import type { SandboxAccessControl, SandboxAwsAuthRule, SandboxGcpAuthRule, SandboxProxyConfig, SandboxProxyRule, SandboxProxySecret } from "./types.js";
/** Reference a LangSmith workspace secret in a sandbox proxy configuration. */
export declare function workspaceSecret(name: string): SandboxProxySecret;
/** Provide a write-only secret value for a sandbox proxy configuration. */
export declare function opaqueSecret(value: string): SandboxProxySecret;
/** Build a sandbox proxy config from one or more proxy rules. */
export declare function proxyConfig({ rules, noProxy, accessControl, }?: {
    rules?: SandboxProxyRule[];
    noProxy?: string[];
    accessControl?: SandboxAccessControl;
}): SandboxProxyConfig;
export declare function mergeProxyConfigs(generatedConfig: SandboxProxyConfig | undefined, explicitConfig: SandboxProxyConfig | undefined): SandboxProxyConfig | undefined;
/** Build a sandbox proxy rule that signs AWS HTTPS requests with SigV4. */
export declare function awsAuth({ accessKeyId, secretAccessKey, name, enabled, }: {
    accessKeyId: SandboxProxySecret;
    secretAccessKey: SandboxProxySecret;
    name?: string;
    enabled?: boolean;
}): SandboxAwsAuthRule;
/** Build a sandbox proxy rule that injects GCP OAuth bearer auth. */
export declare function gcpAuth({ serviceAccountJson, scopes, matchHosts, name, enabled, }: {
    serviceAccountJson: SandboxProxySecret;
    scopes: string[];
    matchHosts?: string[];
    name?: string;
    enabled?: boolean;
}): SandboxGcpAuthRule;