/**
 * Zod validation for external MCP server configuration (`mcps.json` and the
 * external MCP registry file). Previously these were read with a bare `as`
 * cast — a malicious or malformed config could declare an arbitrary `command`/
 * `url`/`env` and it would flow straight into `connect()` unchecked.
 */
import { z } from 'zod';
export declare const MCP_CONNECTION_CONFIG_SCHEMA: z.ZodObject<{
    args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
    command: z.ZodOptional<z.ZodString>;
    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
    type: z.ZodEnum<["sse", "stdio", "websocket"]>;
    url: z.ZodOptional<z.ZodString>;
    workingDirectory: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    type: "sse" | "stdio" | "websocket";
    command?: string | undefined;
    url?: string | undefined;
    env?: Record<string, string> | undefined;
    args?: string[] | undefined;
    headers?: Record<string, string> | undefined;
    workingDirectory?: string | undefined;
}, {
    type: "sse" | "stdio" | "websocket";
    command?: string | undefined;
    url?: string | undefined;
    env?: Record<string, string> | undefined;
    args?: string[] | undefined;
    headers?: Record<string, string> | undefined;
    workingDirectory?: string | undefined;
}>;
export declare const EXTERNAL_MCP_SERVER_CONFIG_SCHEMA: z.ZodObject<{
    connection: z.ZodObject<{
        args: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
        command: z.ZodOptional<z.ZodString>;
        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        type: z.ZodEnum<["sse", "stdio", "websocket"]>;
        url: z.ZodOptional<z.ZodString>;
        workingDirectory: z.ZodOptional<z.ZodString>;
    }, "strip", z.ZodTypeAny, {
        type: "sse" | "stdio" | "websocket";
        command?: string | undefined;
        url?: string | undefined;
        env?: Record<string, string> | undefined;
        args?: string[] | undefined;
        headers?: Record<string, string> | undefined;
        workingDirectory?: string | undefined;
    }, {
        type: "sse" | "stdio" | "websocket";
        command?: string | undefined;
        url?: string | undefined;
        env?: Record<string, string> | undefined;
        args?: string[] | undefined;
        headers?: Record<string, string> | undefined;
        workingDirectory?: string | undefined;
    }>;
    description: z.ZodString;
    enabled: z.ZodOptional<z.ZodBoolean>;
    id: z.ZodString;
    name: z.ZodString;
    remember_approval: z.ZodEnum<["always_ask", "persistent", "session"]>;
    requires_approval: z.ZodBoolean;
    security: z.ZodObject<{
        audit_logging: z.ZodBoolean;
        capabilities: z.ZodArray<z.ZodEnum<["browser_automation", "code_execution", "database_access", "file_system", "network_requests", "process_spawn", "screen_capture", "system_access"]>, "many">;
        max_execution_ms: z.ZodOptional<z.ZodNumber>;
        risk_level: z.ZodEnum<["critical", "high", "low", "medium"]>;
        tool_allowlist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
        tool_blocklist: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
    }, "strip", z.ZodTypeAny, {
        capabilities: ("code_execution" | "browser_automation" | "database_access" | "file_system" | "network_requests" | "process_spawn" | "screen_capture" | "system_access")[];
        audit_logging: boolean;
        risk_level: "high" | "critical" | "low" | "medium";
        max_execution_ms?: number | undefined;
        tool_allowlist?: string[] | undefined;
        tool_blocklist?: string[] | undefined;
    }, {
        capabilities: ("code_execution" | "browser_automation" | "database_access" | "file_system" | "network_requests" | "process_spawn" | "screen_capture" | "system_access")[];
        audit_logging: boolean;
        risk_level: "high" | "critical" | "low" | "medium";
        max_execution_ms?: number | undefined;
        tool_allowlist?: string[] | undefined;
        tool_blocklist?: string[] | undefined;
    }>;
    tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
    version: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    id: string;
    name: string;
    security: {
        capabilities: ("code_execution" | "browser_automation" | "database_access" | "file_system" | "network_requests" | "process_spawn" | "screen_capture" | "system_access")[];
        audit_logging: boolean;
        risk_level: "high" | "critical" | "low" | "medium";
        max_execution_ms?: number | undefined;
        tool_allowlist?: string[] | undefined;
        tool_blocklist?: string[] | undefined;
    };
    description: string;
    connection: {
        type: "sse" | "stdio" | "websocket";
        command?: string | undefined;
        url?: string | undefined;
        env?: Record<string, string> | undefined;
        args?: string[] | undefined;
        headers?: Record<string, string> | undefined;
        workingDirectory?: string | undefined;
    };
    remember_approval: "session" | "persistent" | "always_ask";
    requires_approval: boolean;
    enabled?: boolean | undefined;
    version?: string | undefined;
    tags?: string[] | undefined;
}, {
    id: string;
    name: string;
    security: {
        capabilities: ("code_execution" | "browser_automation" | "database_access" | "file_system" | "network_requests" | "process_spawn" | "screen_capture" | "system_access")[];
        audit_logging: boolean;
        risk_level: "high" | "critical" | "low" | "medium";
        max_execution_ms?: number | undefined;
        tool_allowlist?: string[] | undefined;
        tool_blocklist?: string[] | undefined;
    };
    description: string;
    connection: {
        type: "sse" | "stdio" | "websocket";
        command?: string | undefined;
        url?: string | undefined;
        env?: Record<string, string> | undefined;
        args?: string[] | undefined;
        headers?: Record<string, string> | undefined;
        workingDirectory?: string | undefined;
    };
    remember_approval: "session" | "persistent" | "always_ask";
    requires_approval: boolean;
    enabled?: boolean | undefined;
    version?: string | undefined;
    tags?: string[] | undefined;
}>;
//# sourceMappingURL=mcp-server-config.schema.d.ts.map