import * as z from "zod";
import type { SessionInitCommand } from "@skaile/workspaces/types";
import type { CodexNativeApprovalHandlers } from "./codex-tools.js";
import type { AgentSessionConfig } from "./session-builder.js";
declare const zHost: z.ZodObject<{
    schemaVersion: z.ZodLiteral<1>;
    sessionId: z.ZodString;
    runtime: z.ZodObject<{
        executable: z.ZodString;
        executableArgs: z.ZodOptional<z.ZodArray<z.ZodString>>;
        privateDirectory: z.ZodString;
        privateRoot: z.ZodString;
        environment: z.ZodRecord<z.ZodString, z.ZodString>;
        instructionFiles: z.ZodOptional<z.ZodArray<z.ZodString>>;
        skillsDirectory: z.ZodOptional<z.ZodString>;
        requestTimeoutMs: z.ZodOptional<z.ZodNumber>;
        turnTimeoutMs: z.ZodOptional<z.ZodNumber>;
        interactionTimeoutMs: z.ZodOptional<z.ZodNumber>;
    }, z.core.$strict>;
    requiredTools: z.ZodArray<z.ZodString>;
    approvalPolicy: z.ZodEnum<{
        never: "never";
        untrusted: "untrusted";
        "on-request": "on-request";
    }>;
    sandboxMode: z.ZodEnum<{
        "read-only": "read-only";
        "workspace-write": "workspace-write";
    }>;
    reasoningEffort: z.ZodEnum<{
        low: "low";
        medium: "medium";
        high: "high";
        minimal: "minimal";
        xhigh: "xhigh";
    }>;
    subpromptModels: z.ZodObject<{
        small: z.ZodString;
        deep: z.ZodString;
        available: z.ZodArray<z.ZodString>;
    }, z.core.$strict>;
}, z.core.$strict>;
/** Explicit launcher inputs. Credentials and project configuration never supply these fields. */
export type ManagedCodexHostOptions = z.infer<typeof zHost> & {
    approvals?: CodexNativeApprovalHandlers;
};
/** Validate before feature advertisement. This checks usable host inputs, not native qualification. */
export declare function validateManagedCodexHost(input: ManagedCodexHostOptions, projectDir: string): ManagedCodexHostOptions;
/** Explicit CLI file only: never search the workspace or a developer's home. */
export declare function loadManagedCodexHostConfig(file: string, projectDir: string): ManagedCodexHostOptions;
/** Bind one validated envelope to the existing managed session builder; no ambient auth or model fallback. */
export declare function bindManagedCodexInit(host: ManagedCodexHostOptions, cmd: SessionInitCommand, refreshCredential: NonNullable<NonNullable<AgentSessionConfig["managedCodex"]>["runtime"]["refreshCredential"]>): NonNullable<AgentSessionConfig["managedCodex"]>;
export {};
//# sourceMappingURL=managed-codex-bootstrap.d.ts.map