import { z } from 'zod';
/**
 * Project slugs are used as filenames under the OwnMail state directory and
 * as parts of Cloudflare resource names. Keep that boundary deliberately
 * narrower than an arbitrary string so CLI flags can never escape the state
 * directory. `__login__` is an in-memory internal sentinel and is never
 * persisted as a project.
 */
export declare const ProjectSlugSchema: z.ZodString;
export declare const DEFAULT_SITE_NAME = "ownmail";
export declare const SiteNameSchema: z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>;
/**
 * Persistent CLI state. Two files under ~/.config/ownmail (0600):
 * - auth.json: dashboard session + DPoP private key
 * - projects/<slug>.json: one deployed project
 *
 * Durable secrets (API key, session secret) live only as Cloudflare Worker
 * secrets. `pendingSecrets` tracks one-time setup secrets between minting and
 * deploy. New writes use the OS credential store when available; legacy or
 * fallback string values are scrubbed once setup verification succeeds.
 */
export declare const AuthStateSchema: z.ZodObject<{
    userToken: z.ZodString;
    orgToken: z.ZodOptional<z.ZodString>;
    userPublicId: z.ZodOptional<z.ZodString>;
    orgPublicId: z.ZodOptional<z.ZodString>;
    dpopPrivateJwk: z.ZodRecord<z.ZodString, z.ZodUnknown>;
    updatedAt: z.ZodNumber;
}, z.core.$strip>;
export type AuthState = z.infer<typeof AuthStateSchema>;
export declare const StepIdSchema: z.ZodEnum<{
    "api-key": "api-key";
    app: "app";
    "cf-auth": "cf-auth";
    "cf-resources": "cf-resources";
    connector: "connector";
    "dashboard-auth": "dashboard-auth";
    deploy: "deploy";
    domain: "domain";
    "domain-plan": "domain-plan";
    grant: "grant";
    hosting: "hosting";
    org: "org";
    "plan-confirmed": "plan-confirmed";
    "redirect-uris": "redirect-uris";
    "site-name": "site-name";
    verify: "verify";
    webhook: "webhook";
}>;
export type StepId = z.infer<typeof StepIdSchema>;
export declare const PendingSecretReferenceSchema: z.ZodObject<{
    storage: z.ZodLiteral<"keyring">;
    service: z.ZodString;
    account: z.ZodString;
}, z.core.$strip>;
export type PendingSecretReference = z.infer<typeof PendingSecretReferenceSchema>;
export declare const PendingSecretValueSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
    storage: z.ZodLiteral<"keyring">;
    service: z.ZodString;
    account: z.ZodString;
}, z.core.$strip>]>;
export type PendingSecretValue = z.infer<typeof PendingSecretValueSchema>;
export declare const PendingSecretNameSchema: z.ZodEnum<{
    apiKey: "apiKey";
    appPassword: "appPassword";
    clientSecret: "clientSecret";
    sessionSecret: "sessionSecret";
}>;
export type PendingSecretName = z.infer<typeof PendingSecretNameSchema>;
export declare const ProjectStateSchema: z.ZodObject<{
    slug: z.ZodString;
    siteName: z.ZodOptional<z.ZodPipe<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>, z.ZodString>>;
    createdAt: z.ZodNumber;
    updatedAt: z.ZodNumber;
    region: z.ZodDefault<z.ZodEnum<{
        eu: "eu";
        us: "us";
    }>>;
    orgPublicId: z.ZodOptional<z.ZodString>;
    hostingProvider: z.ZodOptional<z.ZodEnum<{
        cloudflare: "cloudflare";
        local: "local";
        manual: "manual";
        netlify: "netlify";
        vercel: "vercel";
    }>>;
    applicationId: z.ZodOptional<z.ZodString>;
    apiKeyId: z.ZodOptional<z.ZodString>;
    pendingApiKeyRotation: z.ZodOptional<z.ZodObject<{
        previousKeyId: z.ZodString;
        replacementKeyId: z.ZodString;
    }, z.core.$strip>>;
    domainId: z.ZodOptional<z.ZodString>;
    domainAddress: z.ZodOptional<z.ZodString>;
    domainBranded: z.ZodOptional<z.ZodBoolean>;
    domainVerified: z.ZodOptional<z.ZodBoolean>;
    plannedDomainAddress: z.ZodOptional<z.ZodString>;
    plannedDomainBranded: z.ZodOptional<z.ZodBoolean>;
    grantId: z.ZodOptional<z.ZodString>;
    inboxEmail: z.ZodOptional<z.ZodString>;
    workerName: z.ZodOptional<z.ZodString>;
    workersDevUrl: z.ZodOptional<z.ZodString>;
    providerAppUrl: z.ZodOptional<z.ZodString>;
    vercelProjectId: z.ZodOptional<z.ZodString>;
    vercelOrgId: z.ZodOptional<z.ZodString>;
    netlifySiteId: z.ZodOptional<z.ZodString>;
    localAppUrl: z.ZodOptional<z.ZodString>;
    localPort: z.ZodOptional<z.ZodNumber>;
    localDeployDir: z.ZodOptional<z.ZodString>;
    manualDeployDir: z.ZodOptional<z.ZodString>;
    manualAppUrl: z.ZodOptional<z.ZodString>;
    kvNamespaceId: z.ZodOptional<z.ZodString>;
    appDomain: z.ZodOptional<z.ZodString>;
    appDomains: z.ZodDefault<z.ZodArray<z.ZodString>>;
    pendingAppDomain: z.ZodOptional<z.ZodObject<{
        domain: z.ZodString;
        primary: z.ZodBoolean;
    }, z.core.$strip>>;
    realtimeWebhookId: z.ZodOptional<z.ZodString>;
    templateVersion: z.ZodOptional<z.ZodString>;
    ejected: z.ZodDefault<z.ZodBoolean>;
    completedSteps: z.ZodDefault<z.ZodArray<z.ZodEnum<{
        "api-key": "api-key";
        app: "app";
        "cf-auth": "cf-auth";
        "cf-resources": "cf-resources";
        connector: "connector";
        "dashboard-auth": "dashboard-auth";
        deploy: "deploy";
        domain: "domain";
        "domain-plan": "domain-plan";
        grant: "grant";
        hosting: "hosting";
        org: "org";
        "plan-confirmed": "plan-confirmed";
        "redirect-uris": "redirect-uris";
        "site-name": "site-name";
        verify: "verify";
        webhook: "webhook";
    }>>>;
    pendingSecrets: z.ZodDefault<z.ZodObject<{
        apiKey: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
            storage: z.ZodLiteral<"keyring">;
            service: z.ZodString;
            account: z.ZodString;
        }, z.core.$strip>]>>;
        clientSecret: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
            storage: z.ZodLiteral<"keyring">;
            service: z.ZodString;
            account: z.ZodString;
        }, z.core.$strip>]>>;
        appPassword: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
            storage: z.ZodLiteral<"keyring">;
            service: z.ZodString;
            account: z.ZodString;
        }, z.core.$strip>]>>;
        sessionSecret: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
            storage: z.ZodLiteral<"keyring">;
            service: z.ZodString;
            account: z.ZodString;
        }, z.core.$strip>]>>;
    }, z.core.$strip>>;
}, z.core.$strip>;
export type ProjectState = z.infer<typeof ProjectStateSchema>;
//# sourceMappingURL=schema.d.ts.map