import { ClientSDK, RequestOptions } from "../lib/sdks.js";
import * as operations from "../models/operations/index.js";
export declare class ApiKeys extends ClientSDK {
    /**
     * Mint a scoped API key
     *
     * @remarks
     * Mint an API key bound to a (principal, team) carrying an explicit scope set. Requires a session, or a bearer key holding `write:apikeys`. The plaintext secret is returned once.
     */
    create(request: operations.CreateScopedApiKeyRequest, options?: RequestOptions): Promise<operations.CreateScopedApiKeyResponseBody>;
    /**
     * List scoped API keys
     *
     * @remarks
     * List the caller's scoped API keys (metadata only — never the secret). Optional `?orgId=&teamId=` narrows; a key caller is scoped to its own org.
     */
    list(request: operations.ListScopedApiKeysRequest, options?: RequestOptions): Promise<Array<operations.ResponseBody>>;
    /**
     * Update a scoped API key
     *
     * @remarks
     * Update a key's scopes (and optionally name / rate limit). Scopes already on the key are retained; newly-added scopes are bounded by the caller's role (and, for a key caller, the calling key's own scopes).
     */
    update(request: operations.UpdateScopedApiKeyRequest, options?: RequestOptions): Promise<operations.UpdateScopedApiKeyResponseBody>;
    /**
     * Rotate a scoped API key's secret
     *
     * @remarks
     * Issue a new plaintext secret for an existing key in place (id / scopes / binding preserved). Returned once.
     */
    regenerate(request: operations.RegenerateScopedApiKeyRequest, options?: RequestOptions): Promise<operations.RegenerateScopedApiKeyResponseBody>;
    /**
     * Exchange API key for a JWT token
     *
     * @remarks
     * Exchange an API key for a short-lived JWT token.
     */
    exchangeToken(request: operations.ExchangeApiKeyTokenRequest, options?: RequestOptions): Promise<operations.ExchangeApiKeyTokenResponseBody>;
}
//# sourceMappingURL=apikeys.d.ts.map