>;
    review_input: z.ZodOptional<z.ZodEnum<{
        "artifact-only": "artifact-only";
    }>>;
    deliberative: z.ZodOptional<z.ZodBoolean>;
    runtime: z.ZodOptional<z.ZodEnum<{
        aider: "aider";
        antigravity: "antigravity";
        claude: "claude";
        cline: "cline";
        codex: "codex";
        copilot: "copilot";
        crush: "crush";
        dsh: "dsh";
        grok: "grok";
        hermes: "hermes";
        kilo: "kilo";
        kimicode: "kimicode";
        opencode: "opencode";
        pi: "pi";
        "pi-rpc": "pi-rpc";
        qwen: "qwen";
        "qwen-rpc": "qwen-rpc";
        vercel: "vercel";
    }>>;
    max_turns_per_message: z.ZodOptional<z.ZodNumber>;
    max_tool_rounds: z.ZodOptional<z.ZodNumber>;
    budget_tokens: z.ZodOptional<z.ZodNumber>;
    budget_usd: z.ZodOptional<z.ZodNumber>;
    tool_providers: z.ZodOptional<z.ZodArray<z.ZodObject<{
        kind: z.ZodLiteral<"mcp-stdio">;
        name: z.ZodString;
        command: z.ZodString;
        args: z.ZodDefault<z.ZodArray<z.ZodString>>;
        env: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
        allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
        prefix: z.ZodOptional<z.ZodString>;
        timeout_ms: z.ZodDefault<z.ZodNumber>;
        idle_ms: z.ZodDefault<z.ZodNumber>;
    }, z.core.$loose>>>;
    kind: z.ZodOptional<z.ZodEnum<{
        agent: "agent";
        endpoint: "endpoint";
    }>>;
    endpoint: z.ZodOptional<z.ZodObject<{
        url: z.ZodString;
        credential_file: z.ZodOptional<z.ZodString>;
        timeout_ms: z.ZodOptional<z.ZodNumber>;
        input_hint: z.ZodOptional<z.ZodString>;
    }, z.core.$loose>>;
}, z.core.$loose>;
/** Default per-message turn budget for a role session. Deliberately huge so
 *  the ceiling never bricks a legitimately long-running task (#140: a role
 *  mid-task on `error_max_turns` used to crash with no recovery) — real
 *  guardrails are budget_tokens, the idle watchdog, and the circuit breaker.
 *  Set run_config.max_turns_per_message (or a role's own
 *  max_turns_per_message) to cap turns when you want a hard limit. */
export declare const DEFAULT_MAX_TURNS_PER_MESSAGE = 100000;
//# sourceMappingURL=types-role.d.ts.map