import * as z from "zod/v4";
export type ContainerNetworkPolicyAllowlist = {
    /**
     * Hostnames the container may reach over ports 80/443 (max 50). Entries are lowercase hostnames or glob patterns where * matches any run of characters (e.g. *.example.com). An exact hostname does not cover its subdomains — use a glob or list each hostname. pip needs both pypi.org and files.pythonhosted.org (or *.pythonhosted.org).
     */
    allowedDomains: Array<string>;
    /**
     * Outbound access restricted to the listed domains.
     */
    type: "allowlist";
};
export type ContainerNetworkPolicyDisabled = {
    /**
     * No outbound internet access.
     */
    type: "disabled";
};
/**
 * Network egress policy for the container. "disabled" blocks all outbound internet; "allowlist" permits only hosts matching the listed hostnames or * glob patterns (ports 80/443, DNS via Cloudflare resolvers). The policy is fixed when a container starts: sending a different policy to a warm container fails the request with a 409. Omitted: defaults to "disabled" (no outbound internet). For unrestricted egress, use an allowlist of ["*"].
 */
export type ContainerNetworkPolicy = ContainerNetworkPolicyDisabled | ContainerNetworkPolicyAllowlist;
/** @internal */
export type ContainerNetworkPolicyAllowlist$Outbound = {
    allowed_domains: Array<string>;
    type: "allowlist";
};
/** @internal */
export declare const ContainerNetworkPolicyAllowlist$outboundSchema: z.ZodType<ContainerNetworkPolicyAllowlist$Outbound, ContainerNetworkPolicyAllowlist>;
export declare function containerNetworkPolicyAllowlistToJSON(containerNetworkPolicyAllowlist: ContainerNetworkPolicyAllowlist): string;
/** @internal */
export type ContainerNetworkPolicyDisabled$Outbound = {
    type: "disabled";
};
/** @internal */
export declare const ContainerNetworkPolicyDisabled$outboundSchema: z.ZodType<ContainerNetworkPolicyDisabled$Outbound, ContainerNetworkPolicyDisabled>;
export declare function containerNetworkPolicyDisabledToJSON(containerNetworkPolicyDisabled: ContainerNetworkPolicyDisabled): string;
/** @internal */
export type ContainerNetworkPolicy$Outbound = ContainerNetworkPolicyDisabled$Outbound | ContainerNetworkPolicyAllowlist$Outbound;
/** @internal */
export declare const ContainerNetworkPolicy$outboundSchema: z.ZodType<ContainerNetworkPolicy$Outbound, ContainerNetworkPolicy>;
export declare function containerNetworkPolicyToJSON(containerNetworkPolicy: ContainerNetworkPolicy): string;
//# sourceMappingURL=containernetworkpolicy.d.ts.map