/**
 * DTO for administrative API key creation on behalf of a user
 *
 * Warning: This endpoint should be protected by admin authentication.
 * The service does not enforce authorization - it is the responsibility of the
 * framework adapter (NestJS/Express/Fastify) to protect the endpoint.
 *
 * Admin-created keys bypass the `allowUserCreation` restriction but still obey
 * `maxKeysPerUser`, expiry, and IP-restriction rules.
 */
export declare class AdminCreateApiKeyDTO {
    /**
     * Target user sub (UUID v4)
     *
     * Sanitization: Trimmed and lowercased.
     */
    sub: string;
    /**
     * User-friendly label for the key (optional)
     */
    name?: string;
    /**
     * Key expiry in days, or `null` for a key that never expires
     *
     * Mandatory at creation (see {@link CreateApiKeyDTO} for the rules the service enforces).
     */
    expiresInDays?: number | null;
    /**
     * Allowed source IPs / CIDR ranges for this key (optional)
     */
    allowedIps?: string[];
}
/**
 * DTO for administrative API key update on behalf of a user
 */
export declare class AdminUpdateApiKeyDTO {
    /**
     * Target user sub (UUID v4)
     */
    sub: string;
    /**
     * External key identifier (UUID v4)
     */
    keyId: string;
    /**
     * New label for the key (optional)
     */
    name?: string;
    /**
     * Replacement IP allowlist (optional). Pass an empty array to clear restrictions.
     */
    allowedIps?: string[];
}
/**
 * DTO for administrative API key management (list / revoke / delete) by user sub
 *
 * For list operations, only `sub` is required. For revoke/delete, `keyId` is also required.
 */
export declare class AdminManageApiKeyDTO {
    /**
     * Target user sub (UUID v4)
     */
    sub: string;
    /**
     * External key identifier (UUID v4). Required for revoke/delete, omitted for list.
     */
    keyId?: string;
}
//# sourceMappingURL=admin-api-key.dto.d.ts.map