import type { ConfigDirMode } from "#src/config-dir-synth";
/** Disclosed on the record and every UI surface for sandboxed Hermes. */
export declare const HERMES_WRITE_EXPOSURE = "Hermes writes its REAL ~/.hermes state: memories, skills, sessions, logs, and identity (SOUL.md) are mutable by this sandboxed agent.";
export interface HarnessSandboxContract {
    /**
     * The effective harness configuration/session write root to grant
     * (mandatory plane). Undefined only when the harness exposes no config
     * root at all.
     */
    configWriteRoot?: string;
    /** Real-state write consequence persisted on the audit (Hermes). */
    writeExposure?: string;
    /**
     * True when the spawner must auto-synthesize a per-spawn overlay config
     * (config-profile harness, sandbox requested, no user-configured dir).
     */
    requiresAutoSynth: boolean;
}
export interface HarnessSandboxContractInput {
    harnessId: string;
    hasConfigProfile: boolean;
    /** The resolved layer-B override, when one is configured/synthesized. */
    configDirOverride?: {
        dir: string;
        mode: ConfigDirMode;
    };
    /** `HarnessEnvironment.configDir` after setup (per-spawn for pi/codex). */
    envConfigDir?: string;
    realHome: string;
}
/** Resolve the sandbox write-root contract for one spawn. */
export declare function harnessSandboxContract(input: HarnessSandboxContractInput): HarnessSandboxContract;
//# sourceMappingURL=harness-contract.d.ts.map