import { ClientSDK, RequestOptions } from "../lib/sdks.js";
import * as models from "../models/index.js";
import * as operations from "../models/operations/index.js";
export declare class Operations extends ClientSDK {
    /**
     * List available operations plugins (builtin + custom) for a project, with their operations and risk tiers.
     */
    listPlugins(request: operations.ListOperationsPluginsRequest, options?: RequestOptions): Promise<models.ListOperationsPluginsResponse>;
    /**
     * Register a custom operations plugin whose bundle ZIP has already been uploaded to S3 (see POST /plugins/upload-url). Replaces any existing plugin of the same name in that project. New custom plugins are enabled by default.
     */
    publishPlugin(request: operations.PublishOperationsPluginRequest, options?: RequestOptions): Promise<models.PublishOperationsPluginResponse>;
    /**
     * Replace the complete set of enabled built-in operations plugins for a project.
     */
    setBuiltinPlugins(request: operations.SetBuiltinOperationsPluginsRequest, options?: RequestOptions): Promise<models.SetBuiltinOperationsPluginsResponse>;
    /**
     * Get a presigned S3 URL to upload a custom operations plugin bundle ZIP. Upload the ZIP with a PUT to the returned url (sending the given Content-Type), then call POST /plugins to register it.
     */
    createBundleUploadUrl(request: operations.CreateOperationsBundleUploadUrlRequest, options?: RequestOptions): Promise<models.OperationsBundleUploadUrlResponse>;
    /**
     * Enable or disable an operations plugin (builtin or custom) for a project. Only enabled plugins are baked into the operator image and can be invoked.
     */
    setPluginEnabled(request: operations.SetOperationsPluginEnabledRequest, options?: RequestOptions): Promise<models.SetOperationsPluginEnabledResponse>;
    /**
     * Get a project's per-command approval policy. Mirrors what the operator enforces: `plugin/operation` / `plugin/*` / `*` patterns → auto | manual.
     */
    getPolicy(request: operations.GetOperationsPolicyRequest, options?: RequestOptions): Promise<models.OperationsPolicyResponse>;
    /**
     * Replace a project's per-command approval policy (full rule set). Patterns are `plugin/operation`, `plugin/*`, or `*`; each maps to auto | manual.
     */
    updatePolicy(request: operations.UpdateOperationsPolicyRequest, options?: RequestOptions): Promise<models.OperationsPolicyResponse>;
    /**
     * Invoke a plugin operation against a deployment. Honors the project's per-command approval policy.
     */
    invoke(request: operations.InvokeOperationRequest, options?: RequestOptions): Promise<models.InvokeOperationResponse>;
    /**
     * One verification poll cycle for an original operation command. Loads that command's authoritative stored result and dispatch-time verification contract, dispatches the frozen read-only poll operation once, and evaluates its frozen success condition. Callers poll this repeatedly per the returned policy.
     */
    verifyCheck(request: operations.VerifyOperationCheckRequest, options?: RequestOptions): Promise<models.VerifyOperationCheckResponse>;
    /**
     * Create an access request — either plan-backed (an ai-agent investigation's exact commands) or plan-less (a CLI-originated exact operation or wildcard pattern, resolved and frozen here). Plan-backed requests await the engineer gate (status `pending-approval`); plan-less requests are queued immediately since the requester is asking for their own access (status `queued`).
     */
    createAccessRequest(request?: models.CreateAccessRequest | undefined, options?: RequestOptions): Promise<operations.CreateAccessRequestResponse>;
    /**
     * List a project's access requests, newest first.
     */
    listAccessRequests(request: operations.ListAccessRequestsRequest, options?: RequestOptions): Promise<operations.ListAccessRequestsResponse>;
    /**
     * Engineer gate — approve a pending access request, queuing it for the operator to materialize. Records who queued it.
     */
    queueAccessRequest(request: operations.QueueAccessRequestRequest, options?: RequestOptions): Promise<operations.QueueAccessRequestResponse>;
    /**
     * Customer gate — an authenticated workspace member or administrator other than the requester may approve a queued access request. Actor identity comes from authentication; method/source are audit context only.
     */
    approveAccessRequest(request: operations.ApproveAccessRequestRequest, options?: RequestOptions): Promise<operations.ApproveAccessRequestResponse>;
    /**
     * Customer gate — an authenticated workspace member or administrator other than the requester may reject a queued access request. Actor identity comes from authentication.
     */
    denyAccessRequest(request: operations.DenyAccessRequestRequest, options?: RequestOptions): Promise<operations.DenyAccessRequestResponse>;
    /**
     * The customer's kubectl approve command for a queued access request, or null until the operator has materialized the grant CR and reported its coordinates. Polled by the Slack handler to update the access-plan card.
     */
    getAccessRequestCoordinates(request: operations.GetAccessRequestCoordinatesRequest, options?: RequestOptions): Promise<operations.GetAccessRequestCoordinatesResponse>;
    /**
     * Get an access request by id.
     */
    getAccessRequest(request: operations.GetAccessRequestRequest, options?: RequestOptions): Promise<operations.GetAccessRequestResponse>;
}
//# sourceMappingURL=operations.d.ts.map