import { z } from '@struktoai/mirage-core/resource/secrets';
export declare const AWSSMConfig: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodObject<{
    region: z.ZodOptional<z.ZodString>;
    awsAccessKeyId: z.ZodOptional<z.ZodString>;
    awsSecretAccessKey: z.ZodOptional<z.ZodString>;
    awsSessionToken: z.ZodOptional<z.ZodString>;
    awsProfile: z.ZodOptional<z.ZodString>;
}, z.core.$strict>>;
export type AWSSMConfig = z.infer<typeof AWSSMConfig>;
/**
 * Dotenv source config: `path` is the default file when a managed
 * entry's `ref` is empty; a non-empty `ref` is itself the host
 * filesystem path.
 */
export declare const DotenvConfig: z.ZodObject<{
    path: z.ZodDefault<z.ZodString>;
}, z.core.$strict>;
export type DotenvConfig = z.infer<typeof DotenvConfig>;
/**
 * Process-environment source config: there is nothing to say. The host
 * process env has no sub-address, so a managed entry using this source
 * must leave `ref` empty.
 */
export declare const EnvConfig: z.ZodObject<{}, z.core.$strict>;
export type EnvConfig = z.infer<typeof EnvConfig>;
/**
 * 1Password source config: the service account token.
 *
 * Absent, the token falls back to `OP_SERVICE_ACCOUNT_TOKEN` in the
 * host process env, the variable 1Password's own CLI and SDKs read, so
 * a deployment with one account needs no config at all -- the same
 * shape `aws-sm` has, where an empty config reads the ambient AWS
 * settings.
 */
export declare const OnePasswordConfig: z.ZodObject<{
    token: z.ZodOptional<z.ZodString>;
}, z.core.$strict>;
export type OnePasswordConfig = z.infer<typeof OnePasswordConfig>;
//# sourceMappingURL=config.d.ts.map