/** Provider-neutral vocabulary for Universal Access Orchestration. */
export declare const ACCESS_ROUTE_KINDS: readonly ["existing-session", "admin-grant", "sso-delegation", "oauth", "service-account", "vault-credential", "passkey-handoff", "email-magic-link", "device-approval", "browser-automation", "manual-assist"];
export type AccessRouteKind = (typeof ACCESS_ROUTE_KINDS)[number];
export declare const ACCESS_CAPABILITIES: readonly ["discover", "read", "write", "message", "admin", "subscribe", "browser-control"];
export type AccessCapability = (typeof ACCESS_CAPABILITIES)[number];
export type AccessHealth = "connected" | "partial" | "expired" | "blocked" | "needs-approval" | "unavailable";
export type AccessTrust = "user-approved" | "admin-approved" | "vault-approved" | "observed";
export type AccessRuntime = "api" | "browser" | "local-device" | "cloud-agent" | "mobile";
export type AccessIdentity = {
    id: string;
    kind: "person" | "organization" | "device" | "service";
    displayName: string;
    emails?: string[];
    externalIds?: Record<string, string>;
    provenance: string[];
    confidence: number;
};
export type AccessRoute = {
    id: string;
    accountId: string;
    kind: AccessRouteKind;
    runtime: AccessRuntime;
    capabilities: AccessCapability[];
    health: AccessHealth;
    trust: AccessTrust;
    reliability: number;
    clickCost: number;
    latencyMs?: number;
    requiresHuman: boolean;
    credentialRef?: string;
    sessionRef?: string;
    expiresAt?: number;
    lastValidatedAt?: number;
    metadata?: Record<string, unknown>;
};
export type AccessAccount = {
    id: string;
    identityId?: string;
    service: string;
    tenant?: string;
    externalId?: string;
    label: string;
    capabilities: AccessCapability[];
    health: AccessHealth;
    trust: AccessTrust;
    routes: AccessRoute[];
    discoverySources: string[];
    lastObservedAt?: number;
    metadata?: Record<string, unknown>;
};
export type AccessSubscription = {
    id: string;
    accountId: string;
    kinds: string[];
    transport: "webhook" | "push" | "delta" | "local-watch" | "poll";
    health: AccessHealth;
    cursor?: string;
    lastEventAt?: number;
    lastCheckedAt?: number;
    error?: string;
};
export type AccessPolicyMode = "observe" | "draft" | "execute" | "notify" | "approve";
export type AccessPolicy = {
    id: string;
    accountId?: string;
    service?: string;
    capability?: AccessCapability;
    eventKind?: string;
    mode: AccessPolicyMode;
    enabled: boolean;
    quietHours?: {
        start: string;
        end: string;
        timezone: string;
    };
    metadata?: Record<string, unknown>;
};
export type AccessState = {
    version: 1;
    identities: AccessIdentity[];
    accounts: AccessAccount[];
    subscriptions: AccessSubscription[];
    policies: AccessPolicy[];
    syncedAt?: number;
};
export type AccessIntent = {
    accountId?: string;
    service?: string;
    capability: AccessCapability;
    operation: string;
    input?: Record<string, unknown>;
    allowHumanAssist?: boolean;
};
export type AccessLease = {
    id: string;
    accountId: string;
    routeId: string;
    capability: AccessCapability;
    operation: string;
    issuedAt: number;
    expiresAt: number;
};
export type AccessEvent = {
    id: string;
    accountId?: string;
    service: string;
    kind: string;
    occurredAt: number;
    receivedAt: number;
    dedupeKey: string;
    payload: Record<string, unknown>;
    sensitivity?: "normal" | "sensitive" | "restricted";
};