import * as z from "zod/v4-mini";
/**
 * CPU architecture the image was built for. Validated against the provider at preflight.
 */
export declare enum NameImageArchArch {
    X8664 = "x86_64",
    Arm64 = "arm64"
}
/**
 * Requested resources. A provider that does not expose a given dial REJECTS a definition that sets it, at preflight — never a silent downgrade.
 */
export type NameImageArchResources = {
    /**
     * Requested vCPU count
     */
    vcpu?: number | undefined;
    /**
     * Requested memory in MB
     */
    memoryMb?: number | undefined;
    /**
     * Requested disk in MB
     */
    diskMb?: number | undefined;
    /**
     * Whether a GPU is required
     */
    gpu?: boolean | undefined;
};
/**
 * Outbound policy. Defaults to deny — opening egress is explicit.
 */
export declare enum NameImageArchEgress {
    Deny = "deny",
    Allowlist = "allowlist",
    Allow = "allow"
}
/**
 * What this rule constrains
 */
export declare enum NameImageArchKind {
    Port = "port",
    Cidr = "cidr",
    Domain = "domain"
}
/**
 * A single outbound-access allowance
 */
export type NameImageArchAllow = {
    /**
     * What this rule constrains
     */
    kind?: NameImageArchKind | undefined;
    /**
     * Port, CIDR block, or domain
     */
    value: string;
};
/**
 * Network policy for the sandbox
 */
export type NameImageArchNetwork = {
    /**
     * Outbound policy. Defaults to deny — opening egress is explicit.
     */
    egress?: NameImageArchEgress | undefined;
    /**
     * Allowances, when egress is "allowlist". Requires provider egressControl support.
     */
    allow?: Array<NameImageArchAllow> | undefined;
};
/**
 * Whether the working directory is archived at every consistency point. `auto` (default) archives it whenever an object store exists; `never` records the leg as disabled in the checkpoint manifest, so a restore reports it as disabled rather than as an archive that failed to travel.
 */
export declare enum NameImageArchWorkspace {
    Auto = "auto",
    Never = "never"
}
/**
 * Which legs continuous capture carries for sessions on this definition.
 */
export type NameImageArchCapture = {
    /**
     * Whether the working directory is archived at every consistency point. `auto` (default) archives it whenever an object store exists; `never` records the leg as disabled in the checkpoint manifest, so a restore reports it as disabled rather than as an archive that failed to travel.
     */
    workspace?: NameImageArchWorkspace | undefined;
    /**
     * Whether `$HOME/.mutagent` (memory, plans, extension state; never the session transcript) is archived. Defaults to true.
     */
    home?: boolean | undefined;
};
export type NameImageArch = {
    /**
     * Human-readable definition name
     */
    name: string;
    /**
     * Image reference (repository:tag or @digest). The image content is a separate artifact.
     */
    image: string;
    /**
     * CPU architecture the image was built for. Validated against the provider at preflight.
     */
    arch?: NameImageArchArch | undefined;
    /**
     * Requested resources. A provider that does not expose a given dial REJECTS a definition that sets it, at preflight — never a silent downgrade.
     */
    resources?: NameImageArchResources | undefined;
    /**
     * Network policy for the sandbox
     */
    network?: NameImageArchNetwork | undefined;
    /**
     * Name of the Environment (secrets + variables) to load at spawn. Distinct from `provider`.
     */
    environment?: string | undefined;
    /**
     * Provider registry key. When omitted the backend default applies.
     */
    provider?: string | undefined;
    /**
     * Requested max lifetime. Rejected at preflight if it exceeds the provider ceiling.
     */
    timeoutMs?: number | undefined;
    /**
     * Working directory inside the sandbox
     */
    workdir?: string | undefined;
    /**
     * Non-secret environment variables. Secret material must come from an Environment.
     */
    vars?: {
        [k: string]: string;
    } | undefined;
    /**
     * Which legs continuous capture carries for sessions on this definition.
     */
    capture?: NameImageArchCapture | undefined;
};
/** @internal */
export declare const NameImageArchArch$outboundSchema: z.ZodMiniEnum<typeof NameImageArchArch>;
/** @internal */
export type NameImageArchResources$Outbound = {
    vcpu?: number | undefined;
    memoryMb?: number | undefined;
    diskMb?: number | undefined;
    gpu?: boolean | undefined;
};
/** @internal */
export declare const NameImageArchResources$outboundSchema: z.ZodMiniType<NameImageArchResources$Outbound, NameImageArchResources>;
export declare function nameImageArchResourcesToJSON(nameImageArchResources: NameImageArchResources): string;
/** @internal */
export declare const NameImageArchEgress$outboundSchema: z.ZodMiniEnum<typeof NameImageArchEgress>;
/** @internal */
export declare const NameImageArchKind$outboundSchema: z.ZodMiniEnum<typeof NameImageArchKind>;
/** @internal */
export type NameImageArchAllow$Outbound = {
    kind: string;
    value: string;
};
/** @internal */
export declare const NameImageArchAllow$outboundSchema: z.ZodMiniType<NameImageArchAllow$Outbound, NameImageArchAllow>;
export declare function nameImageArchAllowToJSON(nameImageArchAllow: NameImageArchAllow): string;
/** @internal */
export type NameImageArchNetwork$Outbound = {
    egress: string;
    allow?: Array<NameImageArchAllow$Outbound> | undefined;
};
/** @internal */
export declare const NameImageArchNetwork$outboundSchema: z.ZodMiniType<NameImageArchNetwork$Outbound, NameImageArchNetwork>;
export declare function nameImageArchNetworkToJSON(nameImageArchNetwork: NameImageArchNetwork): string;
/** @internal */
export declare const NameImageArchWorkspace$outboundSchema: z.ZodMiniEnum<typeof NameImageArchWorkspace>;
/** @internal */
export type NameImageArchCapture$Outbound = {
    workspace: string;
    home?: boolean | undefined;
};
/** @internal */
export declare const NameImageArchCapture$outboundSchema: z.ZodMiniType<NameImageArchCapture$Outbound, NameImageArchCapture>;
export declare function nameImageArchCaptureToJSON(nameImageArchCapture: NameImageArchCapture): string;
/** @internal */
export type NameImageArch$Outbound = {
    name: string;
    image: string;
    arch: string;
    resources?: NameImageArchResources$Outbound | undefined;
    network?: NameImageArchNetwork$Outbound | undefined;
    environment?: string | undefined;
    provider?: string | undefined;
    timeoutMs?: number | undefined;
    workdir?: string | undefined;
    vars?: {
        [k: string]: string;
    } | undefined;
    capture?: NameImageArchCapture$Outbound | undefined;
};
/** @internal */
export declare const NameImageArch$outboundSchema: z.ZodMiniType<NameImageArch$Outbound, NameImageArch>;
export declare function nameImageArchToJSON(nameImageArch: NameImageArch): string;
//# sourceMappingURL=name-image-arch.d.ts.map