@intentic/sandbox-contract 1.230.3 → 1.232.0

package/dist/definition.d.ts

@@ -0,0 +1,961 @@
+import { z } from "zod";
+export declare const DefinitionRepositorySchema: z.ZodObject<{
+    id: z.ZodString;
+    remote: z.ZodString;
+    ref: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DefinitionRepository = z.infer<typeof DefinitionRepositorySchema>;
+export declare const DefinitionEnvironmentSchema: z.ZodObject<{
+    baseImage: z.ZodOptional<z.ZodString>;
+    dockerfile: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DefinitionEnvironment = z.infer<typeof DefinitionEnvironmentSchema>;
+export declare const SandboxDefinitionSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    name: z.ZodOptional<z.ZodString>;
+    environment: z.ZodPrefault<z.ZodObject<{
+        baseImage: z.ZodOptional<z.ZodString>;
+        dockerfile: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    repositories: z.ZodPrefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        remote: z.ZodString;
+        ref: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    capabilities: z.ZodPrefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"devops">;
+        config: z.ZodObject<{}, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"monorepo">;
+        config: z.ZodObject<{}, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"mcp">;
+        config: z.ZodObject<{
+            url: z.ZodURL;
+            token: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"service">;
+        config: z.ZodObject<{
+            service: z.ZodEnum<{
+                infisical: "infisical";
+                invoiceninja: "invoiceninja";
+                openproject: "openproject";
+                outline: "outline";
+                paperless: "paperless";
+                signoz: "signoz";
+            }>;
+            domain: z.ZodString;
+            on: z.ZodString;
+            expose: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"integration">;
+        config: z.ZodObject<{
+            provider: z.ZodLiteral<"stripe">;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"cli">;
+        config: z.ZodObject<{
+            provider: z.ZodString;
+        }, z.core.$catchall<z.ZodString>>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"plugin">;
+        config: z.ZodObject<{
+            url: z.ZodURL;
+            ref: z.ZodOptional<z.ZodString>;
+            path: z.ZodOptional<z.ZodString>;
+            token: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"extension">;
+        config: z.ZodObject<{
+            url: z.ZodURL;
+            ref: z.ZodString;
+            path: z.ZodOptional<z.ZodString>;
+            token: z.ZodOptional<z.ZodString>;
+            tier: z.ZodOptional<z.ZodEnum<{
+                free: "free";
+                premium: "premium";
+            }>>;
+            registry: z.ZodOptional<z.ZodURL>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"ssh">;
+        config: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            auth: z.ZodLiteral<"key">;
+            host: z.ZodString;
+            port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+            user: z.ZodString;
+            privateKey: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            auth: z.ZodLiteral<"password">;
+            host: z.ZodString;
+            port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+            user: z.ZodString;
+            password: z.ZodString;
+        }, z.core.$strip>], "auth">;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"vpn">;
+        config: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            provider: z.ZodLiteral<"wireguard">;
+            config: z.ZodString;
+            autoConnect: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+        }, z.core.$strip>, z.ZodObject<{
+            provider: z.ZodLiteral<"fortinet">;
+            server: z.ZodString;
+            port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+            username: z.ZodString;
+            password: z.ZodString;
+            trustedCert: z.ZodOptional<z.ZodString>;
+            realm: z.ZodOptional<z.ZodString>;
+            autoConnect: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+        }, z.core.$strip>, z.ZodObject<{
+            provider: z.ZodLiteral<"ipsec">;
+            server: z.ZodString;
+            presharedKey: z.ZodString;
+            localId: z.ZodOptional<z.ZodString>;
+            remoteId: z.ZodOptional<z.ZodString>;
+            username: z.ZodOptional<z.ZodString>;
+            password: z.ZodOptional<z.ZodString>;
+            ikeVersion: z.ZodDefault<z.ZodEnum<{
+                1: "1";
+                2: "2";
+            }>>;
+            pfs: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            dhGroup: z.ZodDefault<z.ZodEnum<{
+                14: "14";
+                15: "15";
+                16: "16";
+                19: "19";
+                2: "2";
+                20: "20";
+                5: "5";
+            }>>;
+            aggressive: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            routedNetworks: z.ZodDefault<z.ZodString>;
+            autoConnect: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+        }, z.core.$strip>], "provider">;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"exit">;
+        config: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            provider: z.ZodLiteral<"tor">;
+            country: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+            autoStart: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+        }, z.core.$strip>, z.ZodObject<{
+            provider: z.ZodLiteral<"vpngate">;
+            country: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+            autoStart: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+        }, z.core.$strip>, z.ZodObject<{
+            provider: z.ZodLiteral<"wireguard">;
+            config: z.ZodString;
+            country: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+            autoStart: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+        }, z.core.$strip>], "provider">;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"docker">;
+        config: z.ZodObject<{
+            gpu: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            registryMirror: z.ZodOptional<z.ZodURL>;
+            insecureRegistries: z.ZodOptional<z.ZodString>;
+            addressPool: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"browser">;
+        config: z.ZodObject<{
+            platform: z.ZodString;
+            username: z.ZodOptional<z.ZodString>;
+            password: z.ZodOptional<z.ZodString>;
+            identity: z.ZodOptional<z.ZodString>;
+            purpose: z.ZodOptional<z.ZodString>;
+            openedAt: z.ZodOptional<z.ZodString>;
+            exit: z.ZodOptional<z.ZodString>;
+        }, z.core.$catchall<z.ZodString>>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"identity">;
+        config: z.ZodObject<{
+            email: z.ZodString;
+            password: z.ZodOptional<z.ZodString>;
+            mailbox: z.ZodOptional<z.ZodString>;
+            loginUrl: z.ZodOptional<z.ZodURL>;
+            openAccounts: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            exit: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"host">;
+        config: z.ZodObject<{
+            shell: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            write: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            screen: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            control: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            sandboxes: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            sandboxRemove: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            roots: z.ZodOptional<z.ZodString>;
+            platform: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"agent">;
+        config: z.ZodObject<{
+            command: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            env: z.ZodOptional<z.ZodString>;
+            loginCommand: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"endpoint">;
+        config: z.ZodObject<{
+            baseUrl: z.ZodURL;
+            protocol: z.ZodDefault<z.ZodEnum<{
+                anthropic: "anthropic";
+                openai: "openai";
+            }>>;
+            apiKey: z.ZodOptional<z.ZodString>;
+            headers: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"localmodel">;
+        config: z.ZodObject<{
+            model: z.ZodString;
+            gpu: z.ZodDefault<z.ZodEnum<{
+                off: "off";
+                on: "on";
+            }>>;
+            url: z.ZodOptional<z.ZodURL>;
+            context: z.ZodDefault<z.ZodUnion<readonly [z.ZodEnum<{
+                131072: "131072";
+                16384: "16384";
+                32768: "32768";
+                65536: "65536";
+            }>, z.ZodLiteral<"custom">]>>;
+            contextTokens: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+        }, z.core.$strip>;
+    }, z.core.$strip>, z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodLiteral<"wallet">;
+        config: z.ZodObject<{
+            network: z.ZodDefault<z.ZodEnum<{
+                "eip155:8453": "eip155:8453";
+                "eip155:84532": "eip155:84532";
+            }>>;
+            address: z.ZodOptional<z.ZodString>;
+            perPaymentMaxUsd: z.ZodDefault<z.ZodString>;
+            autoApproveUnderUsd: z.ZodDefault<z.ZodString>;
+            dailyCapUsd: z.ZodDefault<z.ZodString>;
+            allow: z.ZodOptional<z.ZodString>;
+            deny: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>], "kind">>>;
+    secrets: z.ZodPrefault<z.ZodArray<z.ZodString>>;
+    settings: z.ZodType<Partial<{
+        stableSystemPrompt: boolean;
+        skills: string[];
+        hashlineEdits: boolean;
+        terseOutput: boolean;
+        terseHoldout: number;
+        systemPromptMode: "claude" | "custom" | "intentic";
+        systemPrompt: string;
+        iqSearch: boolean;
+        iqSearchHoldout: number;
+        workspaceMap: boolean;
+        outputCleaners: string;
+        outputHoldout: number;
+        quickModel: string[];
+        changelogRepos: string[];
+        agentRunModels: string[];
+        agentRunEffort: string;
+        autoTier: "off" | "on" | "shadow";
+        autoTierEagerness: "balanced" | "cautious" | "eager";
+        autoFastModels: string[];
+        agentRetentionDays: number;
+        resumeAfterOutage: boolean;
+        autoResumeOnRestart: boolean;
+        rules: {
+            id: string;
+            label: string;
+            moment: "agent.finished" | "push.starting" | "turn.ending";
+            when?: {
+                repo?: string | undefined;
+                paths?: string[] | undefined;
+                outcome?: ("clean" | "conflict" | "error")[] | undefined;
+            } | undefined;
+            action: {
+                kind: "command";
+                command: string;
+                timeoutMs: number;
+            } | {
+                kind: "instruct";
+                text: string;
+            } | {
+                kind: "verdict";
+                verdict: "allow" | "hold";
+            } | {
+                kind: "builtin";
+                name: "verify-edits";
+            };
+            enabled: boolean;
+        }[];
+        automationFailureLimit: number;
+        admission: {
+            schedule: "allow" | "deny" | "hold";
+            event: "allow" | "deny" | "hold";
+            listener: "allow" | "deny" | "hold";
+            webchat: "allow" | "deny" | "hold";
+            workspace: "allow" | "deny" | "hold";
+            workflow: "allow" | "deny";
+        };
+        actionRules: Record<string, "allow" | "deny" | "hold">;
+        commandRules: Partial<Record<"files.destructive" | "git.destructive" | "network.outbound" | "package.publish" | "secrets.access", "allow" | "deny" | "hold">>;
+        subagentsAtOnce: number;
+        subagentsPerTurn: number;
+        subagentDepth: number;
+    }>, unknown, z.core.$ZodTypeInternals<Partial<{
+        stableSystemPrompt: boolean;
+        skills: string[];
+        hashlineEdits: boolean;
+        terseOutput: boolean;
+        terseHoldout: number;
+        systemPromptMode: "claude" | "custom" | "intentic";
+        systemPrompt: string;
+        iqSearch: boolean;
+        iqSearchHoldout: number;
+        workspaceMap: boolean;
+        outputCleaners: string;
+        outputHoldout: number;
+        quickModel: string[];
+        changelogRepos: string[];
+        agentRunModels: string[];
+        agentRunEffort: string;
+        autoTier: "off" | "on" | "shadow";
+        autoTierEagerness: "balanced" | "cautious" | "eager";
+        autoFastModels: string[];
+        agentRetentionDays: number;
+        resumeAfterOutage: boolean;
+        autoResumeOnRestart: boolean;
+        rules: {
+            id: string;
+            label: string;
+            moment: "agent.finished" | "push.starting" | "turn.ending";
+            when?: {
+                repo?: string | undefined;
+                paths?: string[] | undefined;
+                outcome?: ("clean" | "conflict" | "error")[] | undefined;
+            } | undefined;
+            action: {
+                kind: "command";
+                command: string;
+                timeoutMs: number;
+            } | {
+                kind: "instruct";
+                text: string;
+            } | {
+                kind: "verdict";
+                verdict: "allow" | "hold";
+            } | {
+                kind: "builtin";
+                name: "verify-edits";
+            };
+            enabled: boolean;
+        }[];
+        automationFailureLimit: number;
+        admission: {
+            schedule: "allow" | "deny" | "hold";
+            event: "allow" | "deny" | "hold";
+            listener: "allow" | "deny" | "hold";
+            webchat: "allow" | "deny" | "hold";
+            workspace: "allow" | "deny" | "hold";
+            workflow: "allow" | "deny";
+        };
+        actionRules: Record<string, "allow" | "deny" | "hold">;
+        commandRules: Partial<Record<"files.destructive" | "git.destructive" | "network.outbound" | "package.publish" | "secrets.access", "allow" | "deny" | "hold">>;
+        subagentsAtOnce: number;
+        subagentsPerTurn: number;
+        subagentDepth: number;
+    }>, unknown>>;
+}, z.core.$strip>;
+export type SandboxDefinition = z.infer<typeof SandboxDefinitionSchema>;
+export declare const DefinitionActionSchema: z.ZodObject<{
+    subject: z.ZodString;
+    detail: z.ZodString;
+}, z.core.$strip>;
+export type DefinitionAction = z.infer<typeof DefinitionActionSchema>;
+export declare const DefinitionExportSchema: z.ZodObject<{
+    toml: z.ZodString;
+    omitted: z.ZodArray<z.ZodObject<{
+        subject: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DefinitionExport = z.infer<typeof DefinitionExportSchema>;
+export declare const DefinitionItemSchema: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodEnum<{
+        capability: "capability";
+        environment: "environment";
+        repo: "repo";
+        settings: "settings";
+    }>;
+    label: z.ZodString;
+    detail: z.ZodOptional<z.ZodString>;
+    applicable: z.ZodBoolean;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type DefinitionItem = z.infer<typeof DefinitionItemSchema>;
+export declare const DefinitionPlanSchema: z.ZodObject<{
+    token: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            capability: "capability";
+            environment: "environment";
+            repo: "repo";
+            settings: "settings";
+        }>;
+        label: z.ZodString;
+        detail: z.ZodOptional<z.ZodString>;
+        applicable: z.ZodBoolean;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    needsAction: z.ZodArray<z.ZodObject<{
+        subject: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DefinitionPlan = z.infer<typeof DefinitionPlanSchema>;
+export declare const DefinitionApplySchema: z.ZodObject<{
+    token: z.ZodString;
+    items: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type DefinitionApply = z.infer<typeof DefinitionApplySchema>;
+export declare const DefinitionReportSchema: z.ZodObject<{
+    applied: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+    }, z.core.$strip>>;
+    failed: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        error: z.ZodString;
+    }, z.core.$strip>>;
+    needsAction: z.ZodArray<z.ZodObject<{
+        subject: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DefinitionReport = z.infer<typeof DefinitionReportSchema>;
+export declare const DefinitionDiffSchema: z.ZodObject<{
+    differences: z.ZodArray<z.ZodObject<{
+        subject: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type DefinitionDiff = z.infer<typeof DefinitionDiffSchema>;
+export declare const BundleManifestSchema: z.ZodObject<{
+    version: z.ZodLiteral<2>;
+    sandbox: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+    }, z.core.$strip>>;
+    createdAt: z.ZodNumber;
+    secrets: z.ZodBoolean;
+    definition: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        name: z.ZodOptional<z.ZodString>;
+        environment: z.ZodPrefault<z.ZodObject<{
+            baseImage: z.ZodOptional<z.ZodString>;
+            dockerfile: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        repositories: z.ZodPrefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            remote: z.ZodString;
+            ref: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        capabilities: z.ZodPrefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"devops">;
+            config: z.ZodObject<{}, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"monorepo">;
+            config: z.ZodObject<{}, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"mcp">;
+            config: z.ZodObject<{
+                url: z.ZodURL;
+                token: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"service">;
+            config: z.ZodObject<{
+                service: z.ZodEnum<{
+                    infisical: "infisical";
+                    invoiceninja: "invoiceninja";
+                    openproject: "openproject";
+                    outline: "outline";
+                    paperless: "paperless";
+                    signoz: "signoz";
+                }>;
+                domain: z.ZodString;
+                on: z.ZodString;
+                expose: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"integration">;
+            config: z.ZodObject<{
+                provider: z.ZodLiteral<"stripe">;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"cli">;
+            config: z.ZodObject<{
+                provider: z.ZodString;
+            }, z.core.$catchall<z.ZodString>>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"plugin">;
+            config: z.ZodObject<{
+                url: z.ZodURL;
+                ref: z.ZodOptional<z.ZodString>;
+                path: z.ZodOptional<z.ZodString>;
+                token: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"extension">;
+            config: z.ZodObject<{
+                url: z.ZodURL;
+                ref: z.ZodString;
+                path: z.ZodOptional<z.ZodString>;
+                token: z.ZodOptional<z.ZodString>;
+                tier: z.ZodOptional<z.ZodEnum<{
+                    free: "free";
+                    premium: "premium";
+                }>>;
+                registry: z.ZodOptional<z.ZodURL>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"ssh">;
+            config: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                auth: z.ZodLiteral<"key">;
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+                user: z.ZodString;
+                privateKey: z.ZodString;
+            }, z.core.$strip>, z.ZodObject<{
+                auth: z.ZodLiteral<"password">;
+                host: z.ZodString;
+                port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+                user: z.ZodString;
+                password: z.ZodString;
+            }, z.core.$strip>], "auth">;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"vpn">;
+            config: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                provider: z.ZodLiteral<"wireguard">;
+                config: z.ZodString;
+                autoConnect: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                provider: z.ZodLiteral<"fortinet">;
+                server: z.ZodString;
+                port: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+                username: z.ZodString;
+                password: z.ZodString;
+                trustedCert: z.ZodOptional<z.ZodString>;
+                realm: z.ZodOptional<z.ZodString>;
+                autoConnect: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                provider: z.ZodLiteral<"ipsec">;
+                server: z.ZodString;
+                presharedKey: z.ZodString;
+                localId: z.ZodOptional<z.ZodString>;
+                remoteId: z.ZodOptional<z.ZodString>;
+                username: z.ZodOptional<z.ZodString>;
+                password: z.ZodOptional<z.ZodString>;
+                ikeVersion: z.ZodDefault<z.ZodEnum<{
+                    1: "1";
+                    2: "2";
+                }>>;
+                pfs: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                dhGroup: z.ZodDefault<z.ZodEnum<{
+                    14: "14";
+                    15: "15";
+                    16: "16";
+                    19: "19";
+                    2: "2";
+                    20: "20";
+                    5: "5";
+                }>>;
+                aggressive: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                routedNetworks: z.ZodDefault<z.ZodString>;
+                autoConnect: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+            }, z.core.$strip>], "provider">;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"exit">;
+            config: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                provider: z.ZodLiteral<"tor">;
+                country: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+                autoStart: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                provider: z.ZodLiteral<"vpngate">;
+                country: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+                autoStart: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+            }, z.core.$strip>, z.ZodObject<{
+                provider: z.ZodLiteral<"wireguard">;
+                config: z.ZodString;
+                country: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+                autoStart: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+            }, z.core.$strip>], "provider">;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"docker">;
+            config: z.ZodObject<{
+                gpu: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                registryMirror: z.ZodOptional<z.ZodURL>;
+                insecureRegistries: z.ZodOptional<z.ZodString>;
+                addressPool: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"browser">;
+            config: z.ZodObject<{
+                platform: z.ZodString;
+                username: z.ZodOptional<z.ZodString>;
+                password: z.ZodOptional<z.ZodString>;
+                identity: z.ZodOptional<z.ZodString>;
+                purpose: z.ZodOptional<z.ZodString>;
+                openedAt: z.ZodOptional<z.ZodString>;
+                exit: z.ZodOptional<z.ZodString>;
+            }, z.core.$catchall<z.ZodString>>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"identity">;
+            config: z.ZodObject<{
+                email: z.ZodString;
+                password: z.ZodOptional<z.ZodString>;
+                mailbox: z.ZodOptional<z.ZodString>;
+                loginUrl: z.ZodOptional<z.ZodURL>;
+                openAccounts: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                exit: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"host">;
+            config: z.ZodObject<{
+                shell: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                write: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                screen: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                control: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                sandboxes: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                sandboxRemove: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                roots: z.ZodOptional<z.ZodString>;
+                platform: z.ZodString;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"agent">;
+            config: z.ZodObject<{
+                command: z.ZodString;
+                name: z.ZodOptional<z.ZodString>;
+                env: z.ZodOptional<z.ZodString>;
+                loginCommand: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"endpoint">;
+            config: z.ZodObject<{
+                baseUrl: z.ZodURL;
+                protocol: z.ZodDefault<z.ZodEnum<{
+                    anthropic: "anthropic";
+                    openai: "openai";
+                }>>;
+                apiKey: z.ZodOptional<z.ZodString>;
+                headers: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"localmodel">;
+            config: z.ZodObject<{
+                model: z.ZodString;
+                gpu: z.ZodDefault<z.ZodEnum<{
+                    off: "off";
+                    on: "on";
+                }>>;
+                url: z.ZodOptional<z.ZodURL>;
+                context: z.ZodDefault<z.ZodUnion<readonly [z.ZodEnum<{
+                    131072: "131072";
+                    16384: "16384";
+                    32768: "32768";
+                    65536: "65536";
+                }>, z.ZodLiteral<"custom">]>>;
+                contextTokens: z.ZodOptional<z.ZodCoercedNumber<unknown>>;
+            }, z.core.$strip>;
+        }, z.core.$strip>, z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodLiteral<"wallet">;
+            config: z.ZodObject<{
+                network: z.ZodDefault<z.ZodEnum<{
+                    "eip155:8453": "eip155:8453";
+                    "eip155:84532": "eip155:84532";
+                }>>;
+                address: z.ZodOptional<z.ZodString>;
+                perPaymentMaxUsd: z.ZodDefault<z.ZodString>;
+                autoApproveUnderUsd: z.ZodDefault<z.ZodString>;
+                dailyCapUsd: z.ZodDefault<z.ZodString>;
+                allow: z.ZodOptional<z.ZodString>;
+                deny: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+        }, z.core.$strip>], "kind">>>;
+        secrets: z.ZodPrefault<z.ZodArray<z.ZodString>>;
+        settings: z.ZodType<Partial<{
+            stableSystemPrompt: boolean;
+            skills: string[];
+            hashlineEdits: boolean;
+            terseOutput: boolean;
+            terseHoldout: number;
+            systemPromptMode: "claude" | "custom" | "intentic";
+            systemPrompt: string;
+            iqSearch: boolean;
+            iqSearchHoldout: number;
+            workspaceMap: boolean;
+            outputCleaners: string;
+            outputHoldout: number;
+            quickModel: string[];
+            changelogRepos: string[];
+            agentRunModels: string[];
+            agentRunEffort: string;
+            autoTier: "off" | "on" | "shadow";
+            autoTierEagerness: "balanced" | "cautious" | "eager";
+            autoFastModels: string[];
+            agentRetentionDays: number;
+            resumeAfterOutage: boolean;
+            autoResumeOnRestart: boolean;
+            rules: {
+                id: string;
+                label: string;
+                moment: "agent.finished" | "push.starting" | "turn.ending";
+                when?: {
+                    repo?: string | undefined;
+                    paths?: string[] | undefined;
+                    outcome?: ("clean" | "conflict" | "error")[] | undefined;
+                } | undefined;
+                action: {
+                    kind: "command";
+                    command: string;
+                    timeoutMs: number;
+                } | {
+                    kind: "instruct";
+                    text: string;
+                } | {
+                    kind: "verdict";
+                    verdict: "allow" | "hold";
+                } | {
+                    kind: "builtin";
+                    name: "verify-edits";
+                };
+                enabled: boolean;
+            }[];
+            automationFailureLimit: number;
+            admission: {
+                schedule: "allow" | "deny" | "hold";
+                event: "allow" | "deny" | "hold";
+                listener: "allow" | "deny" | "hold";
+                webchat: "allow" | "deny" | "hold";
+                workspace: "allow" | "deny" | "hold";
+                workflow: "allow" | "deny";
+            };
+            actionRules: Record<string, "allow" | "deny" | "hold">;
+            commandRules: Partial<Record<"files.destructive" | "git.destructive" | "network.outbound" | "package.publish" | "secrets.access", "allow" | "deny" | "hold">>;
+            subagentsAtOnce: number;
+            subagentsPerTurn: number;
+            subagentDepth: number;
+        }>, unknown, z.core.$ZodTypeInternals<Partial<{
+            stableSystemPrompt: boolean;
+            skills: string[];
+            hashlineEdits: boolean;
+            terseOutput: boolean;
+            terseHoldout: number;
+            systemPromptMode: "claude" | "custom" | "intentic";
+            systemPrompt: string;
+            iqSearch: boolean;
+            iqSearchHoldout: number;
+            workspaceMap: boolean;
+            outputCleaners: string;
+            outputHoldout: number;
+            quickModel: string[];
+            changelogRepos: string[];
+            agentRunModels: string[];
+            agentRunEffort: string;
+            autoTier: "off" | "on" | "shadow";
+            autoTierEagerness: "balanced" | "cautious" | "eager";
+            autoFastModels: string[];
+            agentRetentionDays: number;
+            resumeAfterOutage: boolean;
+            autoResumeOnRestart: boolean;
+            rules: {
+                id: string;
+                label: string;
+                moment: "agent.finished" | "push.starting" | "turn.ending";
+                when?: {
+                    repo?: string | undefined;
+                    paths?: string[] | undefined;
+                    outcome?: ("clean" | "conflict" | "error")[] | undefined;
+                } | undefined;
+                action: {
+                    kind: "command";
+                    command: string;
+                    timeoutMs: number;
+                } | {
+                    kind: "instruct";
+                    text: string;
+                } | {
+                    kind: "verdict";
+                    verdict: "allow" | "hold";
+                } | {
+                    kind: "builtin";
+                    name: "verify-edits";
+                };
+                enabled: boolean;
+            }[];
+            automationFailureLimit: number;
+            admission: {
+                schedule: "allow" | "deny" | "hold";
+                event: "allow" | "deny" | "hold";
+                listener: "allow" | "deny" | "hold";
+                webchat: "allow" | "deny" | "hold";
+                workspace: "allow" | "deny" | "hold";
+                workflow: "allow" | "deny";
+            };
+            actionRules: Record<string, "allow" | "deny" | "hold">;
+            commandRules: Partial<Record<"files.destructive" | "git.destructive" | "network.outbound" | "package.publish" | "secrets.access", "allow" | "deny" | "hold">>;
+            subagentsAtOnce: number;
+            subagentsPerTurn: number;
+            subagentDepth: number;
+        }>, unknown>>;
+    }, z.core.$strip>;
+    excluded: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        portability: z.ZodString;
+        note: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type BundleManifest = z.infer<typeof BundleManifestSchema>;
+//# sourceMappingURL=definition.d.ts.map