import * as z from "zod/v4";
import { Result as SafeParseResult } from "../types/fp.js";
import { SDKValidationError } from "./errors/sdkvalidationerror.js";
import { Role } from "./role.js";
import { SubjectScope } from "./subjectscope.js";
/**
 * Authenticated service account subject with scoped permissions (workspace, project, or deployment level)
 */
export type ServiceAccountSubject = {
    /**
     * Subject type identifier
     */
    kind: "serviceAccount";
    /**
     * Unique service account identifier (API key ID)
     */
    id: string;
    /**
     * ID of the workspace the service account belongs to
     */
    workspaceId: string;
    /**
     * Name of the workspace the service account belongs to
     */
    workspaceName?: string | undefined;
    /**
     * Authorization scope defining what resources this service account can access
     */
    scope: SubjectScope;
    /**
     * Role defining what actions this service account can perform within its scope
     */
    role: Role;
};
/** @internal */
export declare const ServiceAccountSubject$inboundSchema: z.ZodType<ServiceAccountSubject, unknown>;
export declare function serviceAccountSubjectFromJSON(jsonString: string): SafeParseResult<ServiceAccountSubject, SDKValidationError>;
//# sourceMappingURL=serviceaccountsubject.d.ts.map