import { EnvType, IRequestExtension } from '../../types';
import { ICreateSecretInput, IUpdateSecretInput, ISecret, ISecretMetadata } from '../../secrets/secrets.types';
export interface ISecretsApiService {
    create(auth: IRequestExtension, input: ICreateSecretInput): Promise<ISecretMetadata>;
    fetchAll(auth: IRequestExtension): Promise<ISecretMetadata[]>;
    fetch(auth: IRequestExtension, key: string): Promise<ISecret>;
    fetchEncrypted(auth: IRequestExtension, key: string): Promise<{
        encrypted_value: string;
        revoked: boolean;
    }>;
    update(auth: IRequestExtension, key: string, input: IUpdateSecretInput): Promise<ISecretMetadata>;
    delete(auth: IRequestExtension, key: string): Promise<boolean>;
    revoke(auth: IRequestExtension, key: string): Promise<boolean>;
}
export declare class SecretsApiService implements ISecretsApiService {
    private environment;
    constructor(environment: EnvType);
    private getAuthHeaders;
    /**
     * Create a new secret in the workspace
     */
    create(auth: IRequestExtension, input: ICreateSecretInput): Promise<ISecretMetadata>;
    /**
     * Fetch all secrets in the workspace (metadata only, no values)
     */
    fetchAll(auth: IRequestExtension): Promise<ISecretMetadata[]>;
    /**
     * Fetch a single secret by key (includes decrypted value)
     */
    fetch(auth: IRequestExtension, key: string): Promise<ISecret>;
    /**
     * Fetch encrypted secret value (for local decryption)
     * Ultra-secure endpoint that returns only the encrypted string and revoked flag
     */
    fetchEncrypted(auth: IRequestExtension, key: string): Promise<{
        encrypted_value: string;
        revoked: boolean;
    }>;
    /**
     * Update an existing secret
     */
    update(auth: IRequestExtension, key: string, input: IUpdateSecretInput): Promise<ISecretMetadata>;
    /**
     * Delete a secret permanently
     */
    delete(auth: IRequestExtension, key: string): Promise<boolean>;
    /**
     * Revoke a secret (disable without deleting)
     */
    revoke(auth: IRequestExtension, key: string): Promise<boolean>;
}