@declaw/sdk 1.2.3 → 1.3.0

package/dist/index.d.cts

@@ -186,9 +186,15 @@ interface InjectionDefenseConfig {
     enabled: boolean;
     sensitivity: string;
     action: string;
-    /** Detection threshold (0.0–1.0). Defaults to 0.8. */
+    /** Detection threshold (0.0–1.0). Defaults to 0.95. */
     threshold: number;
-    /** Optional domain allowlist; when undefined, applies to all domains. */
+    /**
+     * Scopes injection scanning to these destination hosts. Injection is
+     * OPT-IN per domain: with an empty or omitted list NO injection scanning
+     * runs (unlike PII/toxicity, where an empty list means all egress).
+     * Entries support exact hosts (`"api.example.com"`), `"*.suffix.com"`
+     * wildcards, and `"~regex"` patterns.
+     */
     domains?: string[];
     /** Optional Tier-2 LLM judge. */
     judge?: InjectionJudgeConfig;
@@ -451,9 +457,13 @@ interface FullInjectionDefenseOptions {
     action?: string;
     /** Run the judge on EVERY egress (high-assurance, costlier). Default false. */
     alwaysJudge?: boolean;
-    /** Optional egress allowlist to scan; omit = all domains. */
+    /**
+     * Destination hosts to scan for injection. Injection is opt-in per domain:
+     * omit or leave empty to scan none. Entries support exact hosts,
+     * `"*.suffix.com"` wildcards, and `"~regex"` patterns.
+     */
     domains?: string[];
-    /** Tier-1 classifier confidence threshold (0.0–1.0). Default 0.8. */
+    /** Tier-1 classifier confidence threshold (0.0–1.0). Default 0.95. */
     threshold?: number;
 }
 /**
@@ -1191,6 +1201,10 @@ interface SandboxOpts {
     metadata?: Record<string, string>;
     /** Environment variables. */
     envs?: Record<string, string>;
+    /** Vault secret references: ENV_NAME -> "vault://team/env/secret". The real
+     *  value is resolved server+worker-side and injected at the egress proxy —
+     *  the sandbox only ever sees a placeholder, never the secret value. */
+    vaultRefs?: Record<string, string>;
     /** Whether to create a secure sandbox. Defaults to true. */
     secure?: boolean;
     /** If false, denies all outbound traffic. Defaults to true. */
@@ -1870,8 +1884,17 @@ interface VolumeCreateOpts extends VolumeRequestOpts {
  * are dropped on the server for safety.
  */
 declare class Volumes {
-    /** Create a volume by streaming a tarball (gzip tar.gz) to the server. */
-    static create(name: string, data: Uint8Array | ArrayBuffer, opts?: VolumeCreateOpts): Promise<VolumeInfo>;
+    /**
+     * Create a volume named `name`, optionally populated with `data`.
+     *
+     * `POST /volumes` is the canonical create endpoint. With `data` (a gzip tar.gz)
+     * the body is ingested into a new file-granular volume (or a legacy tarball
+     * blob if no file-granular backend is configured). Creating an empty volume
+     * (no `data`, or an empty buffer) requires a file-granular backend.
+     * `empty(name)` / `ingest(name, data)` remain available for explicit,
+     * backend-specific control.
+     */
+    static create(name: string, data?: Uint8Array | ArrayBuffer, opts?: VolumeCreateOpts): Promise<VolumeInfo>;
     /**
      * Capture the attached volume's mount path in `sandboxId` into a NEW volume.
      *
@@ -1995,4 +2018,136 @@ declare class Governance {
     static getPack(name: string, opts?: GovernanceRequestOpts): Promise<GovernancePack>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConflictError, ConnectionConfig, type ConnectionConfigOptions, type ContentGateConfig, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, type FileEntry, type FileInfo, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type FullInjectionDefenseOptions, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, Governance, type GovernanceAdvisory, type GovernanceControl, type GovernancePack, type GovernanceRequestOpts, InjectionAction, type InjectionDefenseConfig, type InjectionJudgeConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type LockLease, type LockStatus, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, Stdio, StdioProcess, type StdioResult, type StdioStartOpts, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachMode, type VolumeAttachment, type VolumeCreateOpts, VolumeFiles, type VolumeInfo, VolumeLocks, type VolumeRemoveOpts, type VolumeRequestOpts, type VolumeWriteOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, contentGateConfigToJSON, createAuditConfig, createCodeSecurityConfig, createContentGateConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, fullInjectionDefensePolicy, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseContentGateConfig, parseEntryInfo, parseEnvSecurityConfig, parseFileEntry, parseFileInfo, parseFilesystemEvent, parseGovernancePack, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseLockLease, parseLockStatus, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };
+/**
+ * One per-destination injection rule on a secret. The egress proxy matches
+ * a request host against domainRegex and injects the secret as injectionType
+ * (bearer|header|basic|query|sigv4|oidc|hmac|redis|postgres|mysql|smtp|mongodb).
+ * The optional fields express a provider's full contract.
+ */
+interface VaultScope {
+    domainRegex: string;
+    injectionType?: string;
+    headerName?: string;
+    valuePrefix?: string;
+    basicUsername?: string;
+    extraHeaders?: Record<string, string>;
+    queryParams?: Record<string, string>;
+}
+/**
+ * Metadata for a stored secret — never the value. The value lives
+ * server-side (OpenBao) and is not returned after create.
+ */
+interface VaultSecret {
+    secretId: string;
+    name: string;
+    scopes?: VaultScope[];
+    createdAt: string;
+    updatedAt: string;
+    rotatedAt?: string;
+    rotationIntervalDays?: number;
+    rotationDue?: boolean;
+}
+/**
+ * A built-in provider template (domain + injection rules). Used so a caller
+ * can store a credential by naming the provider and supplying only the value.
+ * Carries no secret material.
+ */
+interface VaultPreset {
+    key: string;
+    name: string;
+    category: string;
+    keyHint: string;
+    docsUrl?: string;
+    scopes: VaultScope[];
+}
+/** Parse a raw wire-format scope into a VaultScope. */
+declare function parseVaultScope(data: Record<string, unknown>): VaultScope;
+/** Parse a raw wire-format secret row into a VaultSecret. */
+declare function parseVaultSecret(data: Record<string, unknown>): VaultSecret;
+/** Parse a raw wire-format preset into a VaultPreset. */
+declare function parseVaultPreset(data: Record<string, unknown>): VaultPreset;
+/** Render a VaultScope in wire (snake_case) form for request bodies. */
+declare function vaultScopeToJSON(scope: VaultScope): Record<string, unknown>;
+
+/** Shared per-call options for Vault methods. */
+interface VaultRequestOpts {
+    /** API key override. */
+    apiKey?: string;
+    /** Domain override. */
+    domain?: string;
+    /** Full API URL override. */
+    apiUrl?: string;
+    /** Per-request timeout in milliseconds. */
+    requestTimeout?: number;
+}
+/**
+ * Input for creating a vault secret. The team and environment are resolved
+ * automatically (a single "default" team + "prod" environment per account) —
+ * those concepts are not part of the public API.
+ */
+interface CreateSecretInput {
+    /** The secret value (required; never returned after create). */
+    value: string;
+    /** Secret name. Defaults to provider when omitted. */
+    name?: string;
+    /** Optional preset provider key, e.g. "openai". Supplies scopes automatically. */
+    provider?: string;
+    /** Explicit injection scopes. Required unless provider is set. */
+    scopes?: VaultScope[];
+    /** Rotation policy in days. Omitted when 0 or not set. */
+    rotationIntervalDays?: number;
+}
+/**
+ * Vault secret management. All methods are static and derive their connection
+ * from the trailing VaultRequestOpts argument (or env vars when opts is
+ * omitted). The team/environment concepts are handled automatically — every
+ * secret lives under a single auto-provisioned "default" team and "prod"
+ * environment. Secrets are addressed by name only.
+ */
+declare class Vault {
+    /**
+     * Store a secret's value (server-side, in OpenBao) plus its injection
+     * scopes, under the auto-provisioned default team + "prod" environment.
+     * Returns metadata only — the value is never echoed.
+     *
+     * POST /teams/{teamId}/vault/secrets
+     */
+    static createSecret(input: CreateSecretInput, opts?: VaultRequestOpts): Promise<VaultSecret>;
+    /**
+     * List secret metadata for the default team. Returns an empty array if no
+     * default team has been provisioned yet.
+     *
+     * GET /teams/{teamId}/vault/secrets -> {secrets}
+     */
+    static listSecrets(opts?: VaultRequestOpts): Promise<VaultSecret[]>;
+    /**
+     * Replace a secret's value by name (server-side); scopes are unchanged.
+     *
+     * POST /teams/{teamId}/vault/secrets/{secretId}/rotate {value}
+     */
+    static rotateSecret(name: string, value: string, opts?: VaultRequestOpts): Promise<void>;
+    /**
+     * Delete a secret by name — metadata and stored value.
+     *
+     * DELETE /teams/{teamId}/vault/secrets/{secretId}
+     */
+    static deleteSecret(name: string, opts?: VaultRequestOpts): Promise<void>;
+    /**
+     * Replace a secret's injection scopes by name; the value is unchanged. Use
+     * this to change a secret's destination(s) or injection format in place
+     * instead of delete + recreate. At least one scope is required.
+     *
+     * POST /teams/{teamId}/vault/secrets/{secretId}/scopes
+     */
+    static updateScopes(name: string, scopes: VaultScope[], opts?: VaultRequestOpts): Promise<void>;
+    /**
+     * List built-in provider preset catalog (templates only, no secret material).
+     *
+     * GET /vault/presets -> {presets}
+     */
+    static listPresets(opts?: VaultRequestOpts): Promise<VaultPreset[]>;
+    /** Maps a secret name to its id within the given team. */
+    private static _resolveSecretId;
+}
+
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConflictError, ConnectionConfig, type ConnectionConfigOptions, type ContentGateConfig, type CopyItem, type CreateSecretInput, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, type FileEntry, type FileInfo, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type FullInjectionDefenseOptions, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, Governance, type GovernanceAdvisory, type GovernanceControl, type GovernancePack, type GovernanceRequestOpts, InjectionAction, type InjectionDefenseConfig, type InjectionJudgeConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type LockLease, type LockStatus, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, Stdio, StdioProcess, type StdioResult, type StdioStartOpts, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, Vault, type VaultPreset, type VaultRequestOpts, type VaultScope, type VaultSecret, type VolumeAttachMode, type VolumeAttachment, type VolumeCreateOpts, VolumeFiles, type VolumeInfo, VolumeLocks, type VolumeRemoveOpts, type VolumeRequestOpts, type VolumeWriteOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, contentGateConfigToJSON, createAuditConfig, createCodeSecurityConfig, createContentGateConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, fullInjectionDefensePolicy, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseContentGateConfig, parseEntryInfo, parseEnvSecurityConfig, parseFileEntry, parseFileInfo, parseFilesystemEvent, parseGovernancePack, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseLockLease, parseLockStatus, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVaultPreset, parseVaultScope, parseVaultSecret, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, vaultScopeToJSON, volumeAttachmentToJSON };

package/dist/index.d.ts

@@ -186,9 +186,15 @@ interface InjectionDefenseConfig {
     enabled: boolean;
     sensitivity: string;
     action: string;
-    /** Detection threshold (0.0–1.0). Defaults to 0.8. */
+    /** Detection threshold (0.0–1.0). Defaults to 0.95. */
     threshold: number;
-    /** Optional domain allowlist; when undefined, applies to all domains. */
+    /**
+     * Scopes injection scanning to these destination hosts. Injection is
+     * OPT-IN per domain: with an empty or omitted list NO injection scanning
+     * runs (unlike PII/toxicity, where an empty list means all egress).
+     * Entries support exact hosts (`"api.example.com"`), `"*.suffix.com"`
+     * wildcards, and `"~regex"` patterns.
+     */
     domains?: string[];
     /** Optional Tier-2 LLM judge. */
     judge?: InjectionJudgeConfig;
@@ -451,9 +457,13 @@ interface FullInjectionDefenseOptions {
     action?: string;
     /** Run the judge on EVERY egress (high-assurance, costlier). Default false. */
     alwaysJudge?: boolean;
-    /** Optional egress allowlist to scan; omit = all domains. */
+    /**
+     * Destination hosts to scan for injection. Injection is opt-in per domain:
+     * omit or leave empty to scan none. Entries support exact hosts,
+     * `"*.suffix.com"` wildcards, and `"~regex"` patterns.
+     */
     domains?: string[];
-    /** Tier-1 classifier confidence threshold (0.0–1.0). Default 0.8. */
+    /** Tier-1 classifier confidence threshold (0.0–1.0). Default 0.95. */
     threshold?: number;
 }
 /**
@@ -1191,6 +1201,10 @@ interface SandboxOpts {
     metadata?: Record<string, string>;
     /** Environment variables. */
     envs?: Record<string, string>;
+    /** Vault secret references: ENV_NAME -> "vault://team/env/secret". The real
+     *  value is resolved server+worker-side and injected at the egress proxy —
+     *  the sandbox only ever sees a placeholder, never the secret value. */
+    vaultRefs?: Record<string, string>;
     /** Whether to create a secure sandbox. Defaults to true. */
     secure?: boolean;
     /** If false, denies all outbound traffic. Defaults to true. */
@@ -1870,8 +1884,17 @@ interface VolumeCreateOpts extends VolumeRequestOpts {
  * are dropped on the server for safety.
  */
 declare class Volumes {
-    /** Create a volume by streaming a tarball (gzip tar.gz) to the server. */
-    static create(name: string, data: Uint8Array | ArrayBuffer, opts?: VolumeCreateOpts): Promise<VolumeInfo>;
+    /**
+     * Create a volume named `name`, optionally populated with `data`.
+     *
+     * `POST /volumes` is the canonical create endpoint. With `data` (a gzip tar.gz)
+     * the body is ingested into a new file-granular volume (or a legacy tarball
+     * blob if no file-granular backend is configured). Creating an empty volume
+     * (no `data`, or an empty buffer) requires a file-granular backend.
+     * `empty(name)` / `ingest(name, data)` remain available for explicit,
+     * backend-specific control.
+     */
+    static create(name: string, data?: Uint8Array | ArrayBuffer, opts?: VolumeCreateOpts): Promise<VolumeInfo>;
     /**
      * Capture the attached volume's mount path in `sandboxId` into a NEW volume.
      *
@@ -1995,4 +2018,136 @@ declare class Governance {
     static getPack(name: string, opts?: GovernanceRequestOpts): Promise<GovernancePack>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConflictError, ConnectionConfig, type ConnectionConfigOptions, type ContentGateConfig, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, type FileEntry, type FileInfo, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type FullInjectionDefenseOptions, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, Governance, type GovernanceAdvisory, type GovernanceControl, type GovernancePack, type GovernanceRequestOpts, InjectionAction, type InjectionDefenseConfig, type InjectionJudgeConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type LockLease, type LockStatus, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, Stdio, StdioProcess, type StdioResult, type StdioStartOpts, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachMode, type VolumeAttachment, type VolumeCreateOpts, VolumeFiles, type VolumeInfo, VolumeLocks, type VolumeRemoveOpts, type VolumeRequestOpts, type VolumeWriteOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, contentGateConfigToJSON, createAuditConfig, createCodeSecurityConfig, createContentGateConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, fullInjectionDefensePolicy, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseContentGateConfig, parseEntryInfo, parseEnvSecurityConfig, parseFileEntry, parseFileInfo, parseFilesystemEvent, parseGovernancePack, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseLockLease, parseLockStatus, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };
+/**
+ * One per-destination injection rule on a secret. The egress proxy matches
+ * a request host against domainRegex and injects the secret as injectionType
+ * (bearer|header|basic|query|sigv4|oidc|hmac|redis|postgres|mysql|smtp|mongodb).
+ * The optional fields express a provider's full contract.
+ */
+interface VaultScope {
+    domainRegex: string;
+    injectionType?: string;
+    headerName?: string;
+    valuePrefix?: string;
+    basicUsername?: string;
+    extraHeaders?: Record<string, string>;
+    queryParams?: Record<string, string>;
+}
+/**
+ * Metadata for a stored secret — never the value. The value lives
+ * server-side (OpenBao) and is not returned after create.
+ */
+interface VaultSecret {
+    secretId: string;
+    name: string;
+    scopes?: VaultScope[];
+    createdAt: string;
+    updatedAt: string;
+    rotatedAt?: string;
+    rotationIntervalDays?: number;
+    rotationDue?: boolean;
+}
+/**
+ * A built-in provider template (domain + injection rules). Used so a caller
+ * can store a credential by naming the provider and supplying only the value.
+ * Carries no secret material.
+ */
+interface VaultPreset {
+    key: string;
+    name: string;
+    category: string;
+    keyHint: string;
+    docsUrl?: string;
+    scopes: VaultScope[];
+}
+/** Parse a raw wire-format scope into a VaultScope. */
+declare function parseVaultScope(data: Record<string, unknown>): VaultScope;
+/** Parse a raw wire-format secret row into a VaultSecret. */
+declare function parseVaultSecret(data: Record<string, unknown>): VaultSecret;
+/** Parse a raw wire-format preset into a VaultPreset. */
+declare function parseVaultPreset(data: Record<string, unknown>): VaultPreset;
+/** Render a VaultScope in wire (snake_case) form for request bodies. */
+declare function vaultScopeToJSON(scope: VaultScope): Record<string, unknown>;
+
+/** Shared per-call options for Vault methods. */
+interface VaultRequestOpts {
+    /** API key override. */
+    apiKey?: string;
+    /** Domain override. */
+    domain?: string;
+    /** Full API URL override. */
+    apiUrl?: string;
+    /** Per-request timeout in milliseconds. */
+    requestTimeout?: number;
+}
+/**
+ * Input for creating a vault secret. The team and environment are resolved
+ * automatically (a single "default" team + "prod" environment per account) —
+ * those concepts are not part of the public API.
+ */
+interface CreateSecretInput {
+    /** The secret value (required; never returned after create). */
+    value: string;
+    /** Secret name. Defaults to provider when omitted. */
+    name?: string;
+    /** Optional preset provider key, e.g. "openai". Supplies scopes automatically. */
+    provider?: string;
+    /** Explicit injection scopes. Required unless provider is set. */
+    scopes?: VaultScope[];
+    /** Rotation policy in days. Omitted when 0 or not set. */
+    rotationIntervalDays?: number;
+}
+/**
+ * Vault secret management. All methods are static and derive their connection
+ * from the trailing VaultRequestOpts argument (or env vars when opts is
+ * omitted). The team/environment concepts are handled automatically — every
+ * secret lives under a single auto-provisioned "default" team and "prod"
+ * environment. Secrets are addressed by name only.
+ */
+declare class Vault {
+    /**
+     * Store a secret's value (server-side, in OpenBao) plus its injection
+     * scopes, under the auto-provisioned default team + "prod" environment.
+     * Returns metadata only — the value is never echoed.
+     *
+     * POST /teams/{teamId}/vault/secrets
+     */
+    static createSecret(input: CreateSecretInput, opts?: VaultRequestOpts): Promise<VaultSecret>;
+    /**
+     * List secret metadata for the default team. Returns an empty array if no
+     * default team has been provisioned yet.
+     *
+     * GET /teams/{teamId}/vault/secrets -> {secrets}
+     */
+    static listSecrets(opts?: VaultRequestOpts): Promise<VaultSecret[]>;
+    /**
+     * Replace a secret's value by name (server-side); scopes are unchanged.
+     *
+     * POST /teams/{teamId}/vault/secrets/{secretId}/rotate {value}
+     */
+    static rotateSecret(name: string, value: string, opts?: VaultRequestOpts): Promise<void>;
+    /**
+     * Delete a secret by name — metadata and stored value.
+     *
+     * DELETE /teams/{teamId}/vault/secrets/{secretId}
+     */
+    static deleteSecret(name: string, opts?: VaultRequestOpts): Promise<void>;
+    /**
+     * Replace a secret's injection scopes by name; the value is unchanged. Use
+     * this to change a secret's destination(s) or injection format in place
+     * instead of delete + recreate. At least one scope is required.
+     *
+     * POST /teams/{teamId}/vault/secrets/{secretId}/scopes
+     */
+    static updateScopes(name: string, scopes: VaultScope[], opts?: VaultRequestOpts): Promise<void>;
+    /**
+     * List built-in provider preset catalog (templates only, no secret material).
+     *
+     * GET /vault/presets -> {presets}
+     */
+    static listPresets(opts?: VaultRequestOpts): Promise<VaultPreset[]>;
+    /** Maps a secret name to its id within the given team. */
+    private static _resolveSecretId;
+}
+
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConflictError, ConnectionConfig, type ConnectionConfigOptions, type ContentGateConfig, type CopyItem, type CreateSecretInput, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, type FileEntry, type FileInfo, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type FullInjectionDefenseOptions, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, Governance, type GovernanceAdvisory, type GovernanceControl, type GovernancePack, type GovernanceRequestOpts, InjectionAction, type InjectionDefenseConfig, type InjectionJudgeConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type LockLease, type LockStatus, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, Stdio, StdioProcess, type StdioResult, type StdioStartOpts, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, Vault, type VaultPreset, type VaultRequestOpts, type VaultScope, type VaultSecret, type VolumeAttachMode, type VolumeAttachment, type VolumeCreateOpts, VolumeFiles, type VolumeInfo, VolumeLocks, type VolumeRemoveOpts, type VolumeRequestOpts, type VolumeWriteOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, contentGateConfigToJSON, createAuditConfig, createCodeSecurityConfig, createContentGateConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, fullInjectionDefensePolicy, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseContentGateConfig, parseEntryInfo, parseEnvSecurityConfig, parseFileEntry, parseFileInfo, parseFilesystemEvent, parseGovernancePack, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseLockLease, parseLockStatus, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVaultPreset, parseVaultScope, parseVaultSecret, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, vaultScopeToJSON, volumeAttachmentToJSON };