import * as z from "zod";
//#region src/schema.d.ts
/**
 * Default permission mode when starting an agent session.
 *
 * Agent Permission Policy modes:
 *
 * - `standard`: Prompt for unsafe operations (default)
 * - `autonomous`: Auto-approve unless deny/ask rules match
 * - `restricted`: Prompt for all operations
 * - `readonly`: Only allow read-only tools
 *
 * Claude Code compatible modes (accepted for zero-translation migration):
 *
 * - `plan`: Plan-only mode (maps to `restricted`)
 * - `dontAsk`: Auto-approve (maps to `autonomous`)
 * - `acceptEdits`: Accept edits without prompt (maps to `standard`)
 * - `bypassPermissions`: Bypass all permission checks (maps to `autonomous`)
 * - `default`: Agent default behaviour (maps to `standard`)
 *
 * **Security note**: `autonomous`, `bypassPermissions`, and `dontAsk` are only trusted from
 * personal (`permissions.local.json`) or managed (enterprise) sources — NOT from committed
 * `permissions.json`.
 */
declare const PermissionMode: z.ZodEnum<{
  default: "default";
  readonly: "readonly";
  acceptEdits: "acceptEdits";
  auto: "auto";
  bypassPermissions: "bypassPermissions";
  dontAsk: "dontAsk";
  plan: "plan";
  standard: "standard";
  autonomous: "autonomous";
  restricted: "restricted";
}>;
/**
 * A permission rule string.
 *
 * Syntax (compatible with Claude Code's permission rule format):
 *
 * | Pattern                        | Matches                             |
 * | ------------------------------ | ----------------------------------- |
 * | `Tool`                         | All invocations of the tool         |
 * | `Tool(exact command)`          | Exactly that command                |
 * | `Tool(prefix:*)`               | Commands starting with `prefix `    |
 * | `Tool(*suffix)`                | Commands ending with ` suffix`      |
 * | `Tool(pattern * middle *)`     | Commands containing both substrings |
 * | `Read(./path)`                 | File reads at that relative path    |
 * | `Read(./path/**)`              | File reads under that path (glob)   |
 * | `WebFetch(domain:example.com)` | Fetches to that domain              |
 * | `mcp__server`                  | All tools from an MCP server        |
 * | `mcp__server__tool`            | A specific MCP tool                 |
 */
declare const PermissionRule: z.ZodString;
declare const PermissionTiers: z.ZodObject<{
  allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
  deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
  ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
  additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
  defaultMode: z.ZodOptional<z.ZodEnum<{
    default: "default";
    readonly: "readonly";
    acceptEdits: "acceptEdits";
    auto: "auto";
    bypassPermissions: "bypassPermissions";
    dontAsk: "dontAsk";
    plan: "plan";
    standard: "standard";
    autonomous: "autonomous";
    restricted: "restricted";
  }>>;
}, z.core.$strict>;
declare const RuleCondition: z.ZodObject<{
  cwd: z.ZodOptional<z.ZodString>;
  branch: z.ZodOptional<z.ZodString>;
  env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
  actor: z.ZodOptional<z.ZodString>;
  role: z.ZodOptional<z.ZodString>;
  remote: z.ZodOptional<z.ZodString>;
  predicate: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
}, z.core.$strict>;
declare const Rule: z.ZodObject<{
  tool: z.ZodString;
  pattern: z.ZodOptional<z.ZodString>;
  tier: z.ZodEnum<{
    allow: "allow";
    deny: "deny";
    ask: "ask";
  }>;
  approvers: z.ZodOptional<z.ZodObject<{
    roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
    actors: z.ZodOptional<z.ZodArray<z.ZodString>>;
    timeoutSeconds: z.ZodOptional<z.ZodNumber>;
  }, z.core.$strict>>;
  hidden: z.ZodOptional<z.ZodLiteral<true>>;
  when: z.ZodOptional<z.ZodObject<{
    cwd: z.ZodOptional<z.ZodString>;
    branch: z.ZodOptional<z.ZodString>;
    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
    actor: z.ZodOptional<z.ZodString>;
    role: z.ZodOptional<z.ZodString>;
    remote: z.ZodOptional<z.ZodString>;
    predicate: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
  }, z.core.$strict>>;
}, z.core.$strict>;
declare const Delegation: z.ZodObject<{
  maxDepth: z.ZodOptional<z.ZodNumber>;
  nonDelegable: z.ZodOptional<z.ZodArray<z.ZodString>>;
  bubbleUp: z.ZodOptional<z.ZodBoolean>;
  agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
    allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
    deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
    ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
    additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
    defaultMode: z.ZodOptional<z.ZodEnum<{
      default: "default";
      readonly: "readonly";
      acceptEdits: "acceptEdits";
      auto: "auto";
      bypassPermissions: "bypassPermissions";
      dontAsk: "dontAsk";
      plan: "plan";
      standard: "standard";
      autonomous: "autonomous";
      restricted: "restricted";
    }>>;
  }, z.core.$strict>>>;
}, z.core.$strip>;
/**
 * Sandbox mode — OS-level isolation for agent tool execution.
 *
 * When set, the agent harness should enforce filesystem and network boundaries at the OS level
 * (sandbox, container, namespace, etc). This is orthogonal to permission rules — rules control what
 * the agent _asks_ to do; sandbox controls what the OS _allows_ it to do.
 *
 * Maps to Codex's `sandbox_mode` field.
 */
declare const SandboxMode: z.ZodEnum<{
  readonly: "readonly";
  "workspace-write": "workspace-write";
  "full-access": "full-access";
}>;
declare const Sandbox: z.ZodObject<{
  mode: z.ZodOptional<z.ZodEnum<{
    readonly: "readonly";
    "workspace-write": "workspace-write";
    "full-access": "full-access";
  }>>;
  writableRoots: z.ZodOptional<z.ZodArray<z.ZodString>>;
  networkAccess: z.ZodOptional<z.ZodBoolean>;
}, z.core.$strict>;
/**
 * Named permission profiles that can be selected at session start.
 *
 * Maps to Codex's `permissions.<name>` + `default_permissions` fields. Agents that don't support
 * named profiles should use the profile specified by `activeProfile` (or `"default"` if unset).
 */
/** What a role may do: the permission tiers that apply to actors holding it. */
declare const RoleTiers: z.ZodObject<{
  allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
  deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
  ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
}, z.core.$strict>;
/** A profile: permission tiers, optionally extending other profiles by name. */
declare const ProfileTiers: z.ZodObject<{
  allow: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
  deny: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
  ask: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
  additionalDirectories: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
  defaultMode: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
    default: "default";
    readonly: "readonly";
    acceptEdits: "acceptEdits";
    auto: "auto";
    bypassPermissions: "bypassPermissions";
    dontAsk: "dontAsk";
    plan: "plan";
    standard: "standard";
    autonomous: "autonomous";
    restricted: "restricted";
  }>>>;
  extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
}, z.core.$strict>;
declare const Profiles: z.ZodRecord<z.ZodString, z.ZodObject<{
  allow: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
  deny: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
  ask: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
  additionalDirectories: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
  defaultMode: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
    default: "default";
    readonly: "readonly";
    acceptEdits: "acceptEdits";
    auto: "auto";
    bypassPermissions: "bypassPermissions";
    dontAsk: "dontAsk";
    plan: "plan";
    standard: "standard";
    autonomous: "autonomous";
    restricted: "restricted";
  }>>>;
  extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
}, z.core.$strict>>;
declare const Network: z.ZodObject<{
  enabled: z.ZodOptional<z.ZodBoolean>;
  domains: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
    allow: "allow";
    deny: "deny";
  }>>>;
}, z.core.$strict>;
declare const AgentPermissionPolicy: z.ZodObject<{
  $schema: z.ZodOptional<z.ZodString>;
  defaultMode: z.ZodOptional<z.ZodEnum<{
    default: "default";
    readonly: "readonly";
    acceptEdits: "acceptEdits";
    auto: "auto";
    bypassPermissions: "bypassPermissions";
    dontAsk: "dontAsk";
    plan: "plan";
    standard: "standard";
    autonomous: "autonomous";
    restricted: "restricted";
  }>>;
  ceiling: z.ZodOptional<z.ZodBoolean>;
  activeProfile: z.ZodOptional<z.ZodString>;
  permissions: z.ZodOptional<z.ZodObject<{
    allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
    deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
    ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
    additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
    defaultMode: z.ZodOptional<z.ZodEnum<{
      default: "default";
      readonly: "readonly";
      acceptEdits: "acceptEdits";
      auto: "auto";
      bypassPermissions: "bypassPermissions";
      dontAsk: "dontAsk";
      plan: "plan";
      standard: "standard";
      autonomous: "autonomous";
      restricted: "restricted";
    }>>;
  }, z.core.$strict>>;
  rules: z.ZodOptional<z.ZodArray<z.ZodObject<{
    tool: z.ZodString;
    pattern: z.ZodOptional<z.ZodString>;
    tier: z.ZodEnum<{
      allow: "allow";
      deny: "deny";
      ask: "ask";
    }>;
    approvers: z.ZodOptional<z.ZodObject<{
      roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
      actors: z.ZodOptional<z.ZodArray<z.ZodString>>;
      timeoutSeconds: z.ZodOptional<z.ZodNumber>;
    }, z.core.$strict>>;
    hidden: z.ZodOptional<z.ZodLiteral<true>>;
    when: z.ZodOptional<z.ZodObject<{
      cwd: z.ZodOptional<z.ZodString>;
      branch: z.ZodOptional<z.ZodString>;
      env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
      actor: z.ZodOptional<z.ZodString>;
      role: z.ZodOptional<z.ZodString>;
      remote: z.ZodOptional<z.ZodString>;
      predicate: z.ZodOptional<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
    }, z.core.$strict>>;
  }, z.core.$strict>>>;
  roles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
    allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
    deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
    ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
  }, z.core.$strict>>>;
  profiles: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
    allow: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
    deny: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
    ask: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
    additionalDirectories: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodString>>>;
    defaultMode: z.ZodOptional<z.ZodOptional<z.ZodEnum<{
      default: "default";
      readonly: "readonly";
      acceptEdits: "acceptEdits";
      auto: "auto";
      bypassPermissions: "bypassPermissions";
      dontAsk: "dontAsk";
      plan: "plan";
      standard: "standard";
      autonomous: "autonomous";
      restricted: "restricted";
    }>>>;
    extends: z.ZodOptional<z.ZodArray<z.ZodString>>;
  }, z.core.$strict>>>;
  delegation: z.ZodOptional<z.ZodObject<{
    maxDepth: z.ZodOptional<z.ZodNumber>;
    nonDelegable: z.ZodOptional<z.ZodArray<z.ZodString>>;
    bubbleUp: z.ZodOptional<z.ZodBoolean>;
    agents: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
      allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
      deny: z.ZodOptional<z.ZodArray<z.ZodString>>;
      ask: z.ZodOptional<z.ZodArray<z.ZodString>>;
      additionalDirectories: z.ZodOptional<z.ZodArray<z.ZodString>>;
      defaultMode: z.ZodOptional<z.ZodEnum<{
        default: "default";
        readonly: "readonly";
        acceptEdits: "acceptEdits";
        auto: "auto";
        bypassPermissions: "bypassPermissions";
        dontAsk: "dontAsk";
        plan: "plan";
        standard: "standard";
        autonomous: "autonomous";
        restricted: "restricted";
      }>>;
    }, z.core.$strict>>>;
  }, z.core.$strip>>;
  sandbox: z.ZodOptional<z.ZodObject<{
    mode: z.ZodOptional<z.ZodEnum<{
      readonly: "readonly";
      "workspace-write": "workspace-write";
      "full-access": "full-access";
    }>>;
    writableRoots: z.ZodOptional<z.ZodArray<z.ZodString>>;
    networkAccess: z.ZodOptional<z.ZodBoolean>;
  }, z.core.$strict>>;
  network: z.ZodOptional<z.ZodObject<{
    enabled: z.ZodOptional<z.ZodBoolean>;
    domains: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
      allow: "allow";
      deny: "deny";
    }>>>;
  }, z.core.$strict>>;
  env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
  with: z.ZodOptional<z.ZodArray<z.ZodEnum<{
    "claude-code": "claude-code";
    codex: "codex";
    kiro: "kiro";
    opencode: "opencode";
    crush: "crush";
  }>>>;
  without: z.ZodOptional<z.ZodArray<z.ZodEnum<{
    "claude-code": "claude-code";
    codex: "codex";
    kiro: "kiro";
    opencode: "opencode";
    crush: "crush";
  }>>>;
  up: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
    all: "all";
  }>, z.ZodNumber]>>;
  sync: z.ZodOptional<z.ZodObject<{
    mode: z.ZodOptional<z.ZodUnion<readonly [z.ZodEnum<{
      sync: "sync";
      watch: "watch";
    }>, z.ZodLiteral<false>]>>;
    backup: z.ZodOptional<z.ZodBoolean>;
  }, z.core.$strip>>;
}, z.core.$strict>;
type AgentPermissionPolicy = z.infer<typeof AgentPermissionPolicy>;
type PermissionTiers = z.infer<typeof PermissionTiers>;
type Rule = z.infer<typeof Rule>;
type RuleCondition = z.infer<typeof RuleCondition>;
type Delegation = z.infer<typeof Delegation>;
type PermissionMode = z.infer<typeof PermissionMode>;
type SandboxMode = z.infer<typeof SandboxMode>;
type Sandbox = z.infer<typeof Sandbox>;
type Profiles = z.infer<typeof Profiles>;
type Network = z.infer<typeof Network>;
//#endregion
export { PermissionRule as a, Profiles as c, RuleCondition as d, Sandbox as f, PermissionMode as i, RoleTiers as l, Delegation as n, PermissionTiers as o, SandboxMode as p, Network as r, ProfileTiers as s, AgentPermissionPolicy as t, Rule as u };
//# sourceMappingURL=schema-BXTTXvJl.d.cts.map