/**
 * Builder-key lifecycle over `/v1/builder/keys` (CLI audit 2026-09-16, the critical row):
 * `clustly keys` lists what this account has issued and `clustly keys revoke` kills one;
 * `clustly logout` revokes the key it is about to forget so "signed out" means the credential
 * is dead everywhere, not merely deleted from one disk.
 */
import { type CliApiDeps } from "./api-client";
export interface BuilderKey {
    id: string;
    keyPrefix: string;
    name: string | null;
    createdAt: string;
    lastUsedAt: string | null;
    revokedAt: string | null;
    /** The key making this very request. */
    current: boolean;
}
/** The server's alias for "the key this request was made with". */
export declare const CURRENT_KEY = "current";
export declare function listKeys(deps: CliApiDeps): Promise<BuilderKey[]>;
/** Revoke by id, or by `CURRENT_KEY` for the caller's own. A 404 is "no live key with that id". */
export declare function revokeKey(deps: CliApiDeps, keyId: string): Promise<void>;
/** `clustly keys revoke <id-or-prefix>`: a builder types the 8-char prefix the list shows, not a uuid. */
export declare function resolveKeyRef(keys: BuilderKey[], ref: string): BuilderKey | undefined;