import { ApiKey, ListOptions, Organization, PaginatedResponse, PrivacyCenter, Team, ToolClients, ToolDefinition, TranscendGraphQLBase, User, z } from "@transcend-io/mcp-server-base";
import { ScopeName } from "@transcend-io/privacy-types";
//#region src/tools/index.d.ts
declare function getAdminTools(clients: ToolClients): ToolDefinition[];
//#endregion
//#region src/scopes.d.ts
/** OAuth scopes required for Admin MCP tools (offline_access added by base). */
declare const ADMIN_OAUTH_SCOPES: readonly [ScopeName.ViewEmployees, ScopeName.ViewApiKeys, ScopeName.ManageApiKeys];
//#endregion
//#region src/__generated__/graphql.d.ts
type OrderDirection$1 = 'ASC' | 'DESC';
type ScopeName$1 = 'activatePolicyEngineBundles' | 'approvePrompts' | 'connectDataSilos' | 'deployConsentManager' | 'deployPrivacyCenter' | 'deployTestConsentManager' | 'executeAuditor' | 'executePrompt' | 'executeRules' | 'fullAdmin' | 'generatePreferenceAccessTokens' | 'llmLogTransfer' | 'makeDataSubjectRequest' | 'manageAccessControl' | 'manageActionItemCollections' | 'manageAllActionItems' | 'manageApiKeys' | 'manageAssessments' | 'manageAssignedAssessments' | 'manageAssignedBulkRespond' | 'manageAssignedRules' | 'manageAuditor' | 'manageBilling' | 'manageCodeScanning' | 'manageConsentManager' | 'manageConsentManagerDeveloperSettings' | 'manageConsentManagerDisplaySettings' | 'manageCustomFunction' | 'manageDataFlow' | 'manageDataInventory' | 'manageDataMap' | 'manageDataSubCategories' | 'manageDataSubjectRequestSettings' | 'manageEmailDomains' | 'manageEmailTemplates' | 'manageGlobalAttributes' | 'manageIntlMessages' | 'manageLegalHold' | 'manageOrganizationInfo' | 'managePolicies' | 'managePolicyEngineBundles' | 'managePreferenceStoreSettings' | 'managePrivacyCenter' | 'managePromptRuns' | 'managePrompts' | 'manageRequestCompilation' | 'manageRequestIdentities' | 'manageRequestSecurity' | 'manageRules' | 'manageSSO' | 'manageSombraRootKeys' | 'manageStoredPreferences' | 'manageWorkflows' | 'managedAssignedConsentManager' | 'managedAssignedDataInventory' | 'managedAssignedIntegrations' | 'managedAssignedRequests' | 'readOnly' | 'requestApproval' | 'viewAllActionItems' | 'viewApiKeys' | 'viewAssessments' | 'viewAssignedAssessments' | 'viewAssignedConsentManager' | 'viewAssignedDataInventory' | 'viewAssignedIntegrations' | 'viewAssignedRequests' | 'viewAssignedRules' | 'viewAuditEvents' | 'viewAuditorRuns' | 'viewCodeScanning' | 'viewConsentManager' | 'viewCustomFunction' | 'viewCustomerDataDataMapping' | 'viewCustomerDataPrivacyRequests' | 'viewDataFlow' | 'viewDataInventory' | 'viewDataMap' | 'viewDataSubCategories' | 'viewDataSubjectRequestSettings' | 'viewEmailDomains' | 'viewEmailTemplates' | 'viewEmployees' | 'viewGlobalAttributes' | 'viewIntlMessages' | 'viewLegalHold' | 'viewManagedConsentDatabaseAdminApi' | 'viewPolicies' | 'viewPolicyEngineBundles' | 'viewPreferenceStoreSettings' | 'viewPrivacyCenter' | 'viewPromptRuns' | 'viewPrompts' | 'viewRequestCompilation' | 'viewRequestIdentitySettings' | 'viewRequests' | 'viewRules' | 'viewSSO' | 'viewScopes' | 'viewUsage' | 'viewWorkflows';
type UserFiltersInput = {
  awaitingNotification?: boolean | null | undefined;
  canRevealMultiTenantSombraSecret?: boolean | null | undefined;
  derivedScopeNames?: Array<ScopeName$1> | null | undefined;
  ids?: Array<string | number> | null | undefined;
  isAdmin?: boolean | null | undefined;
  isInvited?: boolean | null | undefined;
  isLocked?: boolean | null | undefined;
  lastLoggedInAfter?: string | null | undefined;
  lastLoggedInBefore?: string | null | undefined;
  needsConfiguration?: boolean | null | undefined;
  scopeNames?: Array<ScopeName$1> | null | undefined;
  teamIds?: Array<string | number> | null | undefined;
  text?: string | null | undefined;
};
type UserOrder = {
  direction: OrderDirection$1;
  field: UserOrderField;
};
type UserOrderField = 'createdAt' | 'name' | 'updatedAt';
//#endregion
//#region src/graphql.d.ts
/**
 * User row returned by {@link AdminMixin.listUsers}, matching Admin Users fields.
 */
interface ListedUser {
  /** User UUID */
  id: string;
  /** Email address */
  email: string;
  /** Display name */
  name: string;
  /** Whether the user is an organization administrator */
  isAdmin: boolean;
  /** Whether the user has been invited but not onboarded */
  isInvited: boolean;
  /** Whether the account is locked */
  isLocked: boolean;
  /** ISO timestamp of last login, if any */
  lastLoggedIn?: string;
  /** Teams the user belongs to */
  teams: {
    /** Team UUID */id: string; /** Team display name */
    name: string;
  }[];
  /** Directly assigned scopes */
  scopes: {
    /** ScopeName enum value */name: string;
  }[];
}
declare class AdminMixin extends TranscendGraphQLBase {
  getOrganization(): Promise<Organization>;
  getCurrentUser(): Promise<User>;
  listUsers(options?: Omit<ListOptions, 'filterBy' | 'orderBy'> & {
    /** Sparse UserFiltersInput; omitted/undefined becomes `{}` on the wire */filterBy?: UserFiltersInput; /** Sort clauses; defaults to null (server default) when omitted */
    orderBy?: UserOrder[];
  }): Promise<PaginatedResponse<ListedUser>>;
  listTeams(options?: ListOptions): Promise<PaginatedResponse<Team>>;
  listApiKeys(options?: ListOptions): Promise<PaginatedResponse<ApiKey>>;
  getPrivacyCenter(lookup?: {
    url?: string;
  }): Promise<PrivacyCenter | null>;
}
//#endregion
//#region src/tools/admin_list_api_keys.d.ts
declare const ListApiKeysSchema: z.ZodObject<{
  limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
  offset: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
}, z.core.$strip>;
type ListApiKeysInput = z.infer<typeof ListApiKeysSchema>;
//#endregion
//#region src/tools/admin_list_scopes.d.ts
declare const ListScopesSchema: z.ZodObject<{
  text: z.ZodOptional<z.ZodString>;
  includeDetails: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
}, z.core.$strip>;
type ListScopesInput = z.infer<typeof ListScopesSchema>;
//#endregion
//#region src/tools/admin_list_teams.d.ts
declare const ListTeamsSchema: z.ZodObject<{
  limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
  offset: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
}, z.core.$strip>;
type ListTeamsInput = z.infer<typeof ListTeamsSchema>;
//#endregion
//#region src/tools/admin_list_users.d.ts
declare const ListUsersSchema: z.ZodObject<{
  limit: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
  offset: z.ZodDefault<z.ZodOptional<z.ZodCoercedNumber<unknown>>>;
  text: z.ZodOptional<z.ZodString>;
  isAdmin: z.ZodOptional<z.ZodBoolean>;
  isInvited: z.ZodOptional<z.ZodBoolean>;
  isLocked: z.ZodOptional<z.ZodBoolean>;
  canRevealMultiTenantSombraSecret: z.ZodOptional<z.ZodBoolean>;
  ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
  teamIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
  scopeNames: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<ScopeName, string, z.core.$ZodTypeInternals<ScopeName, string>>>>;
  derivedScopeNames: z.ZodOptional<z.ZodArray<z.ZodString & z.ZodType<ScopeName, string, z.core.$ZodTypeInternals<ScopeName, string>>>>;
  lastLoggedInAfter: z.ZodOptional<z.ZodString>;
  lastLoggedInBefore: z.ZodOptional<z.ZodString>;
  orderField: z.ZodOptional<z.ZodEnum<{
    name: "name";
    createdAt: "createdAt";
    updatedAt: "updatedAt";
  }>>;
  orderDirection: z.ZodOptional<z.ZodEnum<{
    Asc: "ASC";
    Desc: "DESC";
  }>>;
}, z.core.$strip>;
type ListUsersInput = Omit<z.infer<typeof ListUsersSchema>, 'scopeNames' | 'derivedScopeNames'> & {
  /** Filter by directly assigned ScopeName values */scopeNames?: ScopeName[]; /** Filter by derived ScopeName values */
  derivedScopeNames?: ScopeName[];
};
//#endregion
export { ADMIN_OAUTH_SCOPES, AdminMixin, type ListApiKeysInput, ListApiKeysSchema, type ListScopesInput, ListScopesSchema, type ListTeamsInput, ListTeamsSchema, type ListUsersInput, ListUsersSchema, type ListedUser, getAdminTools };
//# sourceMappingURL=index.d.mts.map