import { z } from "zod";
export declare const envBindingPlainSchema: z.ZodObject<{
    type: z.ZodLiteral<"plain">;
    value: z.ZodString;
}, z.core.$strip>;
export declare const envBindingSecretRefSchema: z.ZodObject<{
    type: z.ZodLiteral<"secret_ref">;
    secretId: z.ZodString;
    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
    projectionClass: z.ZodOptional<z.ZodEnum<{
        class_3_static_lease: "class_3_static_lease";
        unclassified: "unclassified";
    }>>;
    projectionAllowlistKey: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export declare const envBindingUserSecretRefSchema: z.ZodObject<{
    type: z.ZodLiteral<"user_secret_ref">;
    key: z.ZodString;
    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
    required: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
    allowMissingOverride: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
}, z.core.$strip>;
export declare const envBindingSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
    type: z.ZodLiteral<"plain">;
    value: z.ZodString;
}, z.core.$strip>, z.ZodObject<{
    type: z.ZodLiteral<"secret_ref">;
    secretId: z.ZodString;
    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
    projectionClass: z.ZodOptional<z.ZodEnum<{
        class_3_static_lease: "class_3_static_lease";
        unclassified: "unclassified";
    }>>;
    projectionAllowlistKey: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>, z.ZodObject<{
    type: z.ZodLiteral<"user_secret_ref">;
    key: z.ZodString;
    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
    required: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
    allowMissingOverride: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
}, z.core.$strip>]>;
export declare const envConfigSchema: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
    type: z.ZodLiteral<"plain">;
    value: z.ZodString;
}, z.core.$strip>, z.ZodObject<{
    type: z.ZodLiteral<"secret_ref">;
    secretId: z.ZodString;
    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
    projectionClass: z.ZodOptional<z.ZodEnum<{
        class_3_static_lease: "class_3_static_lease";
        unclassified: "unclassified";
    }>>;
    projectionAllowlistKey: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>, z.ZodObject<{
    type: z.ZodLiteral<"user_secret_ref">;
    key: z.ZodString;
    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
    required: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
    allowMissingOverride: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
}, z.core.$strip>]>>;
export declare const createSecretSchema: z.ZodObject<{
    name: z.ZodString;
    key: z.ZodOptional<z.ZodString>;
    provider: z.ZodOptional<z.ZodEnum<{
        aws_secrets_manager: "aws_secrets_manager";
        gcp_secret_manager: "gcp_secret_manager";
        local_encrypted: "local_encrypted";
        vault: "vault";
    }>>;
    providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    managedMode: z.ZodOptional<z.ZodEnum<{
        external_reference: "external_reference";
        paperclip_managed: "paperclip_managed";
    }>>;
    value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
    providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export type CreateSecret = z.infer<typeof createSecretSchema>;
export declare const rotateSecretSchema: z.ZodObject<{
    value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export type RotateSecret = z.infer<typeof rotateSecretSchema>;
export declare const updateSecretSchema: z.ZodObject<{
    name: z.ZodOptional<z.ZodString>;
    key: z.ZodOptional<z.ZodString>;
    status: z.ZodOptional<z.ZodEnum<{
        active: "active";
        archived: "archived";
        deleted: "deleted";
        disabled: "disabled";
    }>>;
    providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
}, z.core.$strip>;
export type UpdateSecret = z.infer<typeof updateSecretSchema>;
export declare const secretBindingTargetSchema: z.ZodObject<{
    targetType: z.ZodEnum<{
        agent: "agent";
        environment: "environment";
        issue: "issue";
        plugin: "plugin";
        project: "project";
        routine: "routine";
        run: "run";
        system: "system";
        tool_connection: "tool_connection";
    }>;
    targetId: z.ZodString;
    configPath: z.ZodString;
}, z.core.$strip>;
export declare const createSecretBindingSchema: z.ZodObject<{
    targetType: z.ZodEnum<{
        agent: "agent";
        environment: "environment";
        issue: "issue";
        plugin: "plugin";
        project: "project";
        routine: "routine";
        run: "run";
        system: "system";
        tool_connection: "tool_connection";
    }>;
    targetId: z.ZodString;
    configPath: z.ZodString;
    secretId: z.ZodString;
    versionSelector: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
    required: z.ZodDefault<z.ZodBoolean>;
    label: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    projectionClass: z.ZodOptional<z.ZodEnum<{
        class_3_static_lease: "class_3_static_lease";
        unclassified: "unclassified";
    }>>;
    projectionAllowlistKey: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export type CreateSecretBinding = z.infer<typeof createSecretBindingSchema>;
export declare const createUserSecretDefinitionSchema: z.ZodObject<{
    key: z.ZodString;
    name: z.ZodString;
    description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    status: z.ZodOptional<z.ZodEnum<{
        active: "active";
        archived: "archived";
        disabled: "disabled";
    }>>;
    provider: z.ZodOptional<z.ZodEnum<{
        aws_secrets_manager: "aws_secrets_manager";
        gcp_secret_manager: "gcp_secret_manager";
        local_encrypted: "local_encrypted";
        vault: "vault";
    }>>;
    providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    managedMode: z.ZodOptional<z.ZodEnum<{
        external_reference: "external_reference";
        paperclip_managed: "paperclip_managed";
    }>>;
    providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
    usageGuidance: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export type CreateUserSecretDefinition = z.infer<typeof createUserSecretDefinitionSchema>;
export declare const updateUserSecretDefinitionSchema: z.ZodObject<{
    name: z.ZodOptional<z.ZodString>;
    description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    status: z.ZodOptional<z.ZodEnum<{
        active: "active";
        archived: "archived";
        deleted: "deleted";
        disabled: "disabled";
    }>>;
    providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
    usageGuidance: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export type UpdateUserSecretDefinition = z.infer<typeof updateUserSecretDefinitionSchema>;
export declare const createUserSecretValueSchema: z.ZodObject<{
    definitionKey: z.ZodOptional<z.ZodString>;
    definitionId: z.ZodOptional<z.ZodString>;
    value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export type CreateUserSecretValue = z.infer<typeof createUserSecretValueSchema>;
export declare const updateUserSecretValueSchema: z.ZodObject<{
    status: z.ZodOptional<z.ZodEnum<{
        active: "active";
        archived: "archived";
        deleted: "deleted";
        disabled: "disabled";
    }>>;
    value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export type UpdateUserSecretValue = z.infer<typeof updateUserSecretValueSchema>;
export declare const rotateUserSecretValueSchema: z.ZodObject<{
    value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export type RotateUserSecretValue = z.infer<typeof rotateUserSecretValueSchema>;
export declare const createUserSecretDeclarationSchema: z.ZodObject<{
    targetType: z.ZodEnum<{
        agent: "agent";
        environment: "environment";
        issue: "issue";
        plugin: "plugin";
        project: "project";
        routine: "routine";
        run: "run";
        system: "system";
        tool_connection: "tool_connection";
    }>;
    targetId: z.ZodString;
    configPath: z.ZodString;
    definitionKey: z.ZodString;
    envKey: z.ZodString;
    versionSelector: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
    required: z.ZodDefault<z.ZodBoolean>;
    allowMissingOverride: z.ZodDefault<z.ZodBoolean>;
    label: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strip>;
export type CreateUserSecretDeclaration = z.infer<typeof createUserSecretDeclarationSchema>;
export declare const localEncryptedProviderConfigSchema: z.ZodObject<{
    backupReminderAcknowledged: z.ZodOptional<z.ZodBoolean>;
}, z.core.$strict>;
export declare const awsSecretsManagerProviderConfigSchema: z.ZodObject<{
    region: z.ZodString;
    namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    secretNamePrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    kmsKeyId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    ownerTag: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    environmentTag: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strict>;
export declare const gcpSecretManagerProviderConfigSchema: z.ZodObject<{
    projectId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    location: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    secretNamePrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strict>;
export declare const vaultProviderConfigSchema: z.ZodObject<{
    address: z.ZodNullable<z.ZodOptional<z.ZodPreprocess<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>>;
    namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    mountPath: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    secretPathPrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
}, z.core.$strict>;
export declare const secretProviderConfigPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
    provider: z.ZodLiteral<"local_encrypted">;
    config: z.ZodObject<{
        backupReminderAcknowledged: z.ZodOptional<z.ZodBoolean>;
    }, z.core.$strict>;
}, z.core.$strip>, z.ZodObject<{
    provider: z.ZodLiteral<"aws_secrets_manager">;
    config: z.ZodObject<{
        region: z.ZodString;
        namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        secretNamePrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        kmsKeyId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        ownerTag: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        environmentTag: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    }, z.core.$strict>;
}, z.core.$strip>, z.ZodObject<{
    provider: z.ZodLiteral<"gcp_secret_manager">;
    config: z.ZodObject<{
        projectId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        location: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        secretNamePrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    }, z.core.$strict>;
}, z.core.$strip>, z.ZodObject<{
    provider: z.ZodLiteral<"vault">;
    config: z.ZodObject<{
        address: z.ZodNullable<z.ZodOptional<z.ZodPreprocess<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>>;
        namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        mountPath: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        secretPathPrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    }, z.core.$strict>;
}, z.core.$strip>], "provider">;
export declare const createSecretProviderConfigSchema: z.ZodObject<{
    provider: z.ZodEnum<{
        aws_secrets_manager: "aws_secrets_manager";
        gcp_secret_manager: "gcp_secret_manager";
        local_encrypted: "local_encrypted";
        vault: "vault";
    }>;
    displayName: z.ZodString;
    status: z.ZodOptional<z.ZodEnum<{
        coming_soon: "coming_soon";
        disabled: "disabled";
        ready: "ready";
        warning: "warning";
    }>>;
    isDefault: z.ZodOptional<z.ZodBoolean>;
    config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
export type CreateSecretProviderConfig = z.infer<typeof createSecretProviderConfigSchema>;
export declare const updateSecretProviderConfigSchema: z.ZodObject<{
    displayName: z.ZodOptional<z.ZodString>;
    status: z.ZodOptional<z.ZodEnum<{
        coming_soon: "coming_soon";
        disabled: "disabled";
        ready: "ready";
        warning: "warning";
    }>>;
    isDefault: z.ZodOptional<z.ZodBoolean>;
    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
}, z.core.$strip>;
export type UpdateSecretProviderConfig = z.infer<typeof updateSecretProviderConfigSchema>;
export declare const remoteSecretImportPreviewSchema: z.ZodObject<{
    providerConfigId: z.ZodString;
    query: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    nextToken: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    pageSize: z.ZodOptional<z.ZodNumber>;
}, z.core.$strip>;
export type RemoteSecretImportPreview = z.infer<typeof remoteSecretImportPreviewSchema>;
export declare const secretProviderConfigDiscoveryPreviewSchema: z.ZodObject<{
    provider: z.ZodEnum<{
        aws_secrets_manager: "aws_secrets_manager";
        gcp_secret_manager: "gcp_secret_manager";
        local_encrypted: "local_encrypted";
        vault: "vault";
    }>;
    config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    query: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    nextToken: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    pageSize: z.ZodOptional<z.ZodNumber>;
}, z.core.$strip>;
export type SecretProviderConfigDiscoveryPreview = z.infer<typeof secretProviderConfigDiscoveryPreviewSchema>;
export declare const remoteSecretImportSelectionSchema: z.ZodObject<{
    externalRef: z.ZodString;
    name: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    key: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
    providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
}, z.core.$strip>;
export declare const remoteSecretImportSchema: z.ZodObject<{
    providerConfigId: z.ZodString;
    secrets: z.ZodArray<z.ZodObject<{
        externalRef: z.ZodString;
        name: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        key: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
        providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export type RemoteSecretImportSelection = z.infer<typeof remoteSecretImportSelectionSchema>;
export type RemoteSecretImport = z.infer<typeof remoteSecretImportSchema>;
//# sourceMappingURL=secret.d.ts.map