import { z } from "zod";
export declare const cloudContinuationSchema: z.ZodObject<{
    attemptId: z.ZodUUID;
    generation: z.ZodString;
    resultDigest: z.ZodString;
}, z.core.$strict>;
export declare const cloudWorkloadEnvelopeSchema: z.ZodObject<{
    protocolVersion: z.ZodLiteral<1>;
    workloadId: z.ZodUUID;
    delegationId: z.ZodUUID;
    attemptId: z.ZodUUID;
    generation: z.ZodString;
    sessionId: z.ZodOptional<z.ZodUUID>;
    membershipId: z.ZodOptional<z.ZodString>;
    organizationId: z.ZodString;
    userId: z.ZodString;
    repository: z.ZodString;
    commitSha: z.ZodString;
    role: z.ZodLiteral<"sidekick">;
    model: z.ZodString;
    budgetMicrousd: z.ZodNumber;
    hardDeadlineAt: z.ZodOptional<z.ZodISODateTime>;
    wallTimeMs: z.ZodOptional<z.ZodNumber>;
    maxProviderCalls: z.ZodOptional<z.ZodNumber>;
    continuation: z.ZodOptional<z.ZodObject<{
        attemptId: z.ZodUUID;
        generation: z.ZodString;
        resultDigest: z.ZodString;
    }, z.core.$strict>>;
    taskDigest: z.ZodOptional<z.ZodString>;
    task: z.ZodOptional<z.ZodString>;
    runnerDigest: z.ZodString;
    capabilities: z.ZodArray<z.ZodEnum<{
        "repository.read": "repository.read";
        "repository.write.worktree": "repository.write.worktree";
        "tests.run": "tests.run";
        "inference.use": "inference.use";
    }>>;
}, z.core.$strict>;
export type CloudWorkloadEnvelope = z.infer<typeof cloudWorkloadEnvelopeSchema>;
/** Callback from the untrusted sandbox. The worker may submit only the
 * schema-decoded, digest-bound result; all lifecycle identity is taken from
 * the encrypted Cloud envelope and verified again by the server. */
export declare const sidekickCompletionSchema: z.ZodObject<{
    protocolVersion: z.ZodLiteral<1>;
    claimGeneration: z.ZodString;
    shardGeneration: z.ZodString;
    result: z.ZodObject<{
        protocolVersion: z.ZodLiteral<1>;
        delegationId: z.ZodUUID;
        attemptId: z.ZodUUID;
        generation: z.ZodString;
        baseCommitSha: z.ZodString;
        summary: z.ZodString;
        patch: z.ZodDiscriminatedUnion<[z.ZodObject<{
            kind: z.ZodLiteral<"no_change">;
        }, z.core.$strict>, z.ZodObject<{
            kind: z.ZodLiteral<"patch">;
            sha256: z.ZodString;
            bytes: z.ZodNumber;
        }, z.core.$strict>], "kind">;
        changedFiles: z.ZodArray<z.ZodObject<{
            path: z.ZodString;
            status: z.ZodEnum<{
                added: "added";
                modified: "modified";
                deleted: "deleted";
            }>;
            beforeSha256: z.ZodNullable<z.ZodString>;
            afterSha256: z.ZodNullable<z.ZodString>;
        }, z.core.$strict>>;
        tests: z.ZodArray<z.ZodObject<{
            command: z.ZodString;
            outcome: z.ZodEnum<{
                passed: "passed";
                failed: "failed";
                skipped: "skipped";
                not_run: "not_run";
            }>;
            exitCode: z.ZodNullable<z.ZodNumber>;
        }, z.core.$strict>>;
        warnings: z.ZodArray<z.ZodString>;
        complete: z.ZodBoolean;
        digest: z.ZodString;
    }, z.core.$strict>;
    patchText: z.ZodString;
}, z.core.$strict>;
export type SidekickCompletion = z.infer<typeof sidekickCompletionSchema>;
export declare const sidekickBootstrapResponseSchema: z.ZodObject<{
    protocolVersion: z.ZodLiteral<1>;
    claimGeneration: z.ZodString;
    shardGeneration: z.ZodString;
    executionSecret: z.ZodString;
    envelope: z.ZodObject<{
        protocolVersion: z.ZodLiteral<1>;
        workloadId: z.ZodUUID;
        delegationId: z.ZodUUID;
        attemptId: z.ZodUUID;
        generation: z.ZodString;
        sessionId: z.ZodOptional<z.ZodUUID>;
        membershipId: z.ZodOptional<z.ZodString>;
        organizationId: z.ZodString;
        userId: z.ZodString;
        repository: z.ZodString;
        commitSha: z.ZodString;
        role: z.ZodLiteral<"sidekick">;
        model: z.ZodString;
        budgetMicrousd: z.ZodNumber;
        hardDeadlineAt: z.ZodOptional<z.ZodISODateTime>;
        wallTimeMs: z.ZodOptional<z.ZodNumber>;
        maxProviderCalls: z.ZodOptional<z.ZodNumber>;
        continuation: z.ZodOptional<z.ZodObject<{
            attemptId: z.ZodUUID;
            generation: z.ZodString;
            resultDigest: z.ZodString;
        }, z.core.$strict>>;
        taskDigest: z.ZodOptional<z.ZodString>;
        task: z.ZodOptional<z.ZodString>;
        runnerDigest: z.ZodString;
        capabilities: z.ZodArray<z.ZodEnum<{
            "repository.read": "repository.read";
            "repository.write.worktree": "repository.write.worktree";
            "tests.run": "tests.run";
            "inference.use": "inference.use";
        }>>;
    }, z.core.$strict>;
    task: z.ZodString;
    previousResult: z.ZodOptional<z.ZodObject<{
        result: z.ZodObject<{
            protocolVersion: z.ZodLiteral<1>;
            delegationId: z.ZodUUID;
            attemptId: z.ZodUUID;
            generation: z.ZodString;
            baseCommitSha: z.ZodString;
            summary: z.ZodString;
            patch: z.ZodDiscriminatedUnion<[z.ZodObject<{
                kind: z.ZodLiteral<"no_change">;
            }, z.core.$strict>, z.ZodObject<{
                kind: z.ZodLiteral<"patch">;
                sha256: z.ZodString;
                bytes: z.ZodNumber;
            }, z.core.$strict>], "kind">;
            changedFiles: z.ZodArray<z.ZodObject<{
                path: z.ZodString;
                status: z.ZodEnum<{
                    added: "added";
                    modified: "modified";
                    deleted: "deleted";
                }>;
                beforeSha256: z.ZodNullable<z.ZodString>;
                afterSha256: z.ZodNullable<z.ZodString>;
            }, z.core.$strict>>;
            tests: z.ZodArray<z.ZodObject<{
                command: z.ZodString;
                outcome: z.ZodEnum<{
                    passed: "passed";
                    failed: "failed";
                    skipped: "skipped";
                    not_run: "not_run";
                }>;
                exitCode: z.ZodNullable<z.ZodNumber>;
            }, z.core.$strict>>;
            warnings: z.ZodArray<z.ZodString>;
            complete: z.ZodBoolean;
            digest: z.ZodString;
        }, z.core.$strict>;
        patchText: z.ZodString;
    }, z.core.$strict>>;
    repository: z.ZodObject<{
        url: z.ZodString;
        commitSha: z.ZodString;
    }, z.core.$strict>;
}, z.core.$strict>;
export type SidekickBootstrapResponse = z.infer<typeof sidekickBootstrapResponseSchema>;
export declare const brokerAdmissionSchema: z.ZodObject<{
    protocolVersion: z.ZodLiteral<1>;
    delegationId: z.ZodUUID;
    attemptId: z.ZodUUID;
    generation: z.ZodString;
    organizationId: z.ZodString;
    spenderUserId: z.ZodString;
    grantOwnerId: z.ZodString;
    repository: z.ZodString;
    commitSha: z.ZodString;
    role: z.ZodLiteral<"sidekick">;
    model: z.ZodString;
    requestedMicrousd: z.ZodNumber;
    remainingMicrousd: z.ZodNumber;
}, z.core.$strict>;
export type BrokerAdmission = z.infer<typeof brokerAdmissionSchema>;
export declare const brokerHeadersSchema: z.ZodObject<{
    authorization: z.ZodString;
}, z.core.$strict>;
export declare const cloudFailureCodeSchema: z.ZodEnum<{
    unauthorized: "unauthorized";
    stale_generation: "stale_generation";
    policy_denied: "policy_denied";
    budget_exceeded: "budget_exceeded";
    caller_identity_forbidden: "caller_identity_forbidden";
    model_auto_disallowed: "model_auto_disallowed";
    repository_not_covered: "repository_not_covered";
    credential_not_available: "credential_not_available";
}>;
export type CloudFailureCode = z.infer<typeof cloudFailureCodeSchema>;
export declare function assertCloudModel(model: string): void;
export declare function assertBrokerAdmission(input: BrokerAdmission): void;