/**
 * Service tokens (ADR-059 §3) — org-scoped bearer tokens for CI / agent
 * workloads. Each token has a name, a scope set, optional project/env
 * binding, and optional IP allowlist.
 *
 *   GET    /orgs/:orgId/service-tokens?includeRevoked=
 *   POST   /orgs/:orgId/service-tokens                   — returns raw token once
 *   GET    /orgs/:orgId/service-tokens/:id               — metadata only
 *   DELETE /orgs/:orgId/service-tokens/:id               — revoke
 *   POST   /orgs/:orgId/service-tokens/:id/rotate        — issue new + revoke old
 *
 * The raw token value is returned ONLY at create() and rotate() time —
 * the API stores a SHA-256 hash at rest (ADR-055 Rule A).
 */
import type { CreateServiceTokenInput, CreateServiceTokenResult, GetServiceTokenResult, ListServiceTokensResult, RevokeServiceTokenResult, RotateServiceTokenResult, ServiceTokenView } from '@sylphx/contract';
import type { Client } from './client.js';
export type { ServiceTokenView };
export interface ListOptions {
    readonly includeRevoked?: boolean;
}
export declare const list: (client: Client, orgId: string, options?: ListOptions) => Promise<ListServiceTokensResult>;
export type CreateInput = CreateServiceTokenInput;
export type CreateResult = CreateServiceTokenResult;
export declare const create: (client: Client, orgId: string, input: CreateInput) => Promise<CreateResult>;
export declare const get: (client: Client, orgId: string, tokenId: string) => Promise<GetServiceTokenResult>;
export declare const revoke: (client: Client, orgId: string, tokenId: string) => Promise<RevokeServiceTokenResult>;
export type RotateResult = RotateServiceTokenResult;
export declare const rotate: (client: Client, orgId: string, tokenId: string) => Promise<RotateResult>;
//# sourceMappingURL=serviceTokens.d.ts.map