import * as z from "zod/v3";
import { Result as SafeParseResult } from "../../types/fp.js";
import { SDKValidationError } from "../errors/sdkvalidationerror.js";
export type GetJwtFromKeyRequestBody = {
    /**
     * JWT audience (aud) claim for the exchanged token. Set this to the target API/service URL that should accept the token.
     */
    audience: string;
    /**
     * Your external user identifier to place in the JWT subject (sub) claim. Must be 1–150 printable-ASCII characters and not the wildcard `*`.
     */
    externalUserId: string;
    /**
     * Token lifetime in seconds. Must be between 300 (5 minutes) and 2592000 (30 days). Defaults to 3600 (1 hour).
     */
    expiresIn?: number | undefined;
    /**
     * Optional subset of the API key's scopes to embed in the token (e.g. read:responses). The exchanged token is attenuated to this set at the gateway perimeter. If omitted, all of the key's scopes are embedded (no attenuation).
     */
    permissions?: Array<string> | undefined;
};
export type GetJwtFromKeyRequest = {
    /**
     * Optional external end-user identifier forwarded by the API gateway.
     */
    xOnBehalfOf?: string | undefined;
    requestBody: GetJwtFromKeyRequestBody;
};
/**
 * Successfully exchanged API key for a JWT token
 */
export type GetJwtFromKeyResponseBody = {
    /**
     * Signed JWT exchange token to use when calling downstream services.
     */
    token: string;
};
/** @internal */
export declare const GetJwtFromKeyRequestBody$inboundSchema: z.ZodType<GetJwtFromKeyRequestBody, z.ZodTypeDef, unknown>;
/** @internal */
export type GetJwtFromKeyRequestBody$Outbound = {
    audience: string;
    externalUserId: string;
    expiresIn: number;
    permissions?: Array<string> | undefined;
};
/** @internal */
export declare const GetJwtFromKeyRequestBody$outboundSchema: z.ZodType<GetJwtFromKeyRequestBody$Outbound, z.ZodTypeDef, GetJwtFromKeyRequestBody>;
export declare function getJwtFromKeyRequestBodyToJSON(getJwtFromKeyRequestBody: GetJwtFromKeyRequestBody): string;
export declare function getJwtFromKeyRequestBodyFromJSON(jsonString: string): SafeParseResult<GetJwtFromKeyRequestBody, SDKValidationError>;
/** @internal */
export declare const GetJwtFromKeyRequest$inboundSchema: z.ZodType<GetJwtFromKeyRequest, z.ZodTypeDef, unknown>;
/** @internal */
export type GetJwtFromKeyRequest$Outbound = {
    "X-On-Behalf-Of"?: string | undefined;
    RequestBody: GetJwtFromKeyRequestBody$Outbound;
};
/** @internal */
export declare const GetJwtFromKeyRequest$outboundSchema: z.ZodType<GetJwtFromKeyRequest$Outbound, z.ZodTypeDef, GetJwtFromKeyRequest>;
export declare function getJwtFromKeyRequestToJSON(getJwtFromKeyRequest: GetJwtFromKeyRequest): string;
export declare function getJwtFromKeyRequestFromJSON(jsonString: string): SafeParseResult<GetJwtFromKeyRequest, SDKValidationError>;
/** @internal */
export declare const GetJwtFromKeyResponseBody$inboundSchema: z.ZodType<GetJwtFromKeyResponseBody, z.ZodTypeDef, unknown>;
/** @internal */
export type GetJwtFromKeyResponseBody$Outbound = {
    token: string;
};
/** @internal */
export declare const GetJwtFromKeyResponseBody$outboundSchema: z.ZodType<GetJwtFromKeyResponseBody$Outbound, z.ZodTypeDef, GetJwtFromKeyResponseBody>;
export declare function getJwtFromKeyResponseBodyToJSON(getJwtFromKeyResponseBody: GetJwtFromKeyResponseBody): string;
export declare function getJwtFromKeyResponseBodyFromJSON(jsonString: string): SafeParseResult<GetJwtFromKeyResponseBody, SDKValidationError>;
//# sourceMappingURL=getjwtfromkey.d.ts.map