import { z } from 'zod';
export declare enum UserRole {
    VIEWER = "viewer",
    OPERATOR = "operator",
    ADMIN = "admin"
}
/** 角色权限等级（用于比较） */
export declare const USER_ROLE_LEVEL: Record<UserRole, number>;
export declare const AuthTokenSchema: z.ZodObject<{
    id: z.ZodString;
    tokenHash: z.ZodString;
    tokenPlain: z.ZodOptional<z.ZodString>;
    label: z.ZodString;
    role: z.ZodNativeEnum<typeof UserRole>;
    operatorIds: z.ZodArray<z.ZodString, "many">;
    createdBy: z.ZodNullable<z.ZodString>;
    createdAt: z.ZodNumber;
    expiresAt: z.ZodOptional<z.ZodNumber>;
    lastUsedAt: z.ZodOptional<z.ZodNumber>;
    revoked: z.ZodBoolean;
    system: z.ZodOptional<z.ZodBoolean>;
    maxOperators: z.ZodOptional<z.ZodNumber>;
    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    }, "strip", z.ZodTypeAny, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }>, "many">>;
    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
    loginCredential: z.ZodOptional<z.ZodObject<{
        username: z.ZodString;
        usernameNormalized: z.ZodString;
        passwordHash: z.ZodString;
        updatedAt: z.ZodNumber;
    }, "strip", z.ZodTypeAny, {
        updatedAt: number;
        username: string;
        usernameNormalized: string;
        passwordHash: string;
    }, {
        updatedAt: number;
        username: string;
        usernameNormalized: string;
        passwordHash: string;
    }>>;
}, "strip", z.ZodTypeAny, {
    id: string;
    label: string;
    createdAt: number;
    role: UserRole;
    operatorIds: string[];
    tokenHash: string;
    createdBy: string | null;
    revoked: boolean;
    system?: boolean | undefined;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    tokenPlain?: string | undefined;
    expiresAt?: number | undefined;
    lastUsedAt?: number | undefined;
    maxOperators?: number | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        updatedAt: number;
        username: string;
        usernameNormalized: string;
        passwordHash: string;
    } | undefined;
}, {
    id: string;
    label: string;
    createdAt: number;
    role: UserRole;
    operatorIds: string[];
    tokenHash: string;
    createdBy: string | null;
    revoked: boolean;
    system?: boolean | undefined;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    tokenPlain?: string | undefined;
    expiresAt?: number | undefined;
    lastUsedAt?: number | undefined;
    maxOperators?: number | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        updatedAt: number;
        username: string;
        usernameNormalized: string;
        passwordHash: string;
    } | undefined;
}>;
export type AuthToken = z.infer<typeof AuthTokenSchema>;
export declare const JWTPayloadSchema: z.ZodObject<{
    tokenId: z.ZodString;
    role: z.ZodNativeEnum<typeof UserRole>;
    operatorIds: z.ZodArray<z.ZodString, "many">;
    iat: z.ZodNumber;
    exp: z.ZodNumber;
}, "strip", z.ZodTypeAny, {
    role: UserRole;
    operatorIds: string[];
    tokenId: string;
    iat: number;
    exp: number;
}, {
    role: UserRole;
    operatorIds: string[];
    tokenId: string;
    iat: number;
    exp: number;
}>;
export type JWTPayload = z.infer<typeof JWTPayloadSchema>;
export declare const LoginRequestSchema: z.ZodObject<{
    token: z.ZodString;
}, "strip", z.ZodTypeAny, {
    token: string;
}, {
    token: string;
}>;
export type LoginRequest = z.infer<typeof LoginRequestSchema>;
export declare const PasswordLoginRequestSchema: z.ZodObject<{
    username: z.ZodString;
    password: z.ZodString;
}, "strip", z.ZodTypeAny, {
    password: string;
    username: string;
}, {
    password: string;
    username: string;
}>;
export type PasswordLoginRequest = z.infer<typeof PasswordLoginRequestSchema>;
export declare const LoginResponseSchema: z.ZodObject<{
    jwt: z.ZodString;
    role: z.ZodNativeEnum<typeof UserRole>;
    label: z.ZodString;
    operatorIds: z.ZodArray<z.ZodString, "many">;
    maxOperators: z.ZodOptional<z.ZodNumber>;
    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    }, "strip", z.ZodTypeAny, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }>, "many">>;
}, "strip", z.ZodTypeAny, {
    label: string;
    jwt: string;
    role: UserRole;
    operatorIds: string[];
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    maxOperators?: number | undefined;
}, {
    label: string;
    jwt: string;
    role: UserRole;
    operatorIds: string[];
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    maxOperators?: number | undefined;
}>;
export type LoginResponse = z.infer<typeof LoginResponseSchema>;
export declare const LoginCredentialSummarySchema: z.ZodObject<{
    username: z.ZodString;
    allowSelfService: z.ZodBoolean;
}, "strip", z.ZodTypeAny, {
    username: string;
    allowSelfService: boolean;
}, {
    username: string;
    allowSelfService: boolean;
}>;
export type LoginCredentialSummary = z.infer<typeof LoginCredentialSummarySchema>;
export declare const AuthMeLoginCredentialSchema: z.ZodObject<{
    configured: z.ZodBoolean;
    username: z.ZodNullable<z.ZodString>;
    allowSelfService: z.ZodBoolean;
}, "strip", z.ZodTypeAny, {
    username: string | null;
    allowSelfService: boolean;
    configured: boolean;
}, {
    username: string | null;
    allowSelfService: boolean;
    configured: boolean;
}>;
export type AuthMeLoginCredential = z.infer<typeof AuthMeLoginCredentialSchema>;
export declare const CreateTokenLoginCredentialRequestSchema: z.ZodObject<{
    username: z.ZodString;
    password: z.ZodString;
}, "strip", z.ZodTypeAny, {
    password: string;
    username: string;
}, {
    password: string;
    username: string;
}>;
export type CreateTokenLoginCredentialRequest = z.infer<typeof CreateTokenLoginCredentialRequestSchema>;
export declare const UpdateTokenLoginCredentialRequestSchema: z.ZodObject<{
    username: z.ZodString;
    password: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    username: string;
    password?: string | undefined;
}, {
    username: string;
    password?: string | undefined;
}>;
export type UpdateTokenLoginCredentialRequest = z.infer<typeof UpdateTokenLoginCredentialRequestSchema>;
export declare const CreateTokenRequestSchema: z.ZodObject<{
    label: z.ZodString;
    role: z.ZodNativeEnum<typeof UserRole>;
    operatorIds: z.ZodArray<z.ZodString, "many">;
    expiresAt: z.ZodOptional<z.ZodNumber>;
    maxOperators: z.ZodNumber;
    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    }, "strip", z.ZodTypeAny, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }>, "many">>;
    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
    loginCredential: z.ZodOptional<z.ZodObject<{
        username: z.ZodString;
        password: z.ZodString;
    }, "strip", z.ZodTypeAny, {
        password: string;
        username: string;
    }, {
        password: string;
        username: string;
    }>>;
}, "strip", z.ZodTypeAny, {
    label: string;
    role: UserRole;
    operatorIds: string[];
    maxOperators: number;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    expiresAt?: number | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        password: string;
        username: string;
    } | undefined;
}, {
    label: string;
    role: UserRole;
    operatorIds: string[];
    maxOperators: number;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    expiresAt?: number | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        password: string;
        username: string;
    } | undefined;
}>;
export type CreateTokenRequest = z.infer<typeof CreateTokenRequestSchema>;
export declare const CreateTokenResponseSchema: z.ZodObject<{
    id: z.ZodString;
    token: z.ZodString;
    label: z.ZodString;
    role: z.ZodNativeEnum<typeof UserRole>;
    operatorIds: z.ZodArray<z.ZodString, "many">;
    maxOperators: z.ZodOptional<z.ZodNumber>;
    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    }, "strip", z.ZodTypeAny, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }>, "many">>;
    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
    loginCredential: z.ZodOptional<z.ZodObject<{
        username: z.ZodString;
        allowSelfService: z.ZodBoolean;
    }, "strip", z.ZodTypeAny, {
        username: string;
        allowSelfService: boolean;
    }, {
        username: string;
        allowSelfService: boolean;
    }>>;
}, "strip", z.ZodTypeAny, {
    id: string;
    label: string;
    token: string;
    role: UserRole;
    operatorIds: string[];
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    maxOperators?: number | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        username: string;
        allowSelfService: boolean;
    } | undefined;
}, {
    id: string;
    label: string;
    token: string;
    role: UserRole;
    operatorIds: string[];
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    maxOperators?: number | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        username: string;
        allowSelfService: boolean;
    } | undefined;
}>;
export type CreateTokenResponse = z.infer<typeof CreateTokenResponseSchema>;
export declare const TokenInfoSchema: z.ZodObject<{
    id: z.ZodString;
    token: z.ZodOptional<z.ZodString>;
    label: z.ZodString;
    role: z.ZodNativeEnum<typeof UserRole>;
    operatorIds: z.ZodArray<z.ZodString, "many">;
    createdBy: z.ZodNullable<z.ZodString>;
    createdAt: z.ZodNumber;
    expiresAt: z.ZodOptional<z.ZodNumber>;
    lastUsedAt: z.ZodOptional<z.ZodNumber>;
    revoked: z.ZodBoolean;
    system: z.ZodOptional<z.ZodBoolean>;
    maxOperators: z.ZodOptional<z.ZodNumber>;
    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    }, "strip", z.ZodTypeAny, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }>, "many">>;
    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
    loginCredential: z.ZodOptional<z.ZodObject<{
        username: z.ZodString;
        allowSelfService: z.ZodBoolean;
    }, "strip", z.ZodTypeAny, {
        username: string;
        allowSelfService: boolean;
    }, {
        username: string;
        allowSelfService: boolean;
    }>>;
}, "strip", z.ZodTypeAny, {
    id: string;
    label: string;
    createdAt: number;
    role: UserRole;
    operatorIds: string[];
    createdBy: string | null;
    revoked: boolean;
    system?: boolean | undefined;
    token?: string | undefined;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    expiresAt?: number | undefined;
    lastUsedAt?: number | undefined;
    maxOperators?: number | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        username: string;
        allowSelfService: boolean;
    } | undefined;
}, {
    id: string;
    label: string;
    createdAt: number;
    role: UserRole;
    operatorIds: string[];
    createdBy: string | null;
    revoked: boolean;
    system?: boolean | undefined;
    token?: string | undefined;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    expiresAt?: number | undefined;
    lastUsedAt?: number | undefined;
    maxOperators?: number | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        username: string;
        allowSelfService: boolean;
    } | undefined;
}>;
export type TokenInfo = z.infer<typeof TokenInfoSchema>;
export declare const UpdateTokenRequestSchema: z.ZodObject<{
    label: z.ZodOptional<z.ZodString>;
    role: z.ZodOptional<z.ZodNativeEnum<typeof UserRole>>;
    operatorIds: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
    expiresAt: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
    maxOperators: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
    permissionGrants: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodObject<{
        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    }, "strip", z.ZodTypeAny, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }>, "many">>>;
    allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
    loginCredential: z.ZodOptional<z.ZodNullable<z.ZodObject<{
        username: z.ZodString;
        password: z.ZodOptional<z.ZodString>;
    }, "strip", z.ZodTypeAny, {
        username: string;
        password?: string | undefined;
    }, {
        username: string;
        password?: string | undefined;
    }>>>;
}, "strip", z.ZodTypeAny, {
    label?: string | undefined;
    role?: UserRole | undefined;
    operatorIds?: string[] | undefined;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | null | undefined;
    expiresAt?: number | null | undefined;
    maxOperators?: number | null | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        username: string;
        password?: string | undefined;
    } | null | undefined;
}, {
    label?: string | undefined;
    role?: UserRole | undefined;
    operatorIds?: string[] | undefined;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | null | undefined;
    expiresAt?: number | null | undefined;
    maxOperators?: number | null | undefined;
    allowSelfLoginCredential?: boolean | undefined;
    loginCredential?: {
        username: string;
        password?: string | undefined;
    } | null | undefined;
}>;
export type UpdateTokenRequest = z.infer<typeof UpdateTokenRequestSchema>;
export declare const AuthStatusSchema: z.ZodObject<{
    enabled: z.ZodBoolean;
    allowPublicViewing: z.ZodBoolean;
}, "strip", z.ZodTypeAny, {
    enabled: boolean;
    allowPublicViewing: boolean;
}, {
    enabled: boolean;
    allowPublicViewing: boolean;
}>;
export type AuthStatus = z.infer<typeof AuthStatusSchema>;
export declare const AuthMeResponseSchema: z.ZodObject<{
    role: z.ZodNativeEnum<typeof UserRole>;
    label: z.ZodString;
    operatorIds: z.ZodArray<z.ZodString, "many">;
    tokenId: z.ZodString;
    maxOperators: z.ZodOptional<z.ZodNumber>;
    permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
        permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
        conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
    }, "strip", z.ZodTypeAny, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }, {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }>, "many">>;
    loginCredential: z.ZodObject<{
        configured: z.ZodBoolean;
        username: z.ZodNullable<z.ZodString>;
        allowSelfService: z.ZodBoolean;
    }, "strip", z.ZodTypeAny, {
        username: string | null;
        allowSelfService: boolean;
        configured: boolean;
    }, {
        username: string | null;
        allowSelfService: boolean;
        configured: boolean;
    }>;
}, "strip", z.ZodTypeAny, {
    label: string;
    role: UserRole;
    operatorIds: string[];
    loginCredential: {
        username: string | null;
        allowSelfService: boolean;
        configured: boolean;
    };
    tokenId: string;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    maxOperators?: number | undefined;
}, {
    label: string;
    role: UserRole;
    operatorIds: string[];
    loginCredential: {
        username: string | null;
        allowSelfService: boolean;
        configured: boolean;
    };
    tokenId: string;
    permissionGrants?: {
        permission: import("./ability.js").Permission;
        conditions?: Record<string, unknown> | undefined;
    }[] | undefined;
    maxOperators?: number | undefined;
}>;
export type AuthMeResponse = z.infer<typeof AuthMeResponseSchema>;
export declare const UpdateSelfLoginCredentialRequestSchema: z.ZodObject<{
    username: z.ZodString;
    password: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    username: string;
    password?: string | undefined;
}, {
    username: string;
    password?: string | undefined;
}>;
export type UpdateSelfLoginCredentialRequest = z.infer<typeof UpdateSelfLoginCredentialRequestSchema>;
export declare const UpdateAuthConfigRequestSchema: z.ZodObject<{
    allowPublicViewing: z.ZodOptional<z.ZodBoolean>;
}, "strip", z.ZodTypeAny, {
    allowPublicViewing?: boolean | undefined;
}, {
    allowPublicViewing?: boolean | undefined;
}>;
export type UpdateAuthConfigRequest = z.infer<typeof UpdateAuthConfigRequestSchema>;
export declare const AuthConfigSchema: z.ZodObject<{
    enabled: z.ZodDefault<z.ZodBoolean>;
    allowPublicViewing: z.ZodDefault<z.ZodBoolean>;
    jwtSecret: z.ZodOptional<z.ZodString>;
    jwtExpiresInSeconds: z.ZodDefault<z.ZodNumber>;
    tokens: z.ZodDefault<z.ZodArray<z.ZodObject<{
        id: z.ZodString;
        tokenHash: z.ZodString;
        tokenPlain: z.ZodOptional<z.ZodString>;
        label: z.ZodString;
        role: z.ZodNativeEnum<typeof UserRole>;
        operatorIds: z.ZodArray<z.ZodString, "many">;
        createdBy: z.ZodNullable<z.ZodString>;
        createdAt: z.ZodNumber;
        expiresAt: z.ZodOptional<z.ZodNumber>;
        lastUsedAt: z.ZodOptional<z.ZodNumber>;
        revoked: z.ZodBoolean;
        system: z.ZodOptional<z.ZodBoolean>;
        maxOperators: z.ZodOptional<z.ZodNumber>;
        permissionGrants: z.ZodOptional<z.ZodArray<z.ZodObject<{
            permission: z.ZodNativeEnum<typeof import("./ability.js").Permission>;
            conditions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
        }, "strip", z.ZodTypeAny, {
            permission: import("./ability.js").Permission;
            conditions?: Record<string, unknown> | undefined;
        }, {
            permission: import("./ability.js").Permission;
            conditions?: Record<string, unknown> | undefined;
        }>, "many">>;
        allowSelfLoginCredential: z.ZodOptional<z.ZodBoolean>;
        loginCredential: z.ZodOptional<z.ZodObject<{
            username: z.ZodString;
            usernameNormalized: z.ZodString;
            passwordHash: z.ZodString;
            updatedAt: z.ZodNumber;
        }, "strip", z.ZodTypeAny, {
            updatedAt: number;
            username: string;
            usernameNormalized: string;
            passwordHash: string;
        }, {
            updatedAt: number;
            username: string;
            usernameNormalized: string;
            passwordHash: string;
        }>>;
    }, "strip", z.ZodTypeAny, {
        id: string;
        label: string;
        createdAt: number;
        role: UserRole;
        operatorIds: string[];
        tokenHash: string;
        createdBy: string | null;
        revoked: boolean;
        system?: boolean | undefined;
        permissionGrants?: {
            permission: import("./ability.js").Permission;
            conditions?: Record<string, unknown> | undefined;
        }[] | undefined;
        tokenPlain?: string | undefined;
        expiresAt?: number | undefined;
        lastUsedAt?: number | undefined;
        maxOperators?: number | undefined;
        allowSelfLoginCredential?: boolean | undefined;
        loginCredential?: {
            updatedAt: number;
            username: string;
            usernameNormalized: string;
            passwordHash: string;
        } | undefined;
    }, {
        id: string;
        label: string;
        createdAt: number;
        role: UserRole;
        operatorIds: string[];
        tokenHash: string;
        createdBy: string | null;
        revoked: boolean;
        system?: boolean | undefined;
        permissionGrants?: {
            permission: import("./ability.js").Permission;
            conditions?: Record<string, unknown> | undefined;
        }[] | undefined;
        tokenPlain?: string | undefined;
        expiresAt?: number | undefined;
        lastUsedAt?: number | undefined;
        maxOperators?: number | undefined;
        allowSelfLoginCredential?: boolean | undefined;
        loginCredential?: {
            updatedAt: number;
            username: string;
            usernameNormalized: string;
            passwordHash: string;
        } | undefined;
    }>, "many">>;
}, "strip", z.ZodTypeAny, {
    enabled: boolean;
    allowPublicViewing: boolean;
    jwtExpiresInSeconds: number;
    tokens: {
        id: string;
        label: string;
        createdAt: number;
        role: UserRole;
        operatorIds: string[];
        tokenHash: string;
        createdBy: string | null;
        revoked: boolean;
        system?: boolean | undefined;
        permissionGrants?: {
            permission: import("./ability.js").Permission;
            conditions?: Record<string, unknown> | undefined;
        }[] | undefined;
        tokenPlain?: string | undefined;
        expiresAt?: number | undefined;
        lastUsedAt?: number | undefined;
        maxOperators?: number | undefined;
        allowSelfLoginCredential?: boolean | undefined;
        loginCredential?: {
            updatedAt: number;
            username: string;
            usernameNormalized: string;
            passwordHash: string;
        } | undefined;
    }[];
    jwtSecret?: string | undefined;
}, {
    enabled?: boolean | undefined;
    allowPublicViewing?: boolean | undefined;
    jwtSecret?: string | undefined;
    jwtExpiresInSeconds?: number | undefined;
    tokens?: {
        id: string;
        label: string;
        createdAt: number;
        role: UserRole;
        operatorIds: string[];
        tokenHash: string;
        createdBy: string | null;
        revoked: boolean;
        system?: boolean | undefined;
        permissionGrants?: {
            permission: import("./ability.js").Permission;
            conditions?: Record<string, unknown> | undefined;
        }[] | undefined;
        tokenPlain?: string | undefined;
        expiresAt?: number | undefined;
        lastUsedAt?: number | undefined;
        maxOperators?: number | undefined;
        allowSelfLoginCredential?: boolean | undefined;
        loginCredential?: {
            updatedAt: number;
            username: string;
            usernameNormalized: string;
            passwordHash: string;
        } | undefined;
    }[] | undefined;
}>;
export type AuthConfig = z.infer<typeof AuthConfigSchema>;
//# sourceMappingURL=auth.schema.d.ts.map