import type { DeployResult, PlanResponse, ReleaseSpec } from "./namespaces/deploy.types.js";
import type { Run402AppInstallGraph, Run402ObservedRelease, Run402AppInstallNodeStatus, Run402AppUpResultEnvelope, Run402AppUpVerifyResult } from "./app-up.js";
import type { ProvisionResult } from "./namespaces/projects.types.js";
import type { TierName, TierSetResult } from "./namespaces/tier.js";
import type { Run402ExecutionMode } from "./config.js";
/**
 * Stable action identifiers for the SDK action runner. Use these constants
 * instead of hand-typed strings so TypeScript narrows action inputs cleanly.
 */
export declare const Run402Action: {
    readonly ProjectsProvision: "projects.provision";
    readonly TierSet: "tier.set";
    readonly Up: "up";
};
export type Run402ActionType = typeof Run402Action[keyof typeof Run402Action];
export type Run402BootstrapTier = TierName;
export type Run402ActionInput = Run402ProjectsProvisionActionInput | Run402TierSetActionInput | Run402UpActionInput;
export interface Run402ProjectsProvisionActionInput {
    type: typeof Run402Action.ProjectsProvision;
    name?: string;
    tier?: Run402BootstrapTier;
    orgId?: string;
    idempotencyKey?: string;
}
export interface Run402TierSetActionInput {
    type: typeof Run402Action.TierSet;
    tier: Run402BootstrapTier;
    idempotencyKey?: string;
}
export interface Run402UpActionInput {
    type: typeof Run402Action.Up;
    /** Local app path or repository URL. Defaults to `dir` / cwd. */
    source?: string;
    /** Workspace directory to inspect. Defaults to `process.cwd()` in the Node SDK. */
    dir?: string;
    /** Explicit deploy manifest path. Defaults to manifest discovery inside `dir`. */
    manifest?: string;
    /** Explicit project. Highest-priority project selector. */
    projectId?: string;
    /**
     * Display name used only when `up` needs to create and link a new project.
     * This is not a deploy-manifest field and never renames an existing project.
     */
    name?: string;
    /** Bootstrap tier when no active Cloud tier exists. Defaults to `prototype`. */
    tier?: Run402BootstrapTier;
    /** Existing org to provision into when `up` needs to create a project. */
    orgId?: string;
    /** Root idempotency key. Child mutation keys are derived from this value. */
    idempotencyKey?: string;
    /** Approve destructive managed-resource prune/down operations for app-aware up. */
    allowPrune?: boolean;
    /** Maximum allowed spend in USD for app-aware up. Spend-impacting nodes block above this cap. */
    maxSpendUsd?: number;
    /** Override app build mode for app-aware up. */
    buildMode?: "local" | "remote" | "sandbox";
    /** Stronger approval for shell-string build commands in app-aware up. */
    allowShellBuild?: boolean;
    /** Continue past deploy-plan warnings, forwarded to `apply()`. */
    allowWarnings?: boolean;
    /** Continue past selected deploy-plan warnings, forwarded to `apply()`. */
    allowWarningCodes?: string[];
    /** Verify only: rerun the app manifest's verify block without deploy or resource mutation. */
    verifyOnly?: boolean;
    /** Maximum wall-clock propagation wait for app HTTP verification. Defaults to 120 seconds. */
    propagationBudgetSeconds?: number;
    /** Disable waiting for fresh edge propagation. Verify returns propagation_pending immediately. */
    propagationWait?: boolean;
    /** Skip the automatic rehearsal a migration-bearing deploy against a
     *  project with a live release gets. Default false. */
    noRehearse?: boolean;
    /** Explicit display name to set on the principal. Omitted:
     *  `RUN402_AGENT_NAME` when set (sets or overrides the name, reported as
     *  `identity.source: "explicit"`), else — only when the principal has no
     *  name yet — a specifically detected client (`claude-code`, `codex`,
     *  `cursor`, `grok`, or whatever `RUN402_CLIENT` declares) reported as
     *  `identity.source: "detected"`; when nothing is known no name is written
     *  and the result says `identity.source: "undetected"`. */
    identityName?: string;
}
/** A client `up` can detect from its environment (`RUN402_CLIENT` declares one outright). */
export type Run402UpDetectedClient = "claude-code" | "codex" | "cursor" | "grok" | (string & {});
/** How `up` resolved the principal's display name (first-deploy-agent-dx). */
export interface Run402UpIdentity {
    principal?: {
        id: string | null;
        type: string | null;
        display_name: string | null;
    };
    client?: {
        detected: Run402UpDetectedClient | null;
        declared_name: string | null;
    };
    display_name: string | null;
    /** `existing`: already set; `explicit`: set now from `identityName` or
     *  `RUN402_AGENT_NAME`; `detected`: set now from a specifically detected
     *  client (`claude-code`, `codex`, `cursor`, `grok`); `undetected`: nothing
     *  known and nothing persisted — a guess is never written as a name (the
     *  room presence is `agent` for coordination only); `unavailable`: could
     *  not be read or set (never fails the deploy). */
    source: "existing" | "explicit" | "detected" | "undetected" | "unavailable";
    /** The client detected from the environment on this run, whether or not
     *  it was applied as the name (`null` when nothing specific was detected
     *  or the read was unavailable). */
    detected?: Run402UpDetectedClient | null;
    /** Whether the detected client became the display name, and why not when
     *  it did not: `applied` (it did); `name_already_set` (the principal was
     *  already named — nothing written; rename with `RUN402_AGENT_NAME=<name>`
     *  or `run402 org whoami --set-name <name>`); `explicit_name_wins`
     *  (`identityName` / `RUN402_AGENT_NAME` took precedence);
     *  `nothing_detected` (no client marker and no `RUN402_CLIENT`). */
    detection?: {
        applied: boolean;
        reason: "applied" | "name_already_set" | "explicit_name_wins" | "nothing_detected" | "principal_identity_preserved";
    };
    /** The project room presence `up` registered under that name, when it could. */
    presence?: {
        presence_id: string;
        name: string;
    } | null;
}
export type Run402ActionApproval = "never" | "yes" | Run402InteractiveActionApproval;
export interface Run402InteractiveActionApproval {
    mode: "interactive";
    approve(request: Run402ActionApprovalRequest): boolean | Promise<boolean>;
}
export interface Run402ActionApprovalRequest {
    action: Run402ActionType;
    step: Run402ActionStep;
    message: string;
    mutations: Run402ActionMutation[];
}
export type Run402ActionMutation = "allowance.create" | "allowance.faucet" | "tier.set" | "projects.provision" | "workspace.link.write" | "app.source.resolve" | "app.install" | "app.mailbox.ensure" | "app.secret.ensure" | "app.build" | "app.webhook.ensure" | "app.verify" | "identity.name.set" | "deploy.apply";
export interface Run402ActionRunOptions {
    /**
     * Canonical execution mode for typed-config workflows.
     *
     * - `check`: local manifest/config validation only
     * - `printSpec`: local validation plus normalized ReleaseSpec output
     * - `plan`: gateway-reviewed plan, no upload or commit
     * - `{ kind: "applyReviewed" }`: apply only if a reviewed plan still matches
     * - `apply`: default mutation path
     */
    mode?: Run402ExecutionMode;
    /**
     * Legacy action-graph dry run. Prefer `mode: "check"` for local-only
     * typed-config validation or `mode: "plan"` for gateway-reviewed plans.
     */
    dryRun?: boolean;
    /**
     * Permit recursive prerequisites. Defaults to `false` for direct actions and
     * `true` for `up`.
     */
    autoPrerequisites?: boolean;
    /**
     * Approval gate for recursive mutations. Defaults to `never`; CLI maps
     * `-y/--yes` to `yes` and TTY prompts to `interactive`.
     */
    approval?: Run402ActionApproval;
    /** Root idempotency key. Action input wins when both are supplied. */
    idempotencyKey?: string;
    /** Observe action-runner progress. */
    onEvent?: (event: Run402ActionEvent) => void;
}
export type Run402ActionStepState = "planned" | "running" | "succeeded" | "skipped" | "blocked" | "failed" | "propagation_pending";
export interface Run402ActionStep {
    id: string;
    action: Run402ActionType | Run402ActionMutation | "deploy.discover" | "project.resolve";
    description: string;
    state: Run402ActionStepState;
    mutation: boolean;
    auto: boolean;
    details?: Record<string, unknown>;
}
export interface Run402ActionEvent {
    type: "action.step";
    action: Run402ActionType;
    step: Run402ActionStep;
}
export interface Run402ActionResult<T = unknown> {
    action: Run402ActionType;
    mode: Run402ExecutionMode | "legacyDryRun" | "verify";
    /** True for verification-only execution; real probes are not a dry run. */
    read_only?: boolean;
    dry_run: boolean;
    target: "cloud" | "core" | "unknown";
    steps: Run402ActionStep[];
    result?: T;
}
/** One post-apply HTTP verification result entry (deploy-manifest `verify.http[]`).
 *  Same shape as `Run402AppUpResultEnvelope["verification"]["http"][number]`. */
export interface Run402UpVerificationHttpEntry {
    id: string;
    status: Run402AppInstallNodeStatus;
    path?: string;
    url?: string;
    expected_status: number;
    actual_status?: number | null;
    observed_release?: Run402ObservedRelease;
    propagation_wait_ms?: number;
    diagnostic?: Record<string, unknown>;
}
export interface Run402UpResult {
    project_id: string | null;
    preflight?: Record<string, unknown>;
    manifest?: Record<string, unknown>;
    manifest_path: string;
    workspace_link_path?: string;
    app_graph?: Run402AppInstallGraph;
    app_result?: Run402AppUpResultEnvelope;
    spec?: Omit<ReleaseSpec, "project"> & {
        project?: string;
    };
    plan?: PlanResponse;
    deploy?: DeployResult;
    /** Deploy-manifest `verify.http[]` per-check results (app manifests report
     *  the same shape under `app_result.verification.http[]`). */
    verification?: {
        http: Run402UpVerificationHttpEntry[];
    };
    /** Deploy-manifest verify rollup (app manifests: `app_result.verify`). */
    verify?: Run402AppUpVerifyResult;
    /** The principal's display name as resolved before the deploy. */
    identity?: Run402UpIdentity;
    /** Git scaffold + first vault push outcome, attached by the CLI's `up`
     *  composition (never by the SDK action): `status: "scaffolded" | "skipped"`
     *  with `reason: "inside_other_repository" | "not_a_repository" | …`. */
    repo?: Record<string, unknown>;
}
export type Run402ProjectsProvisionActionResult = Run402ActionResult<ProvisionResult>;
export type Run402TierSetActionResult = Run402ActionResult<TierSetResult>;
export type Run402UpActionResult = Run402ActionResult<Run402UpResult>;
export interface Run402Actions {
    run(input: Run402ProjectsProvisionActionInput, opts?: Run402ActionRunOptions): Promise<Run402ProjectsProvisionActionResult>;
    run(input: Run402TierSetActionInput, opts?: Run402ActionRunOptions): Promise<Run402TierSetActionResult>;
    run(input: Run402UpActionInput, opts?: Run402ActionRunOptions): Promise<Run402UpActionResult>;
    run(input: Run402ActionInput, opts?: Run402ActionRunOptions): Promise<Run402ActionResult>;
}
//# sourceMappingURL=actions.d.ts.map