/**
 * Who loses what when an organization restricts personal API keys: each
 * member (owners and admins keep theirs) with the provider keys and the
 * personal Builder.io connection they have stored. Presence only; no value is
 * decrypted or returned.
 */
export interface PersonalProviderKeyHolderProvider {
    /** Provider id, e.g. "anthropic", or the key name for a provider outside the catalog. */
    provider: string;
    /** Display name, e.g. "Anthropic". */
    label: string;
    /** Stored key names for this provider, e.g. ["OPENAI_API_KEY", "OPENAI_BASE_URL"]. */
    keys: string[];
}
export interface PersonalProviderKeyHolder {
    email: string;
    providers: PersonalProviderKeyHolderProvider[];
    /** A personal Builder.io connection (OAuth grant or key pair) is stored. */
    builder: boolean;
}
/**
 * Members of `orgId` whose personal provider keys or personal Builder.io
 * connection stop while the restriction is on, sorted by email. Members with
 * nothing stored are left out. Throws when a store cannot be read.
 */
export declare function listPersonalProviderKeyHolders(orgId: string, actorEmail: string): Promise<PersonalProviderKeyHolder[]>;