import { z } from "zod";
export declare const SECRET_KEY_RE: RegExp;
export declare const SECRET_KEY_MAX = 128;
export declare const SecretSetSchema: z.ZodObject<{
    key: z.ZodString;
    value: z.ZodString;
}, z.core.$strip>;
export declare const SecretKeysSchema: z.ZodObject<{
    keys: z.ZodArray<z.ZodString>;
}, z.core.$strip>;
export declare const SecretKeyParamSchema: z.ZodObject<{
    key: z.ZodString;
}, z.core.$strip>;
export declare const SecretRevealSchema: z.ZodObject<{
    value: z.ZodString;
}, z.core.$strip>;
export declare const SECRET_FORMATS: readonly ["hex", "base64url", "alnum"];
export declare const SecretGenerateSchema: z.ZodObject<{
    key: z.ZodString;
    bytes: z.ZodDefault<z.ZodNumber>;
    format: z.ZodDefault<z.ZodEnum<{
        alnum: "alnum";
        base64url: "base64url";
        hex: "hex";
    }>>;
}, z.core.$strip>;
export declare const SecretGeneratedSchema: z.ZodObject<{
    key: z.ZodString;
    length: z.ZodNumber;
    stored: z.ZodEnum<{
        env: "env";
        sandbox: "sandbox";
    }>;
}, z.core.$strip>;
export declare const CredentialGateScopeSchema: z.ZodEnum<{
    conversation: "conversation";
    use: "use";
}>;
export type CredentialGateScope = z.infer<typeof CredentialGateScopeSchema>;
export declare const CredentialGateKindSchema: z.ZodEnum<{
    capability: "capability";
    secret: "secret";
}>;
export type CredentialGateKind = z.infer<typeof CredentialGateKindSchema>;
export declare const CredentialLaneSchema: z.ZodEnum<{
    browser: "browser";
    code: "code";
    desktop: "desktop";
    device: "device";
    gateway: "gateway";
    otp: "otp";
    session: "session";
    shell: "shell";
    ssh: "ssh";
}>;
export type CredentialLane = z.infer<typeof CredentialLaneSchema>;
export declare const CredentialGateSchema: z.ZodObject<{
    subject: z.ZodString;
    kind: z.ZodEnum<{
        capability: "capability";
        secret: "secret";
    }>;
    approvers: z.ZodArray<z.ZodString>;
    scope: z.ZodEnum<{
        conversation: "conversation";
        use: "use";
    }>;
}, z.core.$strip>;
export type CredentialGate = z.infer<typeof CredentialGateSchema>;
export declare const CredentialGatesSchema: z.ZodObject<{
    gates: z.ZodArray<z.ZodObject<{
        subject: z.ZodString;
        kind: z.ZodEnum<{
            capability: "capability";
            secret: "secret";
        }>;
        approvers: z.ZodArray<z.ZodString>;
        scope: z.ZodEnum<{
            conversation: "conversation";
            use: "use";
        }>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export type CredentialGates = z.infer<typeof CredentialGatesSchema>;
export declare const CredentialGuardSubjectParamSchema: z.ZodObject<{
    subject: z.ZodString;
}, z.core.$strip>;
export declare const CredentialRequestSchema: z.ZodObject<{
    subject: z.ZodString;
    why: z.ZodOptional<z.ZodString>;
    conversationId: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
export declare const CredentialGrantSchema: z.ZodObject<{
    granted: z.ZodLiteral<true>;
    approvedBy: z.ZodString;
    message: z.ZodString;
}, z.core.$strip>;
export declare const SecretHostSchema: z.ZodString;
export declare const SecretHostSourceSchema: z.ZodEnum<{
    connector: "connector";
    keyring: "keyring";
    owner: "owner";
}>;
export type SecretHostSource = z.infer<typeof SecretHostSourceSchema>;
export declare const SecretHostGuardSchema: z.ZodObject<{
    subject: z.ZodString;
    kind: z.ZodEnum<{
        capability: "capability";
        secret: "secret";
    }>;
    guard: z.ZodBoolean;
    hosts: z.ZodArray<z.ZodString>;
    source: z.ZodEnum<{
        connector: "connector";
        keyring: "keyring";
        owner: "owner";
    }>;
}, z.core.$strip>;
export type SecretHostGuard = z.infer<typeof SecretHostGuardSchema>;
export declare const SecretHostGuardsSchema: z.ZodObject<{
    guards: z.ZodArray<z.ZodObject<{
        subject: z.ZodString;
        kind: z.ZodEnum<{
            capability: "capability";
            secret: "secret";
        }>;
        guard: z.ZodBoolean;
        hosts: z.ZodArray<z.ZodString>;
        source: z.ZodEnum<{
            connector: "connector";
            keyring: "keyring";
            owner: "owner";
        }>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export declare const SecretHostGuardSetSchema: z.ZodObject<{
    subject: z.ZodString;
    kind: z.ZodOptional<z.ZodEnum<{
        capability: "capability";
        secret: "secret";
    }>>;
    guard: z.ZodBoolean;
    hosts: z.ZodArray<z.ZodString>;
    conversationId: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
export declare const SecretHostGuardSetResultSchema: z.ZodObject<{
    guard: z.ZodBoolean;
    hosts: z.ZodArray<z.ZodString>;
    approvedBy: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
export declare const CredentialDeliveryModeSchema: z.ZodEnum<{
    direct: "direct";
    gateway: "gateway";
    raw: "raw";
    "ssh-agent": "ssh-agent";
}>;
export type CredentialDeliveryMode = z.infer<typeof CredentialDeliveryModeSchema>;
export declare const CredentialPolicySchema: z.ZodObject<{
    subject: z.ZodString;
    delivery: z.ZodEnum<{
        direct: "direct";
        gateway: "gateway";
        raw: "raw";
        "ssh-agent": "ssh-agent";
    }>;
    rules: z.ZodArray<z.ZodObject<{
        methods: z.ZodOptional<z.ZodArray<z.ZodString>>;
        paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
        action: z.ZodEnum<{
            allow: "allow";
            ask: "ask";
            deny: "deny";
        }>;
        why: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>;
    rulesFrom: z.ZodEnum<{
        connector: "connector";
        owner: "owner";
    }>;
}, z.core.$strip>;
export type CredentialPolicy = z.infer<typeof CredentialPolicySchema>;
export declare const CredentialPolicySetSchema: z.ZodObject<{
    subject: z.ZodString;
    delivery: z.ZodOptional<z.ZodEnum<{
        gateway: "gateway";
        raw: "raw";
    }>>;
    rules: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
        methods: z.ZodOptional<z.ZodArray<z.ZodString>>;
        paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
        action: z.ZodEnum<{
            allow: "allow";
            ask: "ask";
            deny: "deny";
        }>;
        why: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>>>;
}, z.core.$strip>;
export type CredentialPolicySet = z.infer<typeof CredentialPolicySetSchema>;
export declare const SecretProgramsSchema: z.ZodObject<{
    programs: z.ZodArray<z.ZodString>;
    packages: z.ZodArray<z.ZodString>;
    anyField: z.ZodBoolean;
    source: z.ZodEnum<{
        keyring: "keyring";
        owner: "owner";
    }>;
}, z.core.$strip>;
export type SecretPrograms = z.infer<typeof SecretProgramsSchema>;
export declare const SecretProgramGuardSchema: z.ZodObject<{
    programs: z.ZodArray<z.ZodString>;
    packages: z.ZodArray<z.ZodString>;
    anyField: z.ZodBoolean;
    subject: z.ZodString;
}, z.core.$strip>;
export type SecretProgramGuard = z.infer<typeof SecretProgramGuardSchema>;
export declare const SecretProgramGuardsSchema: z.ZodObject<{
    guards: z.ZodArray<z.ZodObject<{
        programs: z.ZodArray<z.ZodString>;
        packages: z.ZodArray<z.ZodString>;
        anyField: z.ZodBoolean;
        subject: z.ZodString;
    }, z.core.$strip>>;
}, z.core.$strip>;
export declare const SecretProgramGuardSetSchema: z.ZodObject<{
    programs: z.ZodArray<z.ZodString>;
    packages: z.ZodArray<z.ZodString>;
    anyField: z.ZodBoolean;
    subject: z.ZodString;
    conversationId: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
export declare const SecretProgramGuardSetResultSchema: z.ZodObject<{
    programs: z.ZodArray<z.ZodString>;
    packages: z.ZodArray<z.ZodString>;
    anyField: z.ZodBoolean;
    approvedBy: z.ZodOptional<z.ZodString>;
}, z.core.$strip>;
export declare const SecretTypeIntoSchema: z.ZodObject<{
    key: z.ZodString;
    device: z.ZodString;
    countdownSeconds: z.ZodDefault<z.ZodNumber>;
}, z.core.$strip>;
export declare const SecretTypeIntoResultSchema: z.ZodObject<{
    program: z.ZodString;
    field: z.ZodEnum<{
        password: "password";
        text: "text";
    }>;
    asked: z.ZodBoolean;
}, z.core.$strip>;
export declare const SandboxKeyringSchema: z.ZodObject<{
    machine: z.ZodString;
    online: z.ZodBoolean;
    locked: z.ZodOptional<z.ZodBoolean>;
    setUp: z.ZodOptional<z.ZodBoolean>;
    version: z.ZodOptional<z.ZodString>;
    pendingInbox: z.ZodOptional<z.ZodNumber>;
    shared: z.ZodNumber;
    sync: z.ZodOptional<z.ZodObject<{
        fingerprint: z.ZodString;
        peers: z.ZodArray<z.ZodString>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export type SandboxKeyring = z.infer<typeof SandboxKeyringSchema>;
export declare const SandboxKeyringsSchema: z.ZodObject<{
    keyrings: z.ZodArray<z.ZodObject<{
        machine: z.ZodString;
        online: z.ZodBoolean;
        locked: z.ZodOptional<z.ZodBoolean>;
        setUp: z.ZodOptional<z.ZodBoolean>;
        version: z.ZodOptional<z.ZodString>;
        pendingInbox: z.ZodOptional<z.ZodNumber>;
        shared: z.ZodNumber;
        sync: z.ZodOptional<z.ZodObject<{
            fingerprint: z.ZodString;
            peers: z.ZodArray<z.ZodString>;
        }, z.core.$strip>>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export declare const SandboxKeyringPairSchema: z.ZodObject<{
    a: z.ZodString;
    b: z.ZodString;
}, z.core.$strip>;
export declare const SandboxKeyringPairResultSchema: z.ZodObject<{
    fingerprints: z.ZodObject<{
        a: z.ZodString;
        b: z.ZodString;
    }, z.core.$strip>;
}, z.core.$strip>;
export declare const SecretInventoryEntrySchema: z.ZodObject<{
    key: z.ZodString;
    kind: z.ZodEnum<{
        capability: "capability";
        device: "device";
        env: "env";
        generated: "generated";
        provider: "provider";
    }>;
    label: z.ZodOptional<z.ZodString>;
    status: z.ZodEnum<{
        connected: "connected";
        missing: "missing";
        set: "set";
    }>;
    requiredBy: z.ZodArray<z.ZodObject<{
        resourceId: z.ZodString;
        type: z.ZodString;
    }, z.core.$strip>>;
    storedAt: z.ZodString;
    revealable: z.ZodBoolean;
    ci: z.ZodOptional<z.ZodObject<{
        synced: z.ZodBoolean;
        pushedAt: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>;
    lastUse: z.ZodOptional<z.ZodObject<{
        at: z.ZodNumber;
        lane: z.ZodEnum<{
            browser: "browser";
            code: "code";
            desktop: "desktop";
            device: "device";
            gateway: "gateway";
            shell: "shell";
            ssh: "ssh";
        }>;
        detail: z.ZodOptional<z.ZodString>;
        approvedBy: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>>;
    credential: z.ZodOptional<z.ZodObject<{
        delivery: z.ZodEnum<{
            direct: "direct";
            gateway: "gateway";
            raw: "raw";
            "ssh-agent": "ssh-agent";
        }>;
        rules: z.ZodArray<z.ZodObject<{
            methods: z.ZodOptional<z.ZodArray<z.ZodString>>;
            paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
            action: z.ZodEnum<{
                allow: "allow";
                ask: "ask";
                deny: "deny";
            }>;
            why: z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>;
        rulesFrom: z.ZodEnum<{
            connector: "connector";
            owner: "owner";
        }>;
    }, z.core.$strip>>;
    gate: z.ZodOptional<z.ZodObject<{
        approvers: z.ZodArray<z.ZodString>;
        scope: z.ZodEnum<{
            conversation: "conversation";
            use: "use";
        }>;
    }, z.core.$strip>>;
    hosts: z.ZodOptional<z.ZodObject<{
        guard: z.ZodBoolean;
        list: z.ZodArray<z.ZodString>;
        source: z.ZodEnum<{
            connector: "connector";
            keyring: "keyring";
            owner: "owner";
        }>;
    }, z.core.$strip>>;
    programs: z.ZodOptional<z.ZodObject<{
        programs: z.ZodArray<z.ZodString>;
        packages: z.ZodArray<z.ZodString>;
        anyField: z.ZodBoolean;
        source: z.ZodEnum<{
            keyring: "keyring";
            owner: "owner";
        }>;
    }, z.core.$strip>>;
    device: z.ZodOptional<z.ZodObject<{
        machine: z.ZodString;
        mode: z.ZodEnum<{
            copy: "copy";
            "each-use": "each-use";
            "while-here": "while-here";
        }>;
        online: z.ZodBoolean;
        locked: z.ZodOptional<z.ZodBoolean>;
        source: z.ZodEnum<{
            "1password": "1password";
            bitwarden: "bitwarden";
            keepassxc: "keepassxc";
            keyring: "keyring";
        }>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export type SecretInventoryEntry = z.infer<typeof SecretInventoryEntrySchema>;
export declare const SecretInventorySchema: z.ZodObject<{
    entries: z.ZodArray<z.ZodObject<{
        key: z.ZodString;
        kind: z.ZodEnum<{
            capability: "capability";
            device: "device";
            env: "env";
            generated: "generated";
            provider: "provider";
        }>;
        label: z.ZodOptional<z.ZodString>;
        status: z.ZodEnum<{
            connected: "connected";
            missing: "missing";
            set: "set";
        }>;
        requiredBy: z.ZodArray<z.ZodObject<{
            resourceId: z.ZodString;
            type: z.ZodString;
        }, z.core.$strip>>;
        storedAt: z.ZodString;
        revealable: z.ZodBoolean;
        ci: z.ZodOptional<z.ZodObject<{
            synced: z.ZodBoolean;
            pushedAt: z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>;
        lastUse: z.ZodOptional<z.ZodObject<{
            at: z.ZodNumber;
            lane: z.ZodEnum<{
                browser: "browser";
                code: "code";
                desktop: "desktop";
                device: "device";
                gateway: "gateway";
                shell: "shell";
                ssh: "ssh";
            }>;
            detail: z.ZodOptional<z.ZodString>;
            approvedBy: z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>;
        credential: z.ZodOptional<z.ZodObject<{
            delivery: z.ZodEnum<{
                direct: "direct";
                gateway: "gateway";
                raw: "raw";
                "ssh-agent": "ssh-agent";
            }>;
            rules: z.ZodArray<z.ZodObject<{
                methods: z.ZodOptional<z.ZodArray<z.ZodString>>;
                paths: z.ZodOptional<z.ZodArray<z.ZodString>>;
                action: z.ZodEnum<{
                    allow: "allow";
                    ask: "ask";
                    deny: "deny";
                }>;
                why: z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>;
            rulesFrom: z.ZodEnum<{
                connector: "connector";
                owner: "owner";
            }>;
        }, z.core.$strip>>;
        gate: z.ZodOptional<z.ZodObject<{
            approvers: z.ZodArray<z.ZodString>;
            scope: z.ZodEnum<{
                conversation: "conversation";
                use: "use";
            }>;
        }, z.core.$strip>>;
        hosts: z.ZodOptional<z.ZodObject<{
            guard: z.ZodBoolean;
            list: z.ZodArray<z.ZodString>;
            source: z.ZodEnum<{
                connector: "connector";
                keyring: "keyring";
                owner: "owner";
            }>;
        }, z.core.$strip>>;
        programs: z.ZodOptional<z.ZodObject<{
            programs: z.ZodArray<z.ZodString>;
            packages: z.ZodArray<z.ZodString>;
            anyField: z.ZodBoolean;
            source: z.ZodEnum<{
                keyring: "keyring";
                owner: "owner";
            }>;
        }, z.core.$strip>>;
        device: z.ZodOptional<z.ZodObject<{
            machine: z.ZodString;
            mode: z.ZodEnum<{
                copy: "copy";
                "each-use": "each-use";
                "while-here": "while-here";
            }>;
            online: z.ZodBoolean;
            locked: z.ZodOptional<z.ZodBoolean>;
            source: z.ZodEnum<{
                "1password": "1password";
                bitwarden: "bitwarden";
                keepassxc: "keepassxc";
                keyring: "keyring";
            }>;
        }, z.core.$strip>>;
    }, z.core.$strip>>;
}, z.core.$strip>;
//# sourceMappingURL=secrets.d.ts.map