@dealdesk/server 2026.527.0-canary.0

package/dist/services/secrets.d.ts

@@ -0,0 +1,1962 @@
+import type { Db } from "@dealdesk/db";
+import type { AgentEnvConfig, CompanySecretBindingTarget, RemoteSecretImportCandidate, RemoteSecretImportRowResult, SecretBindingTargetType, SecretProvider, SecretProviderConfigHealthStatus, SecretProviderConfigStatus, SecretVersionSelector } from "@dealdesk/shared";
+import type { SecretProviderHealthCheck } from "../secrets/types.js";
+type SecretConsumerContext = {
+    consumerType: SecretBindingTargetType;
+    consumerId: string;
+    configPath?: string | null;
+    actorType?: "agent" | "user" | "system" | "plugin";
+    actorId?: string | null;
+    issueId?: string | null;
+    heartbeatRunId?: string | null;
+    pluginId?: string | null;
+};
+export type RuntimeSecretManifestEntry = {
+    configPath: string;
+    envKey: string | null;
+    secretId: string;
+    secretKey: string;
+    version: number;
+    provider: SecretProvider;
+    outcome: "success" | "failure";
+    errorCode?: string | null;
+};
+export declare function secretService(db: Db): {
+    listProviders: () => import("@dealdesk/shared").SecretProviderDescriptor[];
+    checkProviders: () => Promise<SecretProviderHealthCheck[]>;
+    listProviderConfigs: (companyId: string) => Omit<import("drizzle-orm/pg-core").PgSelectBase<"company_secret_provider_configs", {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        companyId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "company_id";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        provider: import("drizzle-orm/pg-core").PgColumn<{
+            name: "provider";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        displayName: import("drizzle-orm/pg-core").PgColumn<{
+            name: "display_name";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        status: import("drizzle-orm/pg-core").PgColumn<{
+            name: "status";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        isDefault: import("drizzle-orm/pg-core").PgColumn<{
+            name: "is_default";
+            tableName: "company_secret_provider_configs";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        config: import("drizzle-orm/pg-core").PgColumn<{
+            name: "config";
+            tableName: "company_secret_provider_configs";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Record<string, unknown>;
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Record<string, unknown>;
+        }>;
+        healthStatus: import("drizzle-orm/pg-core").PgColumn<{
+            name: "health_status";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        healthCheckedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "health_checked_at";
+            tableName: "company_secret_provider_configs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        healthMessage: import("drizzle-orm/pg-core").PgColumn<{
+            name: "health_message";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        healthDetails: import("drizzle-orm/pg-core").PgColumn<{
+            name: "health_details";
+            tableName: "company_secret_provider_configs";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Record<string, unknown>;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Record<string, unknown>;
+        }>;
+        disabledAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "disabled_at";
+            tableName: "company_secret_provider_configs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdByAgentId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_by_agent_id";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdByUserId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_by_user_id";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "company_secret_provider_configs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "company_secret_provider_configs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    }, "single", Record<"company_secret_provider_configs", "not-null">, false, "where" | "orderBy", {
+        id: string;
+        companyId: string;
+        provider: string;
+        displayName: string;
+        status: string;
+        isDefault: boolean;
+        config: Record<string, unknown>;
+        healthStatus: string | null;
+        healthCheckedAt: Date | null;
+        healthMessage: string | null;
+        healthDetails: Record<string, unknown> | null;
+        disabledAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }[], {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        companyId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "company_id";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        provider: import("drizzle-orm/pg-core").PgColumn<{
+            name: "provider";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        displayName: import("drizzle-orm/pg-core").PgColumn<{
+            name: "display_name";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        status: import("drizzle-orm/pg-core").PgColumn<{
+            name: "status";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        isDefault: import("drizzle-orm/pg-core").PgColumn<{
+            name: "is_default";
+            tableName: "company_secret_provider_configs";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        config: import("drizzle-orm/pg-core").PgColumn<{
+            name: "config";
+            tableName: "company_secret_provider_configs";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Record<string, unknown>;
+            driverParam: unknown;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Record<string, unknown>;
+        }>;
+        healthStatus: import("drizzle-orm/pg-core").PgColumn<{
+            name: "health_status";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        healthCheckedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "health_checked_at";
+            tableName: "company_secret_provider_configs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        healthMessage: import("drizzle-orm/pg-core").PgColumn<{
+            name: "health_message";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        healthDetails: import("drizzle-orm/pg-core").PgColumn<{
+            name: "health_details";
+            tableName: "company_secret_provider_configs";
+            dataType: "json";
+            columnType: "PgJsonb";
+            data: Record<string, unknown>;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            $type: Record<string, unknown>;
+        }>;
+        disabledAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "disabled_at";
+            tableName: "company_secret_provider_configs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdByAgentId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_by_agent_id";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdByUserId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_by_user_id";
+            tableName: "company_secret_provider_configs";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "company_secret_provider_configs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "company_secret_provider_configs";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    }>, "where" | "orderBy">;
+    getProviderConfigById: (id: string) => Promise<{
+        id: string;
+        companyId: string;
+        provider: string;
+        displayName: string;
+        status: string;
+        isDefault: boolean;
+        config: Record<string, unknown>;
+        healthStatus: string | null;
+        healthCheckedAt: Date | null;
+        healthMessage: string | null;
+        healthDetails: Record<string, unknown> | null;
+        disabledAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }>;
+    createProviderConfig: (companyId: string, input: {
+        provider: SecretProvider;
+        displayName: string;
+        status?: SecretProviderConfigStatus;
+        isDefault?: boolean;
+        config?: Record<string, unknown>;
+    }, actor?: {
+        userId?: string | null;
+        agentId?: string | null;
+    }) => Promise<{
+        id: string;
+        status: string;
+        createdAt: Date;
+        updatedAt: Date;
+        companyId: string;
+        config: Record<string, unknown>;
+        provider: string;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        healthStatus: string | null;
+        displayName: string;
+        isDefault: boolean;
+        healthCheckedAt: Date | null;
+        healthMessage: string | null;
+        healthDetails: Record<string, unknown> | null;
+        disabledAt: Date | null;
+    }>;
+    updateProviderConfig: (id: string, patch: {
+        displayName?: string;
+        status?: SecretProviderConfigStatus;
+        isDefault?: boolean;
+        config?: Record<string, unknown>;
+    }) => Promise<{
+        id: string;
+        companyId: string;
+        provider: string;
+        displayName: string;
+        status: string;
+        isDefault: boolean;
+        config: Record<string, unknown>;
+        healthStatus: string | null;
+        healthCheckedAt: Date | null;
+        healthMessage: string | null;
+        healthDetails: Record<string, unknown> | null;
+        disabledAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    } | null>;
+    disableProviderConfig: (id: string) => Promise<{
+        id: string;
+        companyId: string;
+        provider: string;
+        displayName: string;
+        status: string;
+        isDefault: boolean;
+        config: Record<string, unknown>;
+        healthStatus: string | null;
+        healthCheckedAt: Date | null;
+        healthMessage: string | null;
+        healthDetails: Record<string, unknown> | null;
+        disabledAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    } | null>;
+    setDefaultProviderConfig: (id: string) => Promise<{
+        id: string;
+        companyId: string;
+        provider: string;
+        displayName: string;
+        status: string;
+        isDefault: boolean;
+        config: Record<string, unknown>;
+        healthStatus: string | null;
+        healthCheckedAt: Date | null;
+        healthMessage: string | null;
+        healthDetails: Record<string, unknown> | null;
+        disabledAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    } | null>;
+    checkProviderConfigHealth: (id: string) => Promise<{
+        checkedAt: Date;
+        status: SecretProviderConfigHealthStatus;
+        provider: SecretProvider;
+        message: string;
+        details: import("@dealdesk/shared").SecretProviderConfigHealthDetails;
+        configId: string;
+    } | null>;
+    list: (companyId: string) => Promise<{
+        referenceCount: number;
+        id: string;
+        companyId: string;
+        key: string;
+        name: string;
+        provider: string;
+        status: string;
+        managedMode: string;
+        externalRef: string | null;
+        providerConfigId: string | null;
+        providerMetadata: Record<string, unknown> | null;
+        latestVersion: number;
+        description: string | null;
+        lastResolvedAt: Date | null;
+        lastRotatedAt: Date | null;
+        deletedAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }[]>;
+    listBindings: (companyId: string, secretId?: string) => Omit<import("drizzle-orm/pg-core").PgSelectBase<"company_secret_bindings", {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        companyId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "company_id";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        secretId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "secret_id";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        targetType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "target_type";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        targetId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "target_id";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        configPath: import("drizzle-orm/pg-core").PgColumn<{
+            name: "config_path";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        versionSelector: import("drizzle-orm/pg-core").PgColumn<{
+            name: "version_selector";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        required: import("drizzle-orm/pg-core").PgColumn<{
+            name: "required";
+            tableName: "company_secret_bindings";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        label: import("drizzle-orm/pg-core").PgColumn<{
+            name: "label";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "company_secret_bindings";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "company_secret_bindings";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    }, "single", Record<"company_secret_bindings", "not-null">, false, "where" | "orderBy", {
+        id: string;
+        companyId: string;
+        secretId: string;
+        targetType: string;
+        targetId: string;
+        configPath: string;
+        versionSelector: string;
+        required: boolean;
+        label: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }[], {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        companyId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "company_id";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        secretId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "secret_id";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        targetType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "target_type";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        targetId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "target_id";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        configPath: import("drizzle-orm/pg-core").PgColumn<{
+            name: "config_path";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        versionSelector: import("drizzle-orm/pg-core").PgColumn<{
+            name: "version_selector";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        required: import("drizzle-orm/pg-core").PgColumn<{
+            name: "required";
+            tableName: "company_secret_bindings";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        label: import("drizzle-orm/pg-core").PgColumn<{
+            name: "label";
+            tableName: "company_secret_bindings";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "company_secret_bindings";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "updated_at";
+            tableName: "company_secret_bindings";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    }>, "where" | "orderBy">;
+    listBindingReferences: (companyId: string, secretId: string) => Promise<{
+        target: CompanySecretBindingTarget;
+        id: string;
+        companyId: string;
+        secretId: string;
+        targetType: string;
+        targetId: string;
+        configPath: string;
+        versionSelector: string;
+        required: boolean;
+        label: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }[]>;
+    listAccessEvents: (companyId: string, secretId: string) => Omit<import("drizzle-orm/pg-core").PgSelectBase<"secret_access_events", {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        companyId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "company_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        secretId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "secret_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        version: import("drizzle-orm/pg-core").PgColumn<{
+            name: "version";
+            tableName: "secret_access_events";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        provider: import("drizzle-orm/pg-core").PgColumn<{
+            name: "provider";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        actorType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_type";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        actorId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        consumerType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "consumer_type";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        consumerId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "consumer_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        configPath: import("drizzle-orm/pg-core").PgColumn<{
+            name: "config_path";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        issueId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "issue_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        heartbeatRunId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "heartbeat_run_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        pluginId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "plugin_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        outcome: import("drizzle-orm/pg-core").PgColumn<{
+            name: "outcome";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        errorCode: import("drizzle-orm/pg-core").PgColumn<{
+            name: "error_code";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "secret_access_events";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    }, "single", Record<"secret_access_events", "not-null">, false, "where" | "orderBy", {
+        id: string;
+        companyId: string;
+        secretId: string;
+        version: number | null;
+        provider: string;
+        actorType: string;
+        actorId: string | null;
+        consumerType: string;
+        consumerId: string;
+        configPath: string | null;
+        issueId: string | null;
+        heartbeatRunId: string | null;
+        pluginId: string | null;
+        outcome: string;
+        errorCode: string | null;
+        createdAt: Date;
+    }[], {
+        id: import("drizzle-orm/pg-core").PgColumn<{
+            name: "id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        companyId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "company_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        secretId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "secret_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        version: import("drizzle-orm/pg-core").PgColumn<{
+            name: "version";
+            tableName: "secret_access_events";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        provider: import("drizzle-orm/pg-core").PgColumn<{
+            name: "provider";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        actorType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_type";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        actorId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "actor_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        consumerType: import("drizzle-orm/pg-core").PgColumn<{
+            name: "consumer_type";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        consumerId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "consumer_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        configPath: import("drizzle-orm/pg-core").PgColumn<{
+            name: "config_path";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        issueId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "issue_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        heartbeatRunId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "heartbeat_run_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        pluginId: import("drizzle-orm/pg-core").PgColumn<{
+            name: "plugin_id";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        outcome: import("drizzle-orm/pg-core").PgColumn<{
+            name: "outcome";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        errorCode: import("drizzle-orm/pg-core").PgColumn<{
+            name: "error_code";
+            tableName: "secret_access_events";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: import("drizzle-orm/pg-core").PgColumn<{
+            name: "created_at";
+            tableName: "secret_access_events";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    }>, "where" | "orderBy">;
+    previewRemoteImport: (companyId: string, input: {
+        providerConfigId: string;
+        query?: string | null;
+        nextToken?: string | null;
+        pageSize?: number;
+    }) => Promise<{
+        providerConfigId: string;
+        provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
+        nextToken: string | null;
+        candidates: RemoteSecretImportCandidate[];
+    }>;
+    importRemoteSecrets: (companyId: string, input: {
+        providerConfigId: string;
+        secrets: Array<{
+            externalRef: string;
+            name?: string | null;
+            key?: string | null;
+            description?: string | null;
+            providerVersionRef?: string | null;
+            providerMetadata?: Record<string, unknown> | null;
+        }>;
+    }, actor?: {
+        userId?: string | null;
+        agentId?: string | null;
+    }) => Promise<{
+        providerConfigId: string;
+        provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
+        importedCount: number;
+        skippedCount: number;
+        errorCount: number;
+        results: RemoteSecretImportRowResult[];
+    }>;
+    getById: (id: string) => Promise<{
+        id: string;
+        companyId: string;
+        key: string;
+        name: string;
+        provider: string;
+        status: string;
+        managedMode: string;
+        externalRef: string | null;
+        providerConfigId: string | null;
+        providerMetadata: Record<string, unknown> | null;
+        latestVersion: number;
+        description: string | null;
+        lastResolvedAt: Date | null;
+        lastRotatedAt: Date | null;
+        deletedAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }>;
+    getByName: (companyId: string, name: string) => Promise<{
+        id: string;
+        companyId: string;
+        key: string;
+        name: string;
+        provider: string;
+        status: string;
+        managedMode: string;
+        externalRef: string | null;
+        providerConfigId: string | null;
+        providerMetadata: Record<string, unknown> | null;
+        latestVersion: number;
+        description: string | null;
+        lastResolvedAt: Date | null;
+        lastRotatedAt: Date | null;
+        deletedAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }>;
+    resolveSecretValue: (companyId: string, secretId: string, version: number | "latest", context?: SecretConsumerContext) => Promise<string>;
+    create: (companyId: string, input: {
+        name: string;
+        provider: SecretProvider;
+        providerConfigId?: string | null;
+        value?: string | null;
+        key?: string | null;
+        managedMode?: "dealdesk_managed" | "external_reference";
+        description?: string | null;
+        externalRef?: string | null;
+        providerVersionRef?: string | null;
+        providerMetadata?: Record<string, unknown> | null;
+    }, actor?: {
+        userId?: string | null;
+        agentId?: string | null;
+    }) => Promise<{
+        id: string;
+        companyId: string;
+        key: string;
+        name: string;
+        provider: string;
+        status: string;
+        managedMode: string;
+        externalRef: string | null;
+        providerConfigId: string | null;
+        providerMetadata: Record<string, unknown> | null;
+        latestVersion: number;
+        description: string | null;
+        lastResolvedAt: Date | null;
+        lastRotatedAt: Date | null;
+        deletedAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }>;
+    rotate: (secretId: string, input: {
+        value?: string | null;
+        externalRef?: string | null;
+        providerVersionRef?: string | null;
+        providerConfigId?: string | null;
+    }, actor?: {
+        userId?: string | null;
+        agentId?: string | null;
+    }) => Promise<{
+        id: string;
+        companyId: string;
+        key: string;
+        name: string;
+        provider: string;
+        status: string;
+        managedMode: string;
+        externalRef: string | null;
+        providerConfigId: string | null;
+        providerMetadata: Record<string, unknown> | null;
+        latestVersion: number;
+        description: string | null;
+        lastResolvedAt: Date | null;
+        lastRotatedAt: Date | null;
+        deletedAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }>;
+    update: (secretId: string, patch: {
+        name?: string;
+        key?: string;
+        status?: "active" | "disabled" | "archived" | "deleted";
+        providerConfigId?: string | null;
+        description?: string | null;
+        externalRef?: string | null;
+        providerMetadata?: Record<string, unknown> | null;
+    }) => Promise<{
+        id: string;
+        companyId: string;
+        key: string;
+        name: string;
+        provider: string;
+        status: string;
+        managedMode: string;
+        externalRef: string | null;
+        providerConfigId: string | null;
+        providerMetadata: Record<string, unknown> | null;
+        latestVersion: number;
+        description: string | null;
+        lastResolvedAt: Date | null;
+        lastRotatedAt: Date | null;
+        deletedAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    }>;
+    createBinding: (input: {
+        companyId: string;
+        secretId: string;
+        targetType: SecretBindingTargetType;
+        targetId: string;
+        configPath: string;
+        versionSelector?: SecretVersionSelector;
+        required?: boolean;
+        label?: string | null;
+    }) => Promise<{
+        id: string;
+        createdAt: Date;
+        updatedAt: Date;
+        companyId: string;
+        required: boolean;
+        label: string | null;
+        secretId: string;
+        targetType: string;
+        targetId: string;
+        configPath: string;
+        versionSelector: string;
+    }>;
+    syncSecretRefsForTarget: (companyId: string, target: {
+        targetType: SecretBindingTargetType;
+        targetId: string;
+    }, refs: Array<{
+        secretId: string;
+        configPath: string;
+        versionSelector?: SecretVersionSelector;
+        required?: boolean;
+        label?: string | null;
+    }>) => Promise<{
+        secretId: string;
+        configPath: string;
+        versionSelector: SecretVersionSelector;
+        required: boolean;
+        label: string | null;
+    }[]>;
+    syncEnvBindingsForTarget: (companyId: string, target: {
+        targetType: SecretBindingTargetType;
+        targetId: string;
+        pathPrefix?: string;
+    }, envValue: unknown) => Promise<{
+        secretId: string;
+        configPath: string;
+        versionSelector: SecretVersionSelector;
+    }[]>;
+    remove: (secretId: string) => Promise<{
+        id: string;
+        companyId: string;
+        key: string;
+        name: string;
+        provider: string;
+        status: string;
+        managedMode: string;
+        externalRef: string | null;
+        providerConfigId: string | null;
+        providerMetadata: Record<string, unknown> | null;
+        latestVersion: number;
+        description: string | null;
+        lastResolvedAt: Date | null;
+        lastRotatedAt: Date | null;
+        deletedAt: Date | null;
+        createdByAgentId: string | null;
+        createdByUserId: string | null;
+        createdAt: Date;
+        updatedAt: Date;
+    } | null>;
+    normalizeAdapterConfigForPersistence: (companyId: string, adapterConfig: Record<string, unknown>, opts?: {
+        strictMode?: boolean;
+    }) => Promise<{
+        [x: string]: unknown;
+    }>;
+    normalizeEnvBindingsForPersistence: (companyId: string, envValue: unknown, opts?: {
+        strictMode?: boolean;
+        fieldPath?: string;
+    }) => Promise<AgentEnvConfig>;
+    normalizeHireApprovalPayloadForPersistence: (companyId: string, payload: Record<string, unknown>, opts?: {
+        strictMode?: boolean;
+    }) => Promise<{
+        [x: string]: unknown;
+    }>;
+    resolveEnvBindings: (companyId: string, envValue: unknown, context?: Omit<SecretConsumerContext, "configPath">) => Promise<{
+        env: Record<string, string>;
+        secretKeys: Set<string>;
+        manifest: RuntimeSecretManifestEntry[];
+    }>;
+    resolveAdapterConfigForRuntime: (companyId: string, adapterConfig: Record<string, unknown>, context?: Omit<SecretConsumerContext, "configPath">) => Promise<{
+        config: Record<string, unknown>;
+        secretKeys: Set<string>;
+        manifest: RuntimeSecretManifestEntry[];
+    }>;
+};
+export {};
+//# sourceMappingURL=secrets.d.ts.map