import * as z from "zod";

//#region src/schema.d.ts
/**
 * Default permission mode when starting an agent session.
 *
 * Agent Permission Policy modes:
 * - `standard`: Prompt for unsafe operations (default)
 * - `autonomous`: Auto-approve unless deny/ask rules match
 * - `restricted`: Prompt for all operations
 * - `readonly`: Only allow read-only tools
 *
 * Claude Code compatible modes (accepted for zero-translation migration):
 * - `plan`: Plan-only mode (maps to `restricted`)
 * - `dontAsk`: Auto-approve (maps to `autonomous`)
 * - `acceptEdits`: Accept edits without prompt (maps to `standard`)
 * - `bypassPermissions`: Bypass all permission checks (maps to `autonomous`)
 * - `default`: Agent default behaviour (maps to `standard`)
 *
 * **Security note**: `autonomous`, `bypassPermissions`, and `dontAsk` are only
 * trusted from personal (`permissions.local.json`) or managed (enterprise)
 * sources — NOT from committed `permissions.json`.
 */
declare const PermissionMode: z.ZodEnum<{
  default: "default";
  acceptEdits: "acceptEdits";
  auto: "auto";
  bypassPermissions: "bypassPermissions";
  dontAsk: "dontAsk";
  plan: "plan";
  standard: "standard";
  autonomous: "autonomous";
  restricted: "restricted";
  readonly: "readonly";
}>;
/**
 * A permission rule string.
 *
 * Syntax (compatible with Claude Code's permission rule format):
 *
 * | Pattern                        | Matches                              |
 * |-------------------------------|--------------------------------------|
 * | `Tool`                        | All invocations of the tool          |
 * | `Tool(exact command)`          | Exactly that command                 |
 * | `Tool(prefix:*)`              | Commands starting with `prefix `     |
 * | `Tool(*suffix)`               | Commands ending with ` suffix`       |
 * | `Tool(pattern * middle *)`    | Commands containing both substrings  |
 * | `Read(./path)`                | File reads at that relative path     |
 * | `Read(./path/**)`             | File reads under that path (glob)    |
 * | `WebFetch(domain:example.com)`| Fetches to that domain               |
 * | `mcp__server`                 | All tools from an MCP server         |
 * | `mcp__server__tool`           | A specific MCP tool                  |
 */
declare const PermissionRule: z.ZodString;
declare const PermissionTiers: z.ZodObject<{
  allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
  deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
  ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
  additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
  defaultMode: z.ZodOptional<z.ZodEnum<{
    default: "default";
    acceptEdits: "acceptEdits";
    auto: "auto";
    bypassPermissions: "bypassPermissions";
    dontAsk: "dontAsk";
    plan: "plan";
    standard: "standard";
    autonomous: "autonomous";
    restricted: "restricted";
    readonly: "readonly";
  }>>;
}, z.core.$strict>;
declare const RuleCondition: z.ZodObject<{
  cwd: z.ZodOptional<z.ZodString>;
  branch: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
declare const Rule: z.ZodObject<{
  tool: z.ZodString;
  pattern: z.ZodOptional<z.ZodString>;
  tier: z.ZodEnum<{
    allow: "allow";
    deny: "deny";
    ask: "ask";
  }>;
  when: z.ZodOptional<z.ZodObject<{
    cwd: z.ZodOptional<z.ZodString>;
    branch: z.ZodOptional<z.ZodString>;
  }, z.core.$strip>>;
}, z.core.$strip>;
declare const Delegation: z.ZodObject<{
  maxDepth: z.ZodOptional<z.ZodNumber>;
  nonDelegable: z.ZodOptional<z.ZodArray<z.ZodString>>;
  bubbleUp: z.ZodOptional<z.ZodBoolean>;
  agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
    allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
    deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
    ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
    additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
    defaultMode: z.ZodOptional<z.ZodEnum<{
      default: "default";
      acceptEdits: "acceptEdits";
      auto: "auto";
      bypassPermissions: "bypassPermissions";
      dontAsk: "dontAsk";
      plan: "plan";
      standard: "standard";
      autonomous: "autonomous";
      restricted: "restricted";
      readonly: "readonly";
    }>>;
  }, z.core.$strict>>>;
}, z.core.$strip>;
/**
 * Sandbox mode — OS-level isolation for agent tool execution.
 *
 * When set, the agent harness should enforce filesystem and network
 * boundaries at the OS level (sandbox, container, namespace, etc).
 * This is orthogonal to permission rules — rules control what the agent
 * *asks* to do; sandbox controls what the OS *allows* it to do.
 *
 * Maps to Codex's `sandbox_mode` field.
 */
declare const SandboxMode: z.ZodEnum<{
  "workspace-write": "workspace-write";
  readonly: "readonly";
  "full-access": "full-access";
}>;
declare const Sandbox: z.ZodObject<{
  mode: z.ZodOptional<z.ZodEnum<{
    "workspace-write": "workspace-write";
    readonly: "readonly";
    "full-access": "full-access";
  }>>;
  writableRoots: z.ZodOptional<z.ZodArray<z.ZodString>>;
  networkAccess: z.ZodOptional<z.ZodBoolean>;
}, z.core.$strict>;
/**
 * Named permission profiles that can be selected at session start.
 *
 * Maps to Codex's `permissions.<name>` + `default_permissions` fields.
 * Agents that don't support named profiles should use the profile
 * specified by `activeProfile` (or `"default"` if unset).
 */
declare const Profiles: z.ZodRecord<z.ZodString, z.ZodObject<{
  allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
  deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
  ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
  additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
  defaultMode: z.ZodOptional<z.ZodEnum<{
    default: "default";
    acceptEdits: "acceptEdits";
    auto: "auto";
    bypassPermissions: "bypassPermissions";
    dontAsk: "dontAsk";
    plan: "plan";
    standard: "standard";
    autonomous: "autonomous";
    restricted: "restricted";
    readonly: "readonly";
  }>>;
}, z.core.$strict>>;
declare const Network: z.ZodObject<{
  enabled: z.ZodOptional<z.ZodBoolean>;
  domains: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
    allow: "allow";
    deny: "deny";
  }>>>;
}, z.core.$strict>;
declare const AgentPermissionPolicy: z.ZodObject<{
  $schema: z.ZodOptional<z.ZodString>;
  defaultMode: z.ZodOptional<z.ZodEnum<{
    default: "default";
    acceptEdits: "acceptEdits";
    auto: "auto";
    bypassPermissions: "bypassPermissions";
    dontAsk: "dontAsk";
    plan: "plan";
    standard: "standard";
    autonomous: "autonomous";
    restricted: "restricted";
    readonly: "readonly";
  }>>;
  activeProfile: z.ZodOptional<z.ZodString>;
  permissions: z.ZodOptional<z.ZodObject<{
    allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
    deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
    ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
    additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
    defaultMode: z.ZodOptional<z.ZodEnum<{
      default: "default";
      acceptEdits: "acceptEdits";
      auto: "auto";
      bypassPermissions: "bypassPermissions";
      dontAsk: "dontAsk";
      plan: "plan";
      standard: "standard";
      autonomous: "autonomous";
      restricted: "restricted";
      readonly: "readonly";
    }>>;
  }, z.core.$strict>>;
  rules: z.ZodOptional<z.ZodArray<z.ZodObject<{
    tool: z.ZodString;
    pattern: z.ZodOptional<z.ZodString>;
    tier: z.ZodEnum<{
      allow: "allow";
      deny: "deny";
      ask: "ask";
    }>;
    when: z.ZodOptional<z.ZodObject<{
      cwd: z.ZodOptional<z.ZodString>;
      branch: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>;
  }, z.core.$strip>>>;
  profiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
    allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
    deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
    ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
    additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
    defaultMode: z.ZodOptional<z.ZodEnum<{
      default: "default";
      acceptEdits: "acceptEdits";
      auto: "auto";
      bypassPermissions: "bypassPermissions";
      dontAsk: "dontAsk";
      plan: "plan";
      standard: "standard";
      autonomous: "autonomous";
      restricted: "restricted";
      readonly: "readonly";
    }>>;
  }, z.core.$strict>>>;
  delegation: z.ZodOptional<z.ZodObject<{
    maxDepth: z.ZodOptional<z.ZodNumber>;
    nonDelegable: z.ZodOptional<z.ZodArray<z.ZodString>>;
    bubbleUp: z.ZodOptional<z.ZodBoolean>;
    agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
      allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
      deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
      ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
      additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
      defaultMode: z.ZodOptional<z.ZodEnum<{
        default: "default";
        acceptEdits: "acceptEdits";
        auto: "auto";
        bypassPermissions: "bypassPermissions";
        dontAsk: "dontAsk";
        plan: "plan";
        standard: "standard";
        autonomous: "autonomous";
        restricted: "restricted";
        readonly: "readonly";
      }>>;
    }, z.core.$strict>>>;
  }, z.core.$strip>>;
  sandbox: z.ZodOptional<z.ZodObject<{
    mode: z.ZodOptional<z.ZodEnum<{
      "workspace-write": "workspace-write";
      readonly: "readonly";
      "full-access": "full-access";
    }>>;
    writableRoots: z.ZodOptional<z.ZodArray<z.ZodString>>;
    networkAccess: z.ZodOptional<z.ZodBoolean>;
  }, z.core.$strict>>;
  network: z.ZodOptional<z.ZodObject<{
    enabled: z.ZodOptional<z.ZodBoolean>;
    domains: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
      allow: "allow";
      deny: "deny";
    }>>>;
  }, z.core.$strict>>;
  env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
  with: z.ZodOptional<z.ZodArray<z.ZodEnum<{
    "claude-code": "claude-code";
    codex: "codex";
    kiro: "kiro";
    opencode: "opencode";
    crush: "crush";
  }>>>;
  without: z.ZodOptional<z.ZodArray<z.ZodEnum<{
    "claude-code": "claude-code";
    codex: "codex";
    kiro: "kiro";
    opencode: "opencode";
    crush: "crush";
  }>>>;
  up: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
    all: "all";
  }>, z.ZodNumber]>>;
  sync: z.ZodOptional<z.ZodObject<{
    mode: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
      sync: "sync";
      watch: "watch";
    }>, z.ZodLiteral<false>]>>;
    backup: z.ZodOptional<z.ZodBoolean>;
  }, z.core.$strip>>;
}, z.core.$strict>;
type AgentPermissionPolicy = z.infer<typeof AgentPermissionPolicy>;
type PermissionTiers = z.infer<typeof PermissionTiers>;
type Rule = z.infer<typeof Rule>;
type RuleCondition = z.infer<typeof RuleCondition>;
type Delegation = z.infer<typeof Delegation>;
type PermissionMode = z.infer<typeof PermissionMode>;
type SandboxMode = z.infer<typeof SandboxMode>;
type Sandbox = z.infer<typeof Sandbox>;
type Profiles = z.infer<typeof Profiles>;
type Network = z.infer<typeof Network>;
//#endregion
export { PermissionRule as a, Rule as c, SandboxMode as d, PermissionMode as i, RuleCondition as l, Delegation as n, PermissionTiers as o, Network as r, Profiles as s, AgentPermissionPolicy as t, Sandbox as u };
//# sourceMappingURL=schema-8GX5HdGH.d.cts.map