import { t as AgentPermissionPolicy } from "../schema-BXTTXvJl.mjs"; import * as z from "zod"; //#region src/compat/codecs.d.ts export declare const agentId: z.ZodEnum<{ "claude-code": "claude-code"; codex: "codex"; kiro: "kiro"; opencode: "opencode"; crush: "crush"; omp: "omp"; }>; export type AgentId = z.infer; export declare const claudeCodeCodec: z.ZodCodec>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; defaultMode: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; }, z.core.$strict>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; export declare const opencodeCodec: z.ZodCodec, z.ZodObject<{ read: z.ZodOptional, z.ZodRecord>]>>; edit: z.ZodOptional, z.ZodRecord>]>>; glob: z.ZodOptional, z.ZodRecord>]>>; grep: z.ZodOptional, z.ZodRecord>]>>; list: z.ZodOptional, z.ZodRecord>]>>; bash: z.ZodOptional, z.ZodRecord>]>>; task: z.ZodOptional, z.ZodRecord>]>>; external_directory: z.ZodOptional, z.ZodRecord>]>>; todowrite: z.ZodOptional>; question: z.ZodOptional>; webfetch: z.ZodOptional>; websearch: z.ZodOptional>; lsp: z.ZodOptional, z.ZodRecord>]>>; doom_loop: z.ZodOptional>; skill: z.ZodOptional, z.ZodRecord>]>>; }, z.core.$strict>]>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; export declare const crushCodec: z.ZodCodec; }, z.core.$strict>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; export declare const kiroCodec: z.ZodCodec>; toolsSettings: z.ZodOptional>>; deniedCommands: z.ZodOptional>>; autoAllowReadonly: z.ZodOptional>; denyByDefault: z.ZodOptional>; }, z.core.$strip>>>; read: z.ZodOptional>>; deniedPaths: z.ZodOptional>>; }, z.core.$strip>>>; write: z.ZodOptional>>; deniedPaths: z.ZodOptional>>; }, z.core.$strip>>>; aws: z.ZodOptional>>; deniedServices: z.ZodOptional>>; autoAllowReadonly: z.ZodOptional>; }, z.core.$strip>>>; web_fetch: z.ZodOptional>>; blocked: z.ZodOptional>>; }, z.core.$strip>>>; }, z.core.$strip>>; }, z.core.$strip>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; /** One Codex filesystem entry: an access value, or a table of descendant subpaths under its key. */ declare const codexFilesystemEntry: z.ZodUnion, z.ZodRecord>]>; type CodexFilesystemEntry = z.infer; /** * Codex native config object — what a TOML parser produces from codex config. Only the * permission-relevant fields; the full schema has 60+ keys. */ declare const codexNative: z.ZodObject<{ approval_policy: z.ZodOptional, z.ZodObject<{ granular: z.ZodObject<{ sandbox_approval: z.ZodBoolean; rules: z.ZodBoolean; mcp_elicitations: z.ZodBoolean; request_permissions: z.ZodOptional; skill_approval: z.ZodOptional; }, z.core.$strip>; }, z.core.$strip>]>>; sandbox_mode: z.ZodOptional>; default_permissions: z.ZodOptional; sandbox_workspace_write: z.ZodOptional>>; network_access: z.ZodOptional>; exclude_slash_tmp: z.ZodOptional>; exclude_tmpdir_env_var: z.ZodOptional>; }, z.core.$strip>>; permissions: z.ZodOptional, z.ZodRecord>]>>>; network: z.ZodOptional>; domains: z.ZodOptional>>>; }, z.core.$strip>>; }, z.core.$strip>>>; }, z.core.$strip>; export interface CodexProfile { filesystem?: Record | undefined; network?: { enabled?: boolean | undefined; domains?: Record | undefined; } | undefined; } export declare const codexCodec: z.ZodCodec, z.ZodObject<{ granular: z.ZodObject<{ sandbox_approval: z.ZodBoolean; rules: z.ZodBoolean; mcp_elicitations: z.ZodBoolean; request_permissions: z.ZodOptional; skill_approval: z.ZodOptional; }, z.core.$strip>; }, z.core.$strip>]>>; sandbox_mode: z.ZodOptional>; default_permissions: z.ZodOptional; sandbox_workspace_write: z.ZodOptional>>; network_access: z.ZodOptional>; exclude_slash_tmp: z.ZodOptional>; exclude_tmpdir_env_var: z.ZodOptional>; }, z.core.$strip>>; permissions: z.ZodOptional, z.ZodRecord>]>>>; network: z.ZodOptional>; domains: z.ZodOptional>>>; }, z.core.$strip>>; }, z.core.$strip>>>; }, z.core.$strip>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; /** * Where the execpolicy rules file goes, relative to the directory holding Codex's config. Codex loads every `*.rules` file in the `rules` directory of each config layer (`~/.codex/rules`, a project's `.codex/rules`). */ export declare const CODEX_EXECPOLICY_RULES_PATH = "rules/agent-perms.rules"; /** * A canonical policy encoded for Codex: the config object, and the content of an execpolicy rules file when the policy has command rules. */ export interface CodexEncoding { config: z.input; /** Starlark `prefix_rule` calls for {@link CODEX_EXECPOLICY_RULES_PATH}, or `undefined` when there are none. */ rules: string | undefined; } /** * Encode a canonical policy for Codex, writing its top-level command `deny` and `ask` rules as execpolicy prefix rules (`forbidden` and `prompt`) instead of refusing them. Only a `prefix:*` pattern, or one whose sole wildcard is a trailing ` *`, made of plain words, is written; a command `allow` is left out, which is stricter. * * @throws UnsupportedCapabilityError listing every restrictive rule Codex cannot enforce exactly, including a command rule in a named profile, since a rules file applies to every profile. */ export declare function encodeCodex(canonical: AgentPermissionPolicy): CodexEncoding; /** * What encoding writes into an OMP config: its only keys a conversion or a sync changes, so * everything else in the file can be left as it is. */ export declare const OmpEncoded: z.ZodObject<{ bash: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>>; tools: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strip>; export type OmpEncoded = z.infer; /** OMP's approval modes, from the least to the most permissive. */ export declare const OMP_APPROVAL_MODES: readonly ["always-ask", "write", "yolo"]; export declare const ompCodec: z.ZodCodec>; }, z.core.$loose>>; tools: z.ZodOptional>; }, z.core.$loose>>; }, z.core.$loose>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; export declare const CODECS: { readonly "claude-code": z.ZodCodec>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; defaultMode: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; }, z.core.$strict>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; readonly codex: z.ZodCodec, z.ZodObject<{ granular: z.ZodObject<{ sandbox_approval: z.ZodBoolean; rules: z.ZodBoolean; mcp_elicitations: z.ZodBoolean; request_permissions: z.ZodOptional; skill_approval: z.ZodOptional; }, z.core.$strip>; }, z.core.$strip>]>>; sandbox_mode: z.ZodOptional>; default_permissions: z.ZodOptional; sandbox_workspace_write: z.ZodOptional>>; network_access: z.ZodOptional>; exclude_slash_tmp: z.ZodOptional>; exclude_tmpdir_env_var: z.ZodOptional>; }, z.core.$strip>>; permissions: z.ZodOptional, z.ZodRecord>]>>>; network: z.ZodOptional>; domains: z.ZodOptional>>>; }, z.core.$strip>>; }, z.core.$strip>>>; }, z.core.$strip>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; readonly kiro: z.ZodCodec>; toolsSettings: z.ZodOptional>>; deniedCommands: z.ZodOptional>>; autoAllowReadonly: z.ZodOptional>; denyByDefault: z.ZodOptional>; }, z.core.$strip>>>; read: z.ZodOptional>>; deniedPaths: z.ZodOptional>>; }, z.core.$strip>>>; write: z.ZodOptional>>; deniedPaths: z.ZodOptional>>; }, z.core.$strip>>>; aws: z.ZodOptional>>; deniedServices: z.ZodOptional>>; autoAllowReadonly: z.ZodOptional>; }, z.core.$strip>>>; web_fetch: z.ZodOptional>>; blocked: z.ZodOptional>>; }, z.core.$strip>>>; }, z.core.$strip>>; }, z.core.$strip>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; readonly opencode: z.ZodCodec, z.ZodObject<{ read: z.ZodOptional, z.ZodRecord>]>>; edit: z.ZodOptional, z.ZodRecord>]>>; glob: z.ZodOptional, z.ZodRecord>]>>; grep: z.ZodOptional, z.ZodRecord>]>>; list: z.ZodOptional, z.ZodRecord>]>>; bash: z.ZodOptional, z.ZodRecord>]>>; task: z.ZodOptional, z.ZodRecord>]>>; external_directory: z.ZodOptional, z.ZodRecord>]>>; todowrite: z.ZodOptional>; question: z.ZodOptional>; webfetch: z.ZodOptional>; websearch: z.ZodOptional>; lsp: z.ZodOptional, z.ZodRecord>]>>; doom_loop: z.ZodOptional>; skill: z.ZodOptional, z.ZodRecord>]>>; }, z.core.$strict>]>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; readonly crush: z.ZodCodec; }, z.core.$strict>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; readonly omp: z.ZodCodec>; }, z.core.$loose>>; tools: z.ZodOptional>; }, z.core.$loose>>; }, z.core.$loose>, z.ZodObject<{ $schema: z.ZodOptional; defaultMode: z.ZodOptional>; ceiling: z.ZodOptional; activeProfile: z.ZodOptional; permissions: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>; rules: z.ZodOptional; tier: z.ZodEnum<{ allow: "allow"; deny: "deny"; ask: "ask"; }>; approvers: z.ZodOptional>; actors: z.ZodOptional>; timeoutSeconds: z.ZodOptional; }, z.core.$strict>>; hidden: z.ZodOptional>; when: z.ZodOptional; branch: z.ZodOptional; env: z.ZodOptional>; actor: z.ZodOptional; role: z.ZodOptional; remote: z.ZodOptional; predicate: z.ZodOptional>>; }, z.core.$strict>>; }, z.core.$strict>>>; roles: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; }, z.core.$strict>>>; profiles: z.ZodOptional>>; deny: z.ZodOptional>>; ask: z.ZodOptional>>; additionalDirectories: z.ZodOptional>>; defaultMode: z.ZodOptional>>; extends: z.ZodOptional>; }, z.core.$strict>>>; delegation: z.ZodOptional; nonDelegable: z.ZodOptional>; bubbleUp: z.ZodOptional; agents: z.ZodOptional>; deny: z.ZodOptional>; ask: z.ZodOptional>; additionalDirectories: z.ZodOptional>; defaultMode: z.ZodOptional>; }, z.core.$strict>>>; }, z.core.$strip>>; sandbox: z.ZodOptional>; writableRoots: z.ZodOptional>; networkAccess: z.ZodOptional; }, z.core.$strict>>; network: z.ZodOptional; domains: z.ZodOptional>>; }, z.core.$strict>>; env: z.ZodOptional>; with: z.ZodOptional>>; without: z.ZodOptional>>; up: z.ZodOptional, z.ZodNumber]>>; sync: z.ZodOptional, z.ZodLiteral]>>; backup: z.ZodOptional; }, z.core.$strip>>; }, z.core.$strict>>; }; export type Codecs = typeof CODECS; //#endregion //# sourceMappingURL=codecs.d.mts.map