import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
import { z } from "zod";
export declare const sandboxCreateSchema: z.ZodObject<{
    name: z.ZodOptional<z.ZodString>;
    image: z.ZodOptional<z.ZodString>;
    rootfs: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
        kind: z.ZodLiteral<"oci">;
        reference: z.ZodString;
        pullPolicy: z.ZodOptional<z.ZodEnum<{
            never: "never";
            always: "always";
            "if-missing": "if-missing";
        }>>;
        upperSizeMib: z.ZodOptional<z.ZodNumber>;
        registry: z.ZodOptional<z.ZodObject<{
            insecure: z.ZodOptional<z.ZodBoolean>;
            caCertsPath: z.ZodOptional<z.ZodString>;
            auth: z.ZodOptional<z.ZodObject<{
                kind: z.ZodEnum<{
                    anonymous: "anonymous";
                    basic: "basic";
                }>;
                username: z.ZodOptional<z.ZodString>;
                password: z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
        }, z.core.$strip>>;
    }, z.core.$strip>, z.ZodObject<{
        kind: z.ZodLiteral<"bind">;
        path: z.ZodString;
    }, z.core.$strip>, z.ZodObject<{
        kind: z.ZodLiteral<"disk">;
        path: z.ZodString;
        fstype: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>], "kind">>;
    cpus: z.ZodOptional<z.ZodNumber>;
    memoryMib: z.ZodOptional<z.ZodNumber>;
    workdir: z.ZodOptional<z.ZodString>;
    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
    volumes: z.ZodOptional<z.ZodArray<z.ZodObject<{
        kind: z.ZodEnum<{
            disk: "disk";
            bind: "bind";
            named: "named";
            tmpfs: "tmpfs";
        }>;
        guestPath: z.ZodString;
        hostPath: z.ZodOptional<z.ZodString>;
        name: z.ZodOptional<z.ZodString>;
        source: z.ZodOptional<z.ZodString>;
        readonly: z.ZodOptional<z.ZodBoolean>;
        noexec: z.ZodOptional<z.ZodBoolean>;
        nosuid: z.ZodOptional<z.ZodBoolean>;
        nodev: z.ZodOptional<z.ZodBoolean>;
        sizeMib: z.ZodOptional<z.ZodNumber>;
        format: z.ZodOptional<z.ZodEnum<{
            raw: "raw";
            qcow2: "qcow2";
            vmdk: "vmdk";
        }>>;
        fstype: z.ZodOptional<z.ZodString>;
        statVirtualization: z.ZodOptional<z.ZodEnum<{
            strict: "strict";
            relaxed: "relaxed";
            off: "off";
        }>>;
        hostPermissions: z.ZodOptional<z.ZodEnum<{
            private: "private";
            mirror: "mirror";
        }>>;
    }, z.core.$strip>>>;
    mounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
        kind: z.ZodEnum<{
            disk: "disk";
            bind: "bind";
            named: "named";
            tmpfs: "tmpfs";
        }>;
        guestPath: z.ZodString;
        hostPath: z.ZodOptional<z.ZodString>;
        name: z.ZodOptional<z.ZodString>;
        source: z.ZodOptional<z.ZodString>;
        readonly: z.ZodOptional<z.ZodBoolean>;
        noexec: z.ZodOptional<z.ZodBoolean>;
        nosuid: z.ZodOptional<z.ZodBoolean>;
        nodev: z.ZodOptional<z.ZodBoolean>;
        sizeMib: z.ZodOptional<z.ZodNumber>;
        format: z.ZodOptional<z.ZodEnum<{
            raw: "raw";
            qcow2: "qcow2";
            vmdk: "vmdk";
        }>>;
        fstype: z.ZodOptional<z.ZodString>;
        statVirtualization: z.ZodOptional<z.ZodEnum<{
            strict: "strict";
            relaxed: "relaxed";
            off: "off";
        }>>;
        hostPermissions: z.ZodOptional<z.ZodEnum<{
            private: "private";
            mirror: "mirror";
        }>>;
    }, z.core.$strip>>>;
    patches: z.ZodOptional<z.ZodArray<z.ZodObject<{
        kind: z.ZodEnum<{
            text: "text";
            file: "file";
            symlink: "symlink";
            copyFile: "copyFile";
            copyDir: "copyDir";
            mkdir: "mkdir";
            append: "append";
            remove: "remove";
        }>;
        type: z.ZodOptional<z.ZodEnum<{
            text: "text";
            file: "file";
            symlink: "symlink";
            copyFile: "copyFile";
            copyDir: "copyDir";
            mkdir: "mkdir";
            append: "append";
            remove: "remove";
        }>>;
        path: z.ZodOptional<z.ZodString>;
        guestPath: z.ZodOptional<z.ZodString>;
        hostPath: z.ZodOptional<z.ZodString>;
        content: z.ZodOptional<z.ZodString>;
        contentBase64: z.ZodOptional<z.ZodString>;
        target: z.ZodOptional<z.ZodString>;
        linkPath: z.ZodOptional<z.ZodString>;
        mode: z.ZodOptional<z.ZodNumber>;
        replace: z.ZodOptional<z.ZodBoolean>;
    }, z.core.$strip>>>;
    entrypoint: z.ZodOptional<z.ZodArray<z.ZodString>>;
    hostname: z.ZodOptional<z.ZodString>;
    maxDuration: z.ZodOptional<z.ZodNumber>;
    idleTimeout: z.ZodOptional<z.ZodNumber>;
    resources: z.ZodOptional<z.ZodObject<{
        cpus: z.ZodOptional<z.ZodNumber>;
        memoryMib: z.ZodOptional<z.ZodNumber>;
    }, z.core.$strip>>;
    process: z.ZodOptional<z.ZodObject<{
        workdir: z.ZodOptional<z.ZodString>;
        shell: z.ZodOptional<z.ZodString>;
        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        entrypoint: z.ZodOptional<z.ZodArray<z.ZodString>>;
        user: z.ZodOptional<z.ZodString>;
        scripts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        rlimits: z.ZodOptional<z.ZodArray<z.ZodObject<{
            resource: z.ZodString;
            soft: z.ZodNumber;
            hard: z.ZodOptional<z.ZodNumber>;
        }, z.core.$strip>>>;
        init: z.ZodOptional<z.ZodObject<{
            path: z.ZodString;
            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        }, z.core.$strip>>;
    }, z.core.$strip>>;
    lifecycle: z.ZodOptional<z.ZodObject<{
        detached: z.ZodOptional<z.ZodBoolean>;
        replace: z.ZodOptional<z.ZodBoolean>;
        replaceTimeoutMs: z.ZodOptional<z.ZodNumber>;
        maxDurationSecs: z.ZodOptional<z.ZodNumber>;
        idleTimeoutSecs: z.ZodOptional<z.ZodNumber>;
        logLevel: z.ZodOptional<z.ZodEnum<{
            error: "error";
            warn: "warn";
            info: "info";
            debug: "debug";
            trace: "trace";
        }>>;
        metricsSampleIntervalMs: z.ZodOptional<z.ZodNumber>;
        disableMetricsSample: z.ZodOptional<z.ZodBoolean>;
        quietLogs: z.ZodOptional<z.ZodBoolean>;
    }, z.core.$strip>>;
    network: z.ZodOptional<z.ZodObject<{
        disabled: z.ZodOptional<z.ZodBoolean>;
        ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
            hostPort: z.ZodNumber;
            guestPort: z.ZodNumber;
            bindAddress: z.ZodOptional<z.ZodString>;
            protocol: z.ZodOptional<z.ZodEnum<{
                tcp: "tcp";
                udp: "udp";
            }>>;
        }, z.core.$strip>>>;
        maxConnections: z.ZodOptional<z.ZodNumber>;
        trustHostCas: z.ZodOptional<z.ZodBoolean>;
        ipv4Pool: z.ZodOptional<z.ZodString>;
        ipv6Pool: z.ZodOptional<z.ZodString>;
        dns: z.ZodOptional<z.ZodObject<{
            allowRebind: z.ZodOptional<z.ZodBoolean>;
            nameservers: z.ZodOptional<z.ZodArray<z.ZodString>>;
            queryTimeoutMs: z.ZodOptional<z.ZodNumber>;
        }, z.core.$strip>>;
        tls: z.ZodOptional<z.ZodObject<{
            ports: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
            bypassDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
            blockQuic: z.ZodOptional<z.ZodBoolean>;
            caCertPath: z.ZodOptional<z.ZodString>;
            caKeyPath: z.ZodOptional<z.ZodString>;
            upstreamCaCertPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
            trustHostCas: z.ZodOptional<z.ZodBoolean>;
        }, z.core.$strip>>;
    }, z.core.$strip>>;
    secrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
        envVar: z.ZodString;
        value: z.ZodOptional<z.ZodString>;
        valueEnv: z.ZodOptional<z.ZodString>;
        allowedHost: z.ZodString;
    }, z.core.$strip>>>;
}, z.core.$strip>;
export declare const sandboxRestoreSchema: z.ZodObject<{
    name: z.ZodString;
    snapshot: z.ZodString;
    snapshotBase: z.ZodOptional<z.ZodString>;
    forked: z.ZodOptional<z.ZodBoolean>;
    diskOnly: z.ZodOptional<z.ZodBoolean>;
    user: z.ZodOptional<z.ZodString>;
    logLevel: z.ZodOptional<z.ZodEnum<{
        error: "error";
        warn: "warn";
        info: "info";
        debug: "debug";
        trace: "trace";
    }>>;
    externalMountPolicy: z.ZodOptional<z.ZodEnum<{
        strict: "strict";
        relaxed: "relaxed";
    }>>;
    volumes: z.ZodOptional<z.ZodArray<z.ZodObject<{
        kind: z.ZodEnum<{
            disk: "disk";
            bind: "bind";
            named: "named";
            tmpfs: "tmpfs";
        }>;
        guestPath: z.ZodString;
        hostPath: z.ZodOptional<z.ZodString>;
        name: z.ZodOptional<z.ZodString>;
        source: z.ZodOptional<z.ZodString>;
        readonly: z.ZodOptional<z.ZodBoolean>;
        noexec: z.ZodOptional<z.ZodBoolean>;
        nosuid: z.ZodOptional<z.ZodBoolean>;
        nodev: z.ZodOptional<z.ZodBoolean>;
        sizeMib: z.ZodOptional<z.ZodNumber>;
        format: z.ZodOptional<z.ZodEnum<{
            raw: "raw";
            qcow2: "qcow2";
            vmdk: "vmdk";
        }>>;
        fstype: z.ZodOptional<z.ZodString>;
        statVirtualization: z.ZodOptional<z.ZodEnum<{
            strict: "strict";
            relaxed: "relaxed";
            off: "off";
        }>>;
        hostPermissions: z.ZodOptional<z.ZodEnum<{
            private: "private";
            mirror: "mirror";
        }>>;
    }, z.core.$strict>>>;
    ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
        hostPort: z.ZodNumber;
        guestPort: z.ZodNumber;
        bindAddress: z.ZodOptional<z.ZodString>;
        protocol: z.ZodOptional<z.ZodEnum<{
            tcp: "tcp";
            udp: "udp";
        }>>;
    }, z.core.$strict>>>;
    vsock: z.ZodOptional<z.ZodArray<z.ZodObject<{
        path: z.ZodString;
        port: z.ZodNumber;
        datagram: z.ZodOptional<z.ZodBoolean>;
    }, z.core.$strict>>>;
}, z.core.$strict>;
export declare function registerSandboxTools(server: McpServer): void;