import * as z from "zod/v4";
/**
 * Secret value and the exact hostnames it may be released to.
 */
export type VaultSecretWriteRequest = {
    /**
     * Exact DNS hostnames the secret may be sent to, 1 to 100 entries. Each entry is lowercased and a trailing dot is removed, so `API.Example.com.` is stored as `api.example.com`. Schemes, ports, paths, wildcards and empty values are rejected. Duplicates after normalization are collapsed. Matching is exact: a secret bound to `api.example.com` is never released to `example.com` or any other hostname.
     */
    hosts: Array<string>;
    /**
     * Secret value, 1 to 65536 characters. It is encrypted at rest and never returned.
     */
    value: string;
};
/** @internal */
export type VaultSecretWriteRequest$Outbound = {
    hosts: Array<string>;
    value: string;
};
/** @internal */
export declare const VaultSecretWriteRequest$outboundSchema: z.ZodType<VaultSecretWriteRequest$Outbound, VaultSecretWriteRequest>;
export declare function vaultSecretWriteRequestToJSON(vaultSecretWriteRequest: VaultSecretWriteRequest): string;
//# sourceMappingURL=vaultsecretwriterequest.d.ts.map