import { z } from "zod";
export declare const clipsHostedStorageConfig: z.ZodObject<{
    enabled: z.ZodDefault<z.ZodBoolean>;
    endpoint: z.ZodOptional<z.ZodString>;
    bucket: z.ZodOptional<z.ZodString>;
    accessKeyId: z.ZodOptional<z.ZodString>;
    secretAccessKey: z.ZodOptional<z.ZodString>;
    region: z.ZodOptional<z.ZodString>;
    perIdentityClipLimit: z.ZodDefault<z.ZodNumber>;
    maxClipBytes: z.ZodDefault<z.ZodNumber>;
    maxClipDurationMs: z.ZodDefault<z.ZodNumber>;
    globalDailyClipCap: z.ZodOptional<z.ZodNumber>;
    ipPrefixDailyGrantCap: z.ZodOptional<z.ZodNumber>;
    globalRetainedByteCap: z.ZodOptional<z.ZodNumber>;
    retainedByteAlertRatio: z.ZodDefault<z.ZodNumber>;
}, z.core.$strip>;
export declare const clipsConfig: z.ZodObject<{
    hostedStorage: z.ZodPrefault<z.ZodObject<{
        enabled: z.ZodDefault<z.ZodBoolean>;
        endpoint: z.ZodOptional<z.ZodString>;
        bucket: z.ZodOptional<z.ZodString>;
        accessKeyId: z.ZodOptional<z.ZodString>;
        secretAccessKey: z.ZodOptional<z.ZodString>;
        region: z.ZodOptional<z.ZodString>;
        perIdentityClipLimit: z.ZodDefault<z.ZodNumber>;
        maxClipBytes: z.ZodDefault<z.ZodNumber>;
        maxClipDurationMs: z.ZodDefault<z.ZodNumber>;
        globalDailyClipCap: z.ZodOptional<z.ZodNumber>;
        ipPrefixDailyGrantCap: z.ZodOptional<z.ZodNumber>;
        globalRetainedByteCap: z.ZodOptional<z.ZodNumber>;
        retainedByteAlertRatio: z.ZodDefault<z.ZodNumber>;
    }, z.core.$strip>>;
    contentPeerSecret: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
export type ClipsConfig = z.output<typeof clipsConfig>;
export type ClipsHostedStorageConfig = z.output<typeof clipsHostedStorageConfig>;
/**
 * The secret Content and Clips sign and verify Content's Clip requests with,
 * or null when it is not set. Read it through this on both sides: a value
 * equal to the deployment `A2A_SECRET` is one every app holds, so it would
 * not show that a request came from Content, and it is refused rather than
 * used.
 */
export declare function resolveContentClipsPeerSecret(config: ClipsConfig, deploymentA2ASecret: string | undefined): string | null;
export type ResolvedClipsHostedStorageConfig = ClipsHostedStorageConfig & {
    enabled: true;
    endpoint: string;
    bucket: string;
    accessKeyId: string;
    secretAccessKey: string;
    region: string;
};
export declare function resolveClipsHostedStorageConfig(config: ClipsHostedStorageConfig): ResolvedClipsHostedStorageConfig | null;