/**
 * `@sylphx/management/adminProjectCredentials` — operator BaaS credential rotation.
 *
 * Rotates an environment's `sk_*` / `pk_*` pair and optionally syncs the new
 * server connection URL into the environment-level `SYLPHX_SECRET_URL` app
 * secret so the reconciler updates deployed workloads through the normal
 * desired-state path.
 */
import type { Client } from './client.js';
export interface RotateEnvironmentCredentialsInput {
    /** TypeID (`env_*`) of the target environment. */
    readonly environmentId: string;
    /** Audit narrative. Min 3 chars. */
    readonly reason: string;
    /** When true, upsert shared env var `SYLPHX_SECRET_URL` and queue reconciliation. */
    readonly syncDeploymentSecret?: boolean;
}
export interface RotateEnvironmentCredentialsBySlugInput {
    /** Project slug, e.g. `keen-wave-x3m9p2`. */
    readonly projectSlug: string;
    /** Environment display name, e.g. `Production`. */
    readonly environmentName: string;
    /** Audit narrative. Min 3 chars. */
    readonly reason: string;
    /** When true, upsert shared env var `SYLPHX_SECRET_URL` and queue reconciliation. */
    readonly syncDeploymentSecret?: boolean;
}
export interface RotateEnvironmentCredentialsResult {
    readonly environmentId: string;
    readonly envType: 'development' | 'staging' | 'production' | 'preview';
    /** Raw secret key, returned once. Do not log. */
    readonly secretKey: string;
    readonly publicKey: string;
    readonly syncedDeploymentSecret: boolean;
    readonly queued: boolean;
    readonly generation: number;
}
export declare const rotateEnvironmentCredentials: (client: Client, input: RotateEnvironmentCredentialsInput) => Promise<RotateEnvironmentCredentialsResult>;
export declare const rotateEnvironmentCredentialsBySlug: (client: Client, input: RotateEnvironmentCredentialsBySlugInput) => Promise<RotateEnvironmentCredentialsResult>;
//# sourceMappingURL=adminProjectCredentials.d.ts.map