/**
 * `@sylphx/management/adminTenants` — headless tenant provisioning.
 *
 * Mirrors `POST /admin/tenants/` in
 * `apps/api/src/server/platform/routes/admin/tenants.ts`. Replaces the
 * legacy `POST /admin/bootstrap` call (ADR-089 Phase 7.5): same inputs
 * and outputs; the caller now authenticates with a service token
 * (`svc_*`) carrying scope `platform:tenants:provision` rather than the
 * retired `SYLPHX_BOOTSTRAP_KEY` shared secret.
 *
 * Typical use: a CI job or ops script mints a scoped service token via
 * `sylphx tokens create --scope platform:tenants:provision ...`, stores
 * it in the operator's secret store, and calls `tenants.create` to
 * onboard a new org headlessly.
 */
import type { Client } from './client.js';
export interface CreateTenantInput {
    readonly orgName: string;
    readonly orgSlug: string;
    readonly projectName: string;
    readonly projectSlug: string;
    readonly ownerEmail: string;
}
export interface CreateTenantResult {
    readonly orgId: string;
    readonly projectId: string;
    /** `sk_{env}_{64hex}` — production secret key. Returned raw, once. */
    readonly secretKey: string;
    /** `pk_{env}_{32hex}` — production publishable key. Returned raw, once. */
    readonly publishableKey: string;
}
/**
 * Provision a brand-new tenant (organization + initial project + dev and
 * production environments) in a single transaction.
 *
 * The returned `secretKey` / `publishableKey` are the raw production
 * credentials — only SHA-256 hashes are retained server-side. Callers
 * MUST persist them immediately; they cannot be retrieved again.
 */
export declare const create: (client: Client, input: CreateTenantInput) => Promise<CreateTenantResult>;
//# sourceMappingURL=adminTenants.d.ts.map