@ontemper/sdk 0.7.1-postgresql.2 → 0.7.1-postgresql.3

package/dist/ResourceRecords.d.ts

@@ -0,0 +1,1086 @@
+import { Effect, Schema } from 'effect';
+import { InvalidResourceError } from './ResourcesErrors.js';
+/** A value the runtime resolver returned: JSON, so every field is one of these. */
+export type JsonValue = Schema.MutableJson;
+export type JsonObject = Schema.MutableJsonObject;
+/** A `postgresql` record; `sslmode` carries libpq semantics, and `tls` the CA and client certificate. */
+export declare const PostgresqlResource: Schema.StructWithRest<Schema.Struct<{
+    readonly host: Schema.String;
+    readonly port: Schema.withDecodingDefault<Schema.Int, never>;
+    readonly dbname: Schema.String;
+    readonly user: Schema.String;
+    readonly auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"rds_iam">;
+        readonly region: Schema.String;
+        readonly awsAuth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, "fields" | "mapFields">]>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"rds_iam">;
+        readonly region: Schema.String;
+        readonly awsAuth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, "fields" | "mapFields">]>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"none">;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"none">;
+    }>, "fields" | "mapFields">]>;
+    readonly sslmode: Schema.withDecodingDefault<Schema.Literals<readonly ["disable", "require", "verify-ca", "verify-full"]>, never>;
+    readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly caCertificate: Schema.optional<Schema.String>;
+        readonly clientCertificate: Schema.optional<Schema.String>;
+        readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly serverName: Schema.optional<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    readonly sshTunnel: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly host: Schema.String;
+        readonly port: Schema.withDecodingDefault<Schema.Number, never>;
+        readonly username: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"credentials">;
+            readonly password: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly privateKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"credentials">;
+            readonly password: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly privateKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly hostKeyFingerprints: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly algorithms: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+        }>, "fields" | "mapFields">>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly host: Schema.String;
+        readonly port: Schema.withDecodingDefault<Schema.Number, never>;
+        readonly username: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"credentials">;
+            readonly password: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly privateKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"credentials">;
+            readonly password: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly privateKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly hostKeyFingerprints: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly algorithms: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+        }>, "fields" | "mapFields">>;
+    }>, "fields" | "mapFields">>;
+    readonly options: Schema.optional<Schema.String>;
+}>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+    readonly host: Schema.String;
+    readonly port: Schema.withDecodingDefault<Schema.Int, never>;
+    readonly dbname: Schema.String;
+    readonly user: Schema.String;
+    readonly auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"rds_iam">;
+        readonly region: Schema.String;
+        readonly awsAuth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, "fields" | "mapFields">]>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"rds_iam">;
+        readonly region: Schema.String;
+        readonly awsAuth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, "fields" | "mapFields">]>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"none">;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"none">;
+    }>, "fields" | "mapFields">]>;
+    readonly sslmode: Schema.withDecodingDefault<Schema.Literals<readonly ["disable", "require", "verify-ca", "verify-full"]>, never>;
+    readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly caCertificate: Schema.optional<Schema.String>;
+        readonly clientCertificate: Schema.optional<Schema.String>;
+        readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly serverName: Schema.optional<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    readonly sshTunnel: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly host: Schema.String;
+        readonly port: Schema.withDecodingDefault<Schema.Number, never>;
+        readonly username: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"credentials">;
+            readonly password: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly privateKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"credentials">;
+            readonly password: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly privateKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly hostKeyFingerprints: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly algorithms: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+        }>, "fields" | "mapFields">>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly host: Schema.String;
+        readonly port: Schema.withDecodingDefault<Schema.Number, never>;
+        readonly username: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"credentials">;
+            readonly password: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly privateKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"credentials">;
+            readonly password: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly privateKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly hostKeyFingerprints: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly algorithms: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+        }>, "fields" | "mapFields">>;
+    }>, "fields" | "mapFields">>;
+    readonly options: Schema.optional<Schema.String>;
+}>, "fields" | "mapFields">;
+export type PostgresqlResource = typeof PostgresqlResource.Type;
+/** A `kafka` record: bootstrap brokers, the `auth` variant, and `tls`, whose presence turns TLS on. */
+export declare const KafkaResource: Schema.StructWithRest<Schema.Struct<{
+    readonly brokers: Schema.$Array<Schema.String>;
+    readonly clientId: Schema.optional<Schema.String>;
+    readonly auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"none">;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"none">;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"sasl_plain">;
+        readonly username: Schema.String;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"sasl_plain">;
+        readonly username: Schema.String;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"sasl_scram">;
+        readonly mechanism: Schema.withDecodingDefault<Schema.Literals<readonly ["SCRAM-SHA-256", "SCRAM-SHA-512"]>, never>;
+        readonly username: Schema.String;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"sasl_scram">;
+        readonly mechanism: Schema.withDecodingDefault<Schema.Literals<readonly ["SCRAM-SHA-256", "SCRAM-SHA-512"]>, never>;
+        readonly username: Schema.String;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"oauthbearer">;
+        readonly tokenRequest: Schema.StructWithRest<Schema.Struct<{
+            readonly tokenUrl: Schema.String;
+            readonly clientId: Schema.String;
+            readonly clientAuthentication: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"none">;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"none">;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"basic">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"basic">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"body">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"body">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"query">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"query">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"private_key_jwt">;
+                readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+                readonly keyId: Schema.optional<Schema.String>;
+                readonly algorithm: Schema.withDecodingDefault<Schema.Literals<readonly ["RS256", "PS256", "ES256"]>, never>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"private_key_jwt">;
+                readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+                readonly keyId: Schema.optional<Schema.String>;
+                readonly algorithm: Schema.withDecodingDefault<Schema.Literals<readonly ["RS256", "PS256", "ES256"]>, never>;
+            }>, "fields" | "mapFields">]>;
+            readonly scope: Schema.optional<Schema.String>;
+            readonly audience: Schema.optional<Schema.String>;
+            readonly extraParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+            readonly tokenRequestFormat: Schema.withDecodingDefault<Schema.Literals<readonly ["form", "json"]>, never>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly tokenUrl: Schema.String;
+            readonly clientId: Schema.String;
+            readonly clientAuthentication: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"none">;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"none">;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"basic">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"basic">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"body">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"body">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"query">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"query">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"private_key_jwt">;
+                readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+                readonly keyId: Schema.optional<Schema.String>;
+                readonly algorithm: Schema.withDecodingDefault<Schema.Literals<readonly ["RS256", "PS256", "ES256"]>, never>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"private_key_jwt">;
+                readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+                readonly keyId: Schema.optional<Schema.String>;
+                readonly algorithm: Schema.withDecodingDefault<Schema.Literals<readonly ["RS256", "PS256", "ES256"]>, never>;
+            }>, "fields" | "mapFields">]>;
+            readonly scope: Schema.optional<Schema.String>;
+            readonly audience: Schema.optional<Schema.String>;
+            readonly extraParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+            readonly tokenRequestFormat: Schema.withDecodingDefault<Schema.Literals<readonly ["form", "json"]>, never>;
+        }>, "fields" | "mapFields">;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"oauthbearer">;
+        readonly tokenRequest: Schema.StructWithRest<Schema.Struct<{
+            readonly tokenUrl: Schema.String;
+            readonly clientId: Schema.String;
+            readonly clientAuthentication: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"none">;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"none">;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"basic">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"basic">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"body">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"body">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"query">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"query">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"private_key_jwt">;
+                readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+                readonly keyId: Schema.optional<Schema.String>;
+                readonly algorithm: Schema.withDecodingDefault<Schema.Literals<readonly ["RS256", "PS256", "ES256"]>, never>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"private_key_jwt">;
+                readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+                readonly keyId: Schema.optional<Schema.String>;
+                readonly algorithm: Schema.withDecodingDefault<Schema.Literals<readonly ["RS256", "PS256", "ES256"]>, never>;
+            }>, "fields" | "mapFields">]>;
+            readonly scope: Schema.optional<Schema.String>;
+            readonly audience: Schema.optional<Schema.String>;
+            readonly extraParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+            readonly tokenRequestFormat: Schema.withDecodingDefault<Schema.Literals<readonly ["form", "json"]>, never>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly tokenUrl: Schema.String;
+            readonly clientId: Schema.String;
+            readonly clientAuthentication: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"none">;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"none">;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"basic">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"basic">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"body">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"body">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"query">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"query">;
+                readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+            }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+                readonly type: Schema.Literal<"private_key_jwt">;
+                readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+                readonly keyId: Schema.optional<Schema.String>;
+                readonly algorithm: Schema.withDecodingDefault<Schema.Literals<readonly ["RS256", "PS256", "ES256"]>, never>;
+            }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+                readonly type: Schema.Literal<"private_key_jwt">;
+                readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+                readonly keyId: Schema.optional<Schema.String>;
+                readonly algorithm: Schema.withDecodingDefault<Schema.Literals<readonly ["RS256", "PS256", "ES256"]>, never>;
+            }>, "fields" | "mapFields">]>;
+            readonly scope: Schema.optional<Schema.String>;
+            readonly audience: Schema.optional<Schema.String>;
+            readonly extraParams: Schema.optional<Schema.$Record<Schema.String, Schema.String>>;
+            readonly tokenRequestFormat: Schema.withDecodingDefault<Schema.Literals<readonly ["form", "json"]>, never>;
+        }>, "fields" | "mapFields">;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"aws_msk_iam">;
+        readonly region: Schema.String;
+        readonly awsAuth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, "fields" | "mapFields">]>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"aws_msk_iam">;
+        readonly region: Schema.String;
+        readonly awsAuth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"access_key">;
+            readonly accessKeyId: Schema.String;
+            readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+            readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"assume_role">;
+            readonly roleArn: Schema.String;
+            readonly externalId: Schema.optional<Schema.String>;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"ambient">;
+        }>, "fields" | "mapFields">]>;
+    }>, "fields" | "mapFields">]>;
+    readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly caCertificate: Schema.optional<Schema.String>;
+        readonly clientCertificate: Schema.optional<Schema.String>;
+        readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly serverName: Schema.optional<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+}>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>;
+export type KafkaResource = typeof KafkaResource.Type;
+/** An `s3` record: bucket, region, an optional S3-compatible endpoint, and the AWS credential source under `auth`. */
+export declare const S3Resource: Schema.StructWithRest<Schema.Struct<{
+    readonly bucket: Schema.String;
+    readonly region: Schema.withDecodingDefault<Schema.String, never>;
+    readonly endpoint: Schema.optional<Schema.String>;
+    readonly pathStyle: Schema.withDecodingDefault<Schema.Boolean, never>;
+    readonly prefix: Schema.optional<Schema.String>;
+    readonly auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"access_key">;
+        readonly accessKeyId: Schema.String;
+        readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+        readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"access_key">;
+        readonly accessKeyId: Schema.String;
+        readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+        readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"assume_role">;
+        readonly roleArn: Schema.String;
+        readonly externalId: Schema.optional<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"assume_role">;
+        readonly roleArn: Schema.String;
+        readonly externalId: Schema.optional<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"ambient">;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"ambient">;
+    }>, "fields" | "mapFields">]>;
+    readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly caCertificate: Schema.optional<Schema.String>;
+        readonly clientCertificate: Schema.optional<Schema.String>;
+        readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly serverName: Schema.optional<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    readonly proxy: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly url: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly caCertificate: Schema.optional<Schema.String>;
+            readonly clientCertificate: Schema.optional<Schema.String>;
+            readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly serverName: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly url: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly caCertificate: Schema.optional<Schema.String>;
+            readonly clientCertificate: Schema.optional<Schema.String>;
+            readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly serverName: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    }>, "fields" | "mapFields">>;
+}>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+    readonly bucket: Schema.String;
+    readonly region: Schema.withDecodingDefault<Schema.String, never>;
+    readonly endpoint: Schema.optional<Schema.String>;
+    readonly pathStyle: Schema.withDecodingDefault<Schema.Boolean, never>;
+    readonly prefix: Schema.optional<Schema.String>;
+    readonly auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"access_key">;
+        readonly accessKeyId: Schema.String;
+        readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+        readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"access_key">;
+        readonly accessKeyId: Schema.String;
+        readonly secretAccessKey: Schema.RedactedFromValue<Schema.String>;
+        readonly sessionToken: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"assume_role">;
+        readonly roleArn: Schema.String;
+        readonly externalId: Schema.optional<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"assume_role">;
+        readonly roleArn: Schema.String;
+        readonly externalId: Schema.optional<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"ambient">;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"ambient">;
+    }>, "fields" | "mapFields">]>;
+    readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly caCertificate: Schema.optional<Schema.String>;
+        readonly clientCertificate: Schema.optional<Schema.String>;
+        readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly serverName: Schema.optional<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    readonly proxy: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly url: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly caCertificate: Schema.optional<Schema.String>;
+            readonly clientCertificate: Schema.optional<Schema.String>;
+            readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly serverName: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly url: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly caCertificate: Schema.optional<Schema.String>;
+            readonly clientCertificate: Schema.optional<Schema.String>;
+            readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly serverName: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    }>, "fields" | "mapFields">>;
+}>, "fields" | "mapFields">;
+export type S3Resource = typeof S3Resource.Type;
+/** An `azure_blob` record: account, container, endpoint, and the credential source under `auth`. */
+export declare const AzureBlobResource: Schema.StructWithRest<Schema.Struct<{
+    readonly accountName: Schema.String;
+    readonly containerName: Schema.String;
+    readonly endpoint: Schema.optional<Schema.String>;
+    readonly endpointSuffix: Schema.withDecodingDefault<Schema.String, never>;
+    readonly prefix: Schema.optional<Schema.String>;
+    readonly auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"shared_key">;
+        readonly accountKey: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"shared_key">;
+        readonly accountKey: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"sas">;
+        readonly sasToken: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"sas">;
+        readonly sasToken: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"service_principal">;
+        readonly tenantId: Schema.String;
+        readonly clientId: Schema.String;
+        readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"service_principal">;
+        readonly tenantId: Schema.String;
+        readonly clientId: Schema.String;
+        readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"service_principal_certificate">;
+        readonly tenantId: Schema.String;
+        readonly clientId: Schema.String;
+        readonly certificatePem: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"service_principal_certificate">;
+        readonly tenantId: Schema.String;
+        readonly clientId: Schema.String;
+        readonly certificatePem: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"ambient">;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"ambient">;
+    }>, "fields" | "mapFields">]>;
+    readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly caCertificate: Schema.optional<Schema.String>;
+        readonly clientCertificate: Schema.optional<Schema.String>;
+        readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly serverName: Schema.optional<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    readonly proxy: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly url: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly caCertificate: Schema.optional<Schema.String>;
+            readonly clientCertificate: Schema.optional<Schema.String>;
+            readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly serverName: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly url: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly caCertificate: Schema.optional<Schema.String>;
+            readonly clientCertificate: Schema.optional<Schema.String>;
+            readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly serverName: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    }>, "fields" | "mapFields">>;
+}>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+    readonly accountName: Schema.String;
+    readonly containerName: Schema.String;
+    readonly endpoint: Schema.optional<Schema.String>;
+    readonly endpointSuffix: Schema.withDecodingDefault<Schema.String, never>;
+    readonly prefix: Schema.optional<Schema.String>;
+    readonly auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"shared_key">;
+        readonly accountKey: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"shared_key">;
+        readonly accountKey: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"sas">;
+        readonly sasToken: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"sas">;
+        readonly sasToken: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"service_principal">;
+        readonly tenantId: Schema.String;
+        readonly clientId: Schema.String;
+        readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"service_principal">;
+        readonly tenantId: Schema.String;
+        readonly clientId: Schema.String;
+        readonly clientSecret: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"service_principal_certificate">;
+        readonly tenantId: Schema.String;
+        readonly clientId: Schema.String;
+        readonly certificatePem: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"service_principal_certificate">;
+        readonly tenantId: Schema.String;
+        readonly clientId: Schema.String;
+        readonly certificatePem: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"ambient">;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"ambient">;
+    }>, "fields" | "mapFields">]>;
+    readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly caCertificate: Schema.optional<Schema.String>;
+        readonly clientCertificate: Schema.optional<Schema.String>;
+        readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly serverName: Schema.optional<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    readonly proxy: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly url: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly caCertificate: Schema.optional<Schema.String>;
+            readonly clientCertificate: Schema.optional<Schema.String>;
+            readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly serverName: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly url: Schema.String;
+        readonly auth: Schema.withDecodingDefault<Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"none">;
+        }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+            readonly type: Schema.Literal<"basic">;
+            readonly username: Schema.String;
+            readonly password: Schema.RedactedFromValue<Schema.String>;
+        }>, "fields" | "mapFields">]>, never>;
+        readonly tls: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+            readonly caCertificate: Schema.optional<Schema.String>;
+            readonly clientCertificate: Schema.optional<Schema.String>;
+            readonly clientKey: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly clientKeyPassphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+            readonly serverName: Schema.optional<Schema.String>;
+        }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]>>;
+    }>, "fields" | "mapFields">>;
+}>, "fields" | "mapFields">;
+export type AzureBlobResource = typeof AzureBlobResource.Type;
+/**
+ * An `sftp` record; `hostKeyFingerprints` are the `SHA256:` fingerprints the client must pin when set. The
+ * credentials under `auth` are also lifted to the top level. Lifted values are Redacted<unknown>: legacy also copies
+ * undeclared credential fields; narrow those values before use, or read the typed fields of the auth variant.
+ */
+export declare const SftpResource: Schema.decodeTo<Schema.toType<Schema.StructWithRest<Schema.Struct<{
+    readonly host: Schema.String;
+    readonly port: Schema.withDecodingDefault<Schema.Number, never>;
+    readonly username: Schema.String;
+    readonly auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key_and_password">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key_and_password">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">]>;
+    readonly hostKeyFingerprints: Schema.optional<Schema.$Array<Schema.String>>;
+    readonly algorithms: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+    }>, "fields" | "mapFields">>;
+    readonly password: Schema.optional<Schema.Redacted<Schema.Unknown>>;
+    readonly privateKey: Schema.optional<Schema.Redacted<Schema.Unknown>>;
+    readonly passphrase: Schema.optional<Schema.Redacted<Schema.Unknown>>;
+}>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+    readonly host: Schema.String;
+    readonly port: Schema.withDecodingDefault<Schema.Number, never>;
+    readonly username: Schema.String;
+    readonly auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key_and_password">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key_and_password">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">]>;
+    readonly hostKeyFingerprints: Schema.optional<Schema.$Array<Schema.String>>;
+    readonly algorithms: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+    }>, "fields" | "mapFields">>;
+    readonly password: Schema.optional<Schema.Redacted<Schema.Unknown>>;
+    readonly privateKey: Schema.optional<Schema.Redacted<Schema.Unknown>>;
+    readonly passphrase: Schema.optional<Schema.Redacted<Schema.Unknown>>;
+}>, "fields" | "mapFields">>, Schema.StructWithRest<Schema.Struct<{
+    host: Schema.String;
+    port: Schema.withDecodingDefault<Schema.Number, never>;
+    username: Schema.String;
+    auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key_and_password">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key_and_password">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">]>;
+    hostKeyFingerprints: Schema.optional<Schema.$Array<Schema.String>>;
+    algorithms: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+    }>, "fields" | "mapFields">>;
+}>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+    host: Schema.String;
+    port: Schema.withDecodingDefault<Schema.Number, never>;
+    username: Schema.String;
+    auth: Schema.Union<readonly [Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"password">;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+    }>, "fields" | "mapFields">, Schema.StructWithRest<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key_and_password">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly type: Schema.Literal<"private_key_and_password">;
+        readonly privateKey: Schema.RedactedFromValue<Schema.String>;
+        readonly passphrase: Schema.optional<Schema.RedactedFromValue<Schema.String>>;
+        readonly password: Schema.RedactedFromValue<Schema.String>;
+    }>, "fields" | "mapFields">]>;
+    hostKeyFingerprints: Schema.optional<Schema.$Array<Schema.String>>;
+    algorithms: Schema.optional<Schema.StructWithRest<Schema.Struct<{
+        readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+    }>, readonly [Schema.$Record<Schema.String, Schema.Unknown>]> & Pick<Schema.Struct<{
+        readonly kex: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly serverHostKey: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly cipher: Schema.optional<Schema.$Array<Schema.String>>;
+        readonly hmac: Schema.optional<Schema.$Array<Schema.String>>;
+    }>, "fields" | "mapFields">>;
+}>, "fields" | "mapFields">, never, never>;
+export type SftpResource = typeof SftpResource.Type;
+declare const UnknownRecordValueError_base: Schema.Class<UnknownRecordValueError, Schema.TaggedStruct<"UnknownRecordValueError", {
+    readonly key: Schema.String;
+    readonly fields: Schema.$Array<Schema.String>;
+    readonly clientVersion: Schema.String;
+    readonly message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+/**
+ * A built-in record holds a value this SDK does not know in a closed field: one that chooses TLS, where a key
+ * travels, or AS2 cryptography, where a guess would weaken security silently. The message names the fields and this
+ * SDK's version, never the value, which can be a mis-pointed secret.
+ */
+export declare class UnknownRecordValueError extends UnknownRecordValueError_base {
+    static of(key: string, fields: ReadonlyArray<string>): UnknownRecordValueError;
+}
+/** Decodable without services, so a record decodes wherever it is read. */
+export type RecordSchema = Schema.Top & {
+    readonly DecodingServices: never;
+};
+/**
+ * Decodes a resolved record. A mismatch names the fields, never their values; a built-in record with a closed value
+ * this SDK does not know fails with `UnknownRecordValueError`.
+ */
+export declare const decodeRecord: <S extends RecordSchema>(schema: S, key: string, value: Schema.Json) => Effect.Effect<S['Type'], InvalidResourceError | UnknownRecordValueError>;
+export {};
+//# sourceMappingURL=ResourceRecords.d.ts.map