import * as z from "zod/v4";
export type UpdateBYOKKeyRequest = {
    /**
     * Optional allowlist of OpenRouter API key hashes (`api_keys.hash`) that may use this credential. `null` clears the restriction. Must contain at least one hash if provided. Hashes that do not belong to your account return a 400.
     */
    allowedApiKeyHashes?: Array<string> | null | undefined;
    /**
     * Optional allowlist of model slugs this credential may be used for. `null` means no restriction.
     */
    allowedModels?: Array<string> | null | undefined;
    /**
     * Optional allowlist of user IDs that may use this credential. `null` means no restriction.
     */
    allowedUserIds?: Array<string> | null | undefined;
    /**
     * Your declaration of whether the upstream provider account behind this credential has zero data retention (ZDR). `null` inherits OpenRouter's data policy for the provider's endpoint; `true` declares the account ZDR so requests that require ZDR may route to this credential even when the shared endpoint retains data; `false` declares it non-ZDR so such requests never route to it. Self-declared and not verified by OpenRouter. Omit to leave the stored value unchanged; `null` clears the declaration.
     */
    declaredZdr?: boolean | null | undefined;
    /**
     * Whether this credential is disabled.
     */
    disabled?: boolean | undefined;
    /**
     * Whether OpenRouter's shared endpoints on this provider are removed for every model, including models outside `allowed_models` and after all of your keys for the provider fail. The provider is skipped instead of spending OpenRouter credits. Only valid on non-fallback credentials. Omit to leave the stored value unchanged.
     */
    isByokOnly?: boolean | undefined;
    /**
     * Whether this credential is treated as a fallback — used only after non-fallback keys for the same provider have been tried. Cannot be combined with `is_byok_only`. Omit to leave the stored value unchanged.
     */
    isFallback?: boolean | undefined;
    /**
     * Whether OpenRouter's shared endpoints on this provider are removed for the models this credential applies to (its `allowed_models`, or every model when `null`). Requests for those models run only on your keys; models outside the allowlist may still fall back to shared capacity on this provider. Omit to leave the stored value unchanged.
     */
    isRequired?: boolean | undefined;
    /**
     * A new raw provider API key to rotate the credential in-place. The previous key material is overwritten and the masked label is regenerated. Encrypted at rest and never returned in API responses.
     */
    key?: string | undefined;
    /**
     * Optional human-readable name for the credential.
     */
    name?: string | null | undefined;
};
/** @internal */
export type UpdateBYOKKeyRequest$Outbound = {
    allowed_api_key_hashes?: Array<string> | null | undefined;
    allowed_models?: Array<string> | null | undefined;
    allowed_user_ids?: Array<string> | null | undefined;
    declared_zdr?: boolean | null | undefined;
    disabled?: boolean | undefined;
    is_byok_only?: boolean | undefined;
    is_fallback?: boolean | undefined;
    is_required?: boolean | undefined;
    key?: string | undefined;
    name?: string | null | undefined;
};
/** @internal */
export declare const UpdateBYOKKeyRequest$outboundSchema: z.ZodType<UpdateBYOKKeyRequest$Outbound, UpdateBYOKKeyRequest>;
export declare function updateBYOKKeyRequestToJSON(updateBYOKKeyRequest: UpdateBYOKKeyRequest): string;
//# sourceMappingURL=updatebyokkeyrequest.d.ts.map