import type { HttpClient } from "../core/http.js";
import type { OrgMemberResponse, OrgMemberListResponse, UpdateMemberRoleRequest, OneclawResponse, PolicyBackendSettings, UpdatePolicyBackendSettingsRequest, ShadowReportResponse } from "../types.js";
import type { ApiSchemas, ChartApplyResponse, ChartDiffResponse } from "../types.js";
/**
 * Org resource — manage organization membership and roles.
 */
export declare class OrgResource {
    private readonly http;
    constructor(http: HttpClient);
    /** List all members of the current organization. */
    listMembers(): Promise<OneclawResponse<OrgMemberListResponse>>;
    /**
     * Get the org's __agent-keys vault id (for revealing agent identity keys).
     * Users only. Returns 404 if the vault does not exist (e.g. no agents created yet).
     */
    getAgentKeysVault(): Promise<OneclawResponse<ApiSchemas["AgentKeysVaultResponse"]>>;
    /** Update a member's role (owner, admin, or member). */
    updateMemberRole(userId: string, role: UpdateMemberRoleRequest["role"]): Promise<OneclawResponse<OrgMemberResponse>>;
    /** Remove a member from the organization. */
    removeMember(userId: string): Promise<OneclawResponse<void>>;
    /** Get onboarding progress for the current org (welcome bundle + MCP readiness). */
    getOnboardingStatus(): Promise<OneclawResponse<ApiSchemas["OnboardingStatus"]>>;
    /**
     * Provision MCP onboarding: welcome vault, sample secret, agent, default ** policy.
     * Returns one-time agent API key and stdio MCP config. Human-only.
     */
    provisionOnboarding(body?: ApiSchemas["OnboardingProvisionRequest"]): Promise<OneclawResponse<ApiSchemas["OnboardingProvisionResponse"]>>;
    /** Get org Bankr partner configuration (prefix + wallet; never returns the partner key). */
    getBankrConfig(): Promise<OneclawResponse<OrgBankrConfigResponse>>;
    /** Store or replace the org's Bankr partner key and optional default wallet. Owner/admin only. */
    setBankrConfig(body: UpsertOrgBankrConfigRequest): Promise<OneclawResponse<OrgBankrConfigResponse>>;
    /** Remove org Bankr BYOK configuration. Owner/admin only. */
    deleteBankrConfig(): Promise<OneclawResponse<void>>;
    /** Get the org's policy backend settings (Cedar/OPA enforcement configuration). */
    getPolicyBackendSettings(): Promise<OneclawResponse<PolicyBackendSettings>>;
    /** Update the org's policy backend settings. */
    updatePolicyBackendSettings(body: UpdatePolicyBackendSettingsRequest): Promise<OneclawResponse<PolicyBackendSettings>>;
    /** Get the Cedar/OPA policy shadow mode divergence report. */
    getPolicyShadowReport(): Promise<OneclawResponse<ShadowReportResponse>>;
    /** @deprecated Use {@link getPolicyShadowReport} */
    getShadowReport(): Promise<OneclawResponse<ShadowReportResponse>>;
    /** Get Convention 6 guardrail shadow violations (execution guardrails in log mode). */
    getGuardrailShadowReport(params?: {
        since?: string;
        until?: string;
    }): Promise<OneclawResponse<GuardrailShadowReportResponse>>;
    /** List guardrail revision history for agent/binding changes. */
    listGuardrailRevisions(): Promise<OneclawResponse<GuardrailRevisionListResponse>>;
    /**
     * What applying `chart` would do, without doing it. Human-only. Pass the
     * `applied_state` a previous apply returned so drift can be told from a
     * first run.
     */
    diffChart(chart: Record<string, unknown>, appliedState?: Record<string, unknown>): Promise<OneclawResponse<ChartDiffResponse>>;
    /**
     * Apply a chart: creates vaults, agents, policies, connectors and bindings
     * in dependency order through the same gated handlers the API routes use;
     * patches an agent's description/system_prompt in place; never deletes.
     * Save the returned `applied_state` for the next run. Human-only.
     */
    applyChart(chart: Record<string, unknown>, appliedState?: Record<string, unknown>): Promise<OneclawResponse<ChartApplyResponse>>;
}
export interface OrgBankrConfigResponse {
    configured: boolean;
    partner_key_prefix?: string;
    default_wallet_id?: string;
    updated_at?: string;
    using_platform_fallback: boolean;
}
export interface UpsertOrgBankrConfigRequest {
    partner_key: string;
    default_wallet_id?: string;
}
export interface GuardrailShadowReportResponse {
    org_id: string;
    since: string;
    until: string;
    total_would_deny: number;
    by_reason: Array<{
        reason_code: string;
        would_deny_count: number;
        enforced_count: number;
    }>;
}
export interface GuardrailRevisionListResponse {
    revisions: Array<{
        id: string;
        org_id: string;
        resource_type: string;
        resource_id: string;
        actor_id: string;
        before_json: Record<string, unknown>;
        after_json: Record<string, unknown>;
        change_kind: string;
        approval_id?: string | null;
        created_at: string;
    }>;
}
//# sourceMappingURL=org.d.ts.map