import { z } from "zod";
export declare const configMetaSchema: z.ZodObject<{
    version: z.ZodLiteral<1>;
    updatedAt: z.ZodString;
    source: z.ZodEnum<{
        configure: "configure";
        doctor: "doctor";
        onboard: "onboard";
    }>;
}, z.core.$loose>;
export declare const llmConfigSchema: z.ZodObject<{
    provider: z.ZodEnum<{
        claude: "claude";
        openai: "openai";
    }>;
    apiKey: z.ZodOptional<z.ZodString>;
}, z.core.$loose>;
export declare const databaseBackupConfigSchema: z.ZodObject<{
    enabled: z.ZodDefault<z.ZodBoolean>;
    intervalMinutes: z.ZodDefault<z.ZodNumber>;
    retentionDays: z.ZodDefault<z.ZodNumber>;
    dir: z.ZodDefault<z.ZodString>;
}, z.core.$loose>;
export declare const databaseConfigSchema: z.ZodObject<{
    mode: z.ZodDefault<z.ZodEnum<{
        "embedded-postgres": "embedded-postgres";
        postgres: "postgres";
    }>>;
    connectionString: z.ZodOptional<z.ZodString>;
    embeddedPostgresDataDir: z.ZodDefault<z.ZodString>;
    embeddedPostgresPort: z.ZodDefault<z.ZodNumber>;
    backup: z.ZodDefault<z.ZodObject<{
        enabled: z.ZodDefault<z.ZodBoolean>;
        intervalMinutes: z.ZodDefault<z.ZodNumber>;
        retentionDays: z.ZodDefault<z.ZodNumber>;
        dir: z.ZodDefault<z.ZodString>;
    }, z.core.$loose>>;
}, z.core.$loose>;
export declare const loggingConfigSchema: z.ZodObject<{
    mode: z.ZodEnum<{
        cloud: "cloud";
        file: "file";
    }>;
    logDir: z.ZodDefault<z.ZodString>;
}, z.core.$loose>;
export declare const serverConfigSchema: z.ZodObject<{
    deploymentMode: z.ZodDefault<z.ZodEnum<{
        authenticated: "authenticated";
        local_trusted: "local_trusted";
    }>>;
    exposure: z.ZodDefault<z.ZodEnum<{
        private: "private";
        public: "public";
    }>>;
    bind: z.ZodOptional<z.ZodEnum<{
        custom: "custom";
        lan: "lan";
        loopback: "loopback";
        tailnet: "tailnet";
    }>>;
    customBindHost: z.ZodOptional<z.ZodString>;
    host: z.ZodDefault<z.ZodString>;
    port: z.ZodDefault<z.ZodNumber>;
    allowedHostnames: z.ZodDefault<z.ZodArray<z.ZodString>>;
    serveUi: z.ZodDefault<z.ZodBoolean>;
}, z.core.$loose>;
export declare const authConfigSchema: z.ZodObject<{
    baseUrlMode: z.ZodDefault<z.ZodEnum<{
        auto: "auto";
        explicit: "explicit";
    }>>;
    publicBaseUrl: z.ZodOptional<z.ZodString>;
    disableSignUp: z.ZodDefault<z.ZodBoolean>;
}, z.core.$loose>;
export declare const storageLocalDiskConfigSchema: z.ZodObject<{
    baseDir: z.ZodDefault<z.ZodString>;
}, z.core.$loose>;
export declare const storageS3ConfigSchema: z.ZodObject<{
    bucket: z.ZodDefault<z.ZodString>;
    region: z.ZodDefault<z.ZodString>;
    endpoint: z.ZodOptional<z.ZodString>;
    prefix: z.ZodDefault<z.ZodString>;
    forcePathStyle: z.ZodDefault<z.ZodBoolean>;
}, z.core.$loose>;
export declare const storageConfigSchema: z.ZodObject<{
    provider: z.ZodDefault<z.ZodEnum<{
        local_disk: "local_disk";
        s3: "s3";
    }>>;
    localDisk: z.ZodDefault<z.ZodObject<{
        baseDir: z.ZodDefault<z.ZodString>;
    }, z.core.$loose>>;
    s3: z.ZodDefault<z.ZodObject<{
        bucket: z.ZodDefault<z.ZodString>;
        region: z.ZodDefault<z.ZodString>;
        endpoint: z.ZodOptional<z.ZodString>;
        prefix: z.ZodDefault<z.ZodString>;
        forcePathStyle: z.ZodDefault<z.ZodBoolean>;
    }, z.core.$loose>>;
}, z.core.$loose>;
export declare const secretsLocalEncryptedConfigSchema: z.ZodObject<{
    keyFilePath: z.ZodDefault<z.ZodString>;
}, z.core.$loose>;
export declare const secretsConfigSchema: z.ZodObject<{
    provider: z.ZodDefault<z.ZodEnum<{
        aws_secrets_manager: "aws_secrets_manager";
        gcp_secret_manager: "gcp_secret_manager";
        local_encrypted: "local_encrypted";
        vault: "vault";
    }>>;
    strictMode: z.ZodDefault<z.ZodBoolean>;
    localEncrypted: z.ZodDefault<z.ZodObject<{
        keyFilePath: z.ZodDefault<z.ZodString>;
    }, z.core.$loose>>;
}, z.core.$loose>;
export declare const telemetryConfigSchema: z.ZodPrefault<z.ZodObject<{
    enabled: z.ZodDefault<z.ZodBoolean>;
}, z.core.$loose>>;
export declare const updatesConfigSchema: z.ZodPrefault<z.ZodObject<{
    checkEnabled: z.ZodDefault<z.ZodBoolean>;
}, z.core.$loose>>;
export declare const paperclipConfigSchema: z.ZodObject<{
    $meta: z.ZodObject<{
        version: z.ZodLiteral<1>;
        updatedAt: z.ZodString;
        source: z.ZodEnum<{
            configure: "configure";
            doctor: "doctor";
            onboard: "onboard";
        }>;
    }, z.core.$loose>;
    llm: z.ZodOptional<z.ZodObject<{
        provider: z.ZodEnum<{
            claude: "claude";
            openai: "openai";
        }>;
        apiKey: z.ZodOptional<z.ZodString>;
    }, z.core.$loose>>;
    database: z.ZodObject<{
        mode: z.ZodDefault<z.ZodEnum<{
            "embedded-postgres": "embedded-postgres";
            postgres: "postgres";
        }>>;
        connectionString: z.ZodOptional<z.ZodString>;
        embeddedPostgresDataDir: z.ZodDefault<z.ZodString>;
        embeddedPostgresPort: z.ZodDefault<z.ZodNumber>;
        backup: z.ZodDefault<z.ZodObject<{
            enabled: z.ZodDefault<z.ZodBoolean>;
            intervalMinutes: z.ZodDefault<z.ZodNumber>;
            retentionDays: z.ZodDefault<z.ZodNumber>;
            dir: z.ZodDefault<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$loose>;
    logging: z.ZodObject<{
        mode: z.ZodEnum<{
            cloud: "cloud";
            file: "file";
        }>;
        logDir: z.ZodDefault<z.ZodString>;
    }, z.core.$loose>;
    server: z.ZodObject<{
        deploymentMode: z.ZodDefault<z.ZodEnum<{
            authenticated: "authenticated";
            local_trusted: "local_trusted";
        }>>;
        exposure: z.ZodDefault<z.ZodEnum<{
            private: "private";
            public: "public";
        }>>;
        bind: z.ZodOptional<z.ZodEnum<{
            custom: "custom";
            lan: "lan";
            loopback: "loopback";
            tailnet: "tailnet";
        }>>;
        customBindHost: z.ZodOptional<z.ZodString>;
        host: z.ZodDefault<z.ZodString>;
        port: z.ZodDefault<z.ZodNumber>;
        allowedHostnames: z.ZodDefault<z.ZodArray<z.ZodString>>;
        serveUi: z.ZodDefault<z.ZodBoolean>;
    }, z.core.$loose>;
    telemetry: z.ZodPrefault<z.ZodObject<{
        enabled: z.ZodDefault<z.ZodBoolean>;
    }, z.core.$loose>>;
    updates: z.ZodOptional<z.ZodPrefault<z.ZodObject<{
        checkEnabled: z.ZodDefault<z.ZodBoolean>;
    }, z.core.$loose>>>;
    auth: z.ZodDefault<z.ZodObject<{
        baseUrlMode: z.ZodDefault<z.ZodEnum<{
            auto: "auto";
            explicit: "explicit";
        }>>;
        publicBaseUrl: z.ZodOptional<z.ZodString>;
        disableSignUp: z.ZodDefault<z.ZodBoolean>;
    }, z.core.$loose>>;
    storage: z.ZodDefault<z.ZodObject<{
        provider: z.ZodDefault<z.ZodEnum<{
            local_disk: "local_disk";
            s3: "s3";
        }>>;
        localDisk: z.ZodDefault<z.ZodObject<{
            baseDir: z.ZodDefault<z.ZodString>;
        }, z.core.$loose>>;
        s3: z.ZodDefault<z.ZodObject<{
            bucket: z.ZodDefault<z.ZodString>;
            region: z.ZodDefault<z.ZodString>;
            endpoint: z.ZodOptional<z.ZodString>;
            prefix: z.ZodDefault<z.ZodString>;
            forcePathStyle: z.ZodDefault<z.ZodBoolean>;
        }, z.core.$loose>>;
    }, z.core.$loose>>;
    secrets: z.ZodDefault<z.ZodObject<{
        provider: z.ZodDefault<z.ZodEnum<{
            aws_secrets_manager: "aws_secrets_manager";
            gcp_secret_manager: "gcp_secret_manager";
            local_encrypted: "local_encrypted";
            vault: "vault";
        }>>;
        strictMode: z.ZodDefault<z.ZodBoolean>;
        localEncrypted: z.ZodDefault<z.ZodObject<{
            keyFilePath: z.ZodDefault<z.ZodString>;
        }, z.core.$loose>>;
    }, z.core.$loose>>;
}, z.core.$loose>;
export type PaperclipConfig = z.infer<typeof paperclipConfigSchema>;
export type LlmConfig = z.infer<typeof llmConfigSchema>;
export type DatabaseConfig = z.infer<typeof databaseConfigSchema>;
export type LoggingConfig = z.infer<typeof loggingConfigSchema>;
export type ServerConfig = z.infer<typeof serverConfigSchema>;
export type StorageConfig = z.infer<typeof storageConfigSchema>;
export type StorageLocalDiskConfig = z.infer<typeof storageLocalDiskConfigSchema>;
export type StorageS3Config = z.infer<typeof storageS3ConfigSchema>;
export type SecretsConfig = z.infer<typeof secretsConfigSchema>;
export type SecretsLocalEncryptedConfig = z.infer<typeof secretsLocalEncryptedConfigSchema>;
export type AuthConfig = z.infer<typeof authConfigSchema>;
export type TelemetryConfig = z.infer<typeof telemetryConfigSchema>;
export type UpdatesConfig = z.infer<typeof updatesConfigSchema>;
export type ConfigMeta = z.infer<typeof configMetaSchema>;
export type DatabaseBackupConfig = z.infer<typeof databaseBackupConfigSchema>;
/**
 * Applies a config update while retaining extension keys from the parsed source.
 * Known optional keys that are absent from the update stay absent, so callers can
 * intentionally clear values such as llm.apiKey or auth.publicBaseUrl.
 */
export declare function mergePaperclipConfig(source: PaperclipConfig, update: PaperclipConfig): PaperclipConfig;
export type ConfigKeyWarning = {
    path: string;
    suggestion: string;
};
/** Returns likely misspellings among retained extension keys without modifying them. */
export declare function findPaperclipConfigKeyWarnings(config: unknown): ConfigKeyWarning[];
//# sourceMappingURL=config-schema.d.ts.map