import type { Command } from 'commander';
import { z } from 'zod';
import { type ReadOnlyWhitelist } from './readonly-whitelist.js';
/** The hand-authored input, relative to the package root. */
export declare const READONLY_SURFACE_RELATIVE_PATH = "contracts/readonly-surface.json";
/** The schema version of the artifact this module emits. */
export declare const READONLY_WHITELIST_SCHEMA_VERSION = 1;
declare const SurfaceEntrySchema: z.ZodObject<{
    id: z.ZodString;
    commandPath: z.ZodArray<z.ZodString>;
    argv: z.ZodArray<z.ZodString>;
    params: z.ZodRecord<z.ZodString, z.ZodObject<{
        type: z.ZodEnum<{
            enum: "enum";
            path: "path";
            token: "token";
            slug: "slug";
            integer: "integer";
        }>;
        pattern: z.ZodOptional<z.ZodString>;
        values: z.ZodOptional<z.ZodArray<z.ZodString>>;
        min: z.ZodOptional<z.ZodNumber>;
        max: z.ZodOptional<z.ZodNumber>;
        default: z.ZodOptional<z.ZodNumber>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export declare const ReadOnlySurfaceSchema: z.ZodObject<{
    schemaVersion: z.ZodLiteral<1>;
    readOnlyDefinition: z.ZodString;
    note: z.ZodDefault<z.ZodArray<z.ZodString>>;
    tools: z.ZodArray<z.ZodObject<{
        tool: z.ZodString;
        entries: z.ZodArray<z.ZodObject<{
            id: z.ZodString;
            commandPath: z.ZodArray<z.ZodString>;
            argv: z.ZodArray<z.ZodString>;
            params: z.ZodRecord<z.ZodString, z.ZodObject<{
                type: z.ZodEnum<{
                    enum: "enum";
                    path: "path";
                    token: "token";
                    slug: "slug";
                    integer: "integer";
                }>;
                pattern: z.ZodOptional<z.ZodString>;
                values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                min: z.ZodOptional<z.ZodNumber>;
                max: z.ZodOptional<z.ZodNumber>;
                default: z.ZodOptional<z.ZodNumber>;
            }, z.core.$strip>>;
        }, z.core.$strip>>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export type ReadOnlySurface = z.infer<typeof ReadOnlySurfaceSchema>;
export type ReadOnlySurfaceEntry = z.infer<typeof SurfaceEntrySchema>;
/** Build the artifact object from a surface declaration and a live program. */
export declare function generateReadOnlyWhitelist(surface: ReadOnlySurface, program: Command): ReadOnlyWhitelist;
/** Byte-stable serialization: two runs over the same input MUST match. */
export declare function serializeReadOnlyWhitelist(whitelist: ReadOnlyWhitelist): string;
/** Read + validate the hand-authored surface declaration. */
export declare function loadReadOnlySurface(root?: string): ReadOnlySurface;
/** Absolute path of the generated artifact. */
export declare function readonlyWhitelistPath(root?: string): string;
export {};