@paperclipai/shared 2026.824.1 → 2026.825.0-beta.1

package/dist/validators/secret.d.ts

@@ -2,478 +2,237 @@ import { z } from "zod";
 export declare const envBindingPlainSchema: z.ZodObject<{
     type: z.ZodLiteral<"plain">;
     value: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    value: string;
-    type: "plain";
-}, {
-    value: string;
-    type: "plain";
-}>;
+}, z.core.$strip>;
 export declare const envBindingSecretRefSchema: z.ZodObject<{
     type: z.ZodLiteral<"secret_ref">;
     secretId: z.ZodString;
-    version: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"latest">, z.ZodNumber]>>;
-    projectionClass: z.ZodOptional<z.ZodEnum<["unclassified", "class_3_static_lease"]>>;
+    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
+    projectionClass: z.ZodOptional<z.ZodEnum<{
+        unclassified: "unclassified";
+        class_3_static_lease: "class_3_static_lease";
+    }>>;
     projectionAllowlistKey: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    type: "secret_ref";
-    secretId: string;
-    version?: number | "latest" | undefined;
-    projectionClass?: "unclassified" | "class_3_static_lease" | undefined;
-    projectionAllowlistKey?: string | null | undefined;
-}, {
-    type: "secret_ref";
-    secretId: string;
-    version?: number | "latest" | undefined;
-    projectionClass?: "unclassified" | "class_3_static_lease" | undefined;
-    projectionAllowlistKey?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export declare const envBindingUserSecretRefSchema: z.ZodObject<{
     type: z.ZodLiteral<"user_secret_ref">;
     key: z.ZodString;
-    version: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"latest">, z.ZodNumber]>>;
+    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
     required: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     allowMissingOverride: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-}, "strip", z.ZodTypeAny, {
-    key: string;
-    required: boolean;
-    type: "user_secret_ref";
-    allowMissingOverride: boolean;
-    version?: number | "latest" | undefined;
-}, {
-    key: string;
-    type: "user_secret_ref";
-    required?: boolean | undefined;
-    version?: number | "latest" | undefined;
-    allowMissingOverride?: boolean | undefined;
-}>;
-export declare const envBindingSchema: z.ZodUnion<[z.ZodString, z.ZodObject<{
+}, z.core.$strip>;
+export declare const envBindingSchema: z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
     type: z.ZodLiteral<"plain">;
     value: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    value: string;
-    type: "plain";
-}, {
-    value: string;
-    type: "plain";
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"secret_ref">;
     secretId: z.ZodString;
-    version: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"latest">, z.ZodNumber]>>;
-    projectionClass: z.ZodOptional<z.ZodEnum<["unclassified", "class_3_static_lease"]>>;
+    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
+    projectionClass: z.ZodOptional<z.ZodEnum<{
+        unclassified: "unclassified";
+        class_3_static_lease: "class_3_static_lease";
+    }>>;
     projectionAllowlistKey: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    type: "secret_ref";
-    secretId: string;
-    version?: number | "latest" | undefined;
-    projectionClass?: "unclassified" | "class_3_static_lease" | undefined;
-    projectionAllowlistKey?: string | null | undefined;
-}, {
-    type: "secret_ref";
-    secretId: string;
-    version?: number | "latest" | undefined;
-    projectionClass?: "unclassified" | "class_3_static_lease" | undefined;
-    projectionAllowlistKey?: string | null | undefined;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"user_secret_ref">;
     key: z.ZodString;
-    version: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"latest">, z.ZodNumber]>>;
+    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
     required: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     allowMissingOverride: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-}, "strip", z.ZodTypeAny, {
-    key: string;
-    required: boolean;
-    type: "user_secret_ref";
-    allowMissingOverride: boolean;
-    version?: number | "latest" | undefined;
-}, {
-    key: string;
-    type: "user_secret_ref";
-    required?: boolean | undefined;
-    version?: number | "latest" | undefined;
-    allowMissingOverride?: boolean | undefined;
-}>]>;
-export declare const envConfigSchema: z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodString, z.ZodObject<{
+}, z.core.$strip>]>;
+export declare const envConfigSchema: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
     type: z.ZodLiteral<"plain">;
     value: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    value: string;
-    type: "plain";
-}, {
-    value: string;
-    type: "plain";
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"secret_ref">;
     secretId: z.ZodString;
-    version: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"latest">, z.ZodNumber]>>;
-    projectionClass: z.ZodOptional<z.ZodEnum<["unclassified", "class_3_static_lease"]>>;
+    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
+    projectionClass: z.ZodOptional<z.ZodEnum<{
+        unclassified: "unclassified";
+        class_3_static_lease: "class_3_static_lease";
+    }>>;
     projectionAllowlistKey: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    type: "secret_ref";
-    secretId: string;
-    version?: number | "latest" | undefined;
-    projectionClass?: "unclassified" | "class_3_static_lease" | undefined;
-    projectionAllowlistKey?: string | null | undefined;
-}, {
-    type: "secret_ref";
-    secretId: string;
-    version?: number | "latest" | undefined;
-    projectionClass?: "unclassified" | "class_3_static_lease" | undefined;
-    projectionAllowlistKey?: string | null | undefined;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
     type: z.ZodLiteral<"user_secret_ref">;
     key: z.ZodString;
-    version: z.ZodOptional<z.ZodUnion<[z.ZodLiteral<"latest">, z.ZodNumber]>>;
+    version: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
     required: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     allowMissingOverride: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
-}, "strip", z.ZodTypeAny, {
-    key: string;
-    required: boolean;
-    type: "user_secret_ref";
-    allowMissingOverride: boolean;
-    version?: number | "latest" | undefined;
-}, {
-    key: string;
-    type: "user_secret_ref";
-    required?: boolean | undefined;
-    version?: number | "latest" | undefined;
-    allowMissingOverride?: boolean | undefined;
-}>]>>;
-export declare const createSecretSchema: z.ZodEffects<z.ZodObject<{
+}, z.core.$strip>]>>;
+export declare const createSecretSchema: z.ZodObject<{
     name: z.ZodString;
     key: z.ZodOptional<z.ZodString>;
-    provider: z.ZodOptional<z.ZodEnum<["local_encrypted", "aws_secrets_manager", "gcp_secret_manager", "vault"]>>;
+    provider: z.ZodOptional<z.ZodEnum<{
+        local_encrypted: "local_encrypted";
+        aws_secrets_manager: "aws_secrets_manager";
+        gcp_secret_manager: "gcp_secret_manager";
+        vault: "vault";
+    }>>;
     providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-    managedMode: z.ZodOptional<z.ZodEnum<["paperclip_managed", "external_reference"]>>;
+    managedMode: z.ZodOptional<z.ZodEnum<{
+        paperclip_managed: "paperclip_managed";
+        external_reference: "external_reference";
+    }>>;
     value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    name: string;
-    description?: string | null | undefined;
-    key?: string | undefined;
-    value?: string | null | undefined;
-    provider?: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault" | undefined;
-    providerConfigId?: string | null | undefined;
-    managedMode?: "paperclip_managed" | "external_reference" | undefined;
-    externalRef?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}, {
-    name: string;
-    description?: string | null | undefined;
-    key?: string | undefined;
-    value?: string | null | undefined;
-    provider?: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault" | undefined;
-    providerConfigId?: string | null | undefined;
-    managedMode?: "paperclip_managed" | "external_reference" | undefined;
-    externalRef?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}>, {
-    name: string;
-    description?: string | null | undefined;
-    key?: string | undefined;
-    value?: string | null | undefined;
-    provider?: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault" | undefined;
-    providerConfigId?: string | null | undefined;
-    managedMode?: "paperclip_managed" | "external_reference" | undefined;
-    externalRef?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}, {
-    name: string;
-    description?: string | null | undefined;
-    key?: string | undefined;
-    value?: string | null | undefined;
-    provider?: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault" | undefined;
-    providerConfigId?: string | null | undefined;
-    managedMode?: "paperclip_managed" | "external_reference" | undefined;
-    externalRef?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export type CreateSecret = z.infer<typeof createSecretSchema>;
-export declare const rotateSecretSchema: z.ZodEffects<z.ZodObject<{
+export declare const rotateSecretSchema: z.ZodObject<{
     value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}>, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export type RotateSecret = z.infer<typeof rotateSecretSchema>;
 export declare const updateSecretSchema: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     key: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<["active", "disabled", "archived", "deleted"]>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+        disabled: "disabled";
+        deleted: "deleted";
+    }>>;
     providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
-}, "strip", z.ZodTypeAny, {
-    description?: string | null | undefined;
-    key?: string | undefined;
-    status?: "active" | "archived" | "disabled" | "deleted" | undefined;
-    name?: string | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-}, {
-    description?: string | null | undefined;
-    key?: string | undefined;
-    status?: "active" | "archived" | "disabled" | "deleted" | undefined;
-    name?: string | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-}>;
+}, z.core.$strip>;
 export type UpdateSecret = z.infer<typeof updateSecretSchema>;
 export declare const secretBindingTargetSchema: z.ZodObject<{
-    targetType: z.ZodEnum<["agent", "project", "environment", "routine", "plugin", "issue", "run", "tool_connection", "system"]>;
+    targetType: z.ZodEnum<{
+        project: "project";
+        agent: "agent";
+        system: "system";
+        plugin: "plugin";
+        environment: "environment";
+        routine: "routine";
+        issue: "issue";
+        run: "run";
+        tool_connection: "tool_connection";
+    }>;
     targetId: z.ZodString;
     configPath: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-    targetType: "project" | "agent" | "system" | "plugin" | "environment" | "routine" | "issue" | "run" | "tool_connection";
-    targetId: string;
-    configPath: string;
-}, {
-    targetType: "project" | "agent" | "system" | "plugin" | "environment" | "routine" | "issue" | "run" | "tool_connection";
-    targetId: string;
-    configPath: string;
-}>;
+}, z.core.$strip>;
 export declare const createSecretBindingSchema: z.ZodObject<{
-    targetType: z.ZodEnum<["agent", "project", "environment", "routine", "plugin", "issue", "run", "tool_connection", "system"]>;
+    targetType: z.ZodEnum<{
+        project: "project";
+        agent: "agent";
+        system: "system";
+        plugin: "plugin";
+        environment: "environment";
+        routine: "routine";
+        issue: "issue";
+        run: "run";
+        tool_connection: "tool_connection";
+    }>;
     targetId: z.ZodString;
     configPath: z.ZodString;
-} & {
     secretId: z.ZodString;
-    versionSelector: z.ZodDefault<z.ZodUnion<[z.ZodLiteral<"latest">, z.ZodNumber]>>;
+    versionSelector: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
     required: z.ZodDefault<z.ZodBoolean>;
     label: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-    projectionClass: z.ZodOptional<z.ZodEnum<["unclassified", "class_3_static_lease"]>>;
+    projectionClass: z.ZodOptional<z.ZodEnum<{
+        unclassified: "unclassified";
+        class_3_static_lease: "class_3_static_lease";
+    }>>;
     projectionAllowlistKey: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    required: boolean;
-    secretId: string;
-    targetType: "project" | "agent" | "system" | "plugin" | "environment" | "routine" | "issue" | "run" | "tool_connection";
-    targetId: string;
-    configPath: string;
-    versionSelector: number | "latest";
-    projectionClass?: "unclassified" | "class_3_static_lease" | undefined;
-    projectionAllowlistKey?: string | null | undefined;
-    label?: string | null | undefined;
-}, {
-    secretId: string;
-    targetType: "project" | "agent" | "system" | "plugin" | "environment" | "routine" | "issue" | "run" | "tool_connection";
-    targetId: string;
-    configPath: string;
-    required?: boolean | undefined;
-    projectionClass?: "unclassified" | "class_3_static_lease" | undefined;
-    projectionAllowlistKey?: string | null | undefined;
-    versionSelector?: number | "latest" | undefined;
-    label?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export type CreateSecretBinding = z.infer<typeof createSecretBindingSchema>;
 export declare const createUserSecretDefinitionSchema: z.ZodObject<{
     key: z.ZodString;
     name: z.ZodString;
     description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-    status: z.ZodOptional<z.ZodEnum<["active", "disabled", "archived"]>>;
-    provider: z.ZodOptional<z.ZodEnum<["local_encrypted", "aws_secrets_manager", "gcp_secret_manager", "vault"]>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+        disabled: "disabled";
+    }>>;
+    provider: z.ZodOptional<z.ZodEnum<{
+        local_encrypted: "local_encrypted";
+        aws_secrets_manager: "aws_secrets_manager";
+        gcp_secret_manager: "gcp_secret_manager";
+        vault: "vault";
+    }>>;
     providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-    managedMode: z.ZodOptional<z.ZodEnum<["paperclip_managed", "external_reference"]>>;
+    managedMode: z.ZodOptional<z.ZodEnum<{
+        paperclip_managed: "paperclip_managed";
+        external_reference: "external_reference";
+    }>>;
     providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     usageGuidance: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    key: string;
-    name: string;
-    description?: string | null | undefined;
-    status?: "active" | "archived" | "disabled" | undefined;
-    provider?: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault" | undefined;
-    providerConfigId?: string | null | undefined;
-    managedMode?: "paperclip_managed" | "external_reference" | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    usageGuidance?: string | null | undefined;
-}, {
-    key: string;
-    name: string;
-    description?: string | null | undefined;
-    status?: "active" | "archived" | "disabled" | undefined;
-    provider?: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault" | undefined;
-    providerConfigId?: string | null | undefined;
-    managedMode?: "paperclip_managed" | "external_reference" | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    usageGuidance?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export type CreateUserSecretDefinition = z.infer<typeof createUserSecretDefinitionSchema>;
 export declare const updateUserSecretDefinitionSchema: z.ZodObject<{
     name: z.ZodOptional<z.ZodString>;
     description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-    status: z.ZodOptional<z.ZodEnum<["active", "disabled", "archived", "deleted"]>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+        disabled: "disabled";
+        deleted: "deleted";
+    }>>;
     providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
     usageGuidance: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    description?: string | null | undefined;
-    status?: "active" | "archived" | "disabled" | "deleted" | undefined;
-    name?: string | undefined;
-    providerConfigId?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    usageGuidance?: string | null | undefined;
-}, {
-    description?: string | null | undefined;
-    status?: "active" | "archived" | "disabled" | "deleted" | undefined;
-    name?: string | undefined;
-    providerConfigId?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    usageGuidance?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export type UpdateUserSecretDefinition = z.infer<typeof updateUserSecretDefinitionSchema>;
-export declare const createUserSecretValueSchema: z.ZodEffects<z.ZodObject<{
+export declare const createUserSecretValueSchema: z.ZodObject<{
     definitionKey: z.ZodOptional<z.ZodString>;
     definitionId: z.ZodOptional<z.ZodString>;
     value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-    definitionKey?: string | undefined;
-    definitionId?: string | undefined;
-}, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-    definitionKey?: string | undefined;
-    definitionId?: string | undefined;
-}>, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-    definitionKey?: string | undefined;
-    definitionId?: string | undefined;
-}, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-    definitionKey?: string | undefined;
-    definitionId?: string | undefined;
-}>;
+}, z.core.$strip>;
 export type CreateUserSecretValue = z.infer<typeof createUserSecretValueSchema>;
 export declare const updateUserSecretValueSchema: z.ZodObject<{
-    status: z.ZodOptional<z.ZodEnum<["active", "disabled", "archived", "deleted"]>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        active: "active";
+        archived: "archived";
+        disabled: "disabled";
+        deleted: "deleted";
+    }>>;
     value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    status?: "active" | "archived" | "disabled" | "deleted" | undefined;
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}, {
-    status?: "active" | "archived" | "disabled" | "deleted" | undefined;
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export type UpdateUserSecretValue = z.infer<typeof updateUserSecretValueSchema>;
-export declare const rotateUserSecretValueSchema: z.ZodEffects<z.ZodObject<{
+export declare const rotateUserSecretValueSchema: z.ZodObject<{
     value: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     externalRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerConfigId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}>, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}, {
-    value?: string | null | undefined;
-    providerConfigId?: string | null | undefined;
-    externalRef?: string | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export type RotateUserSecretValue = z.infer<typeof rotateUserSecretValueSchema>;
 export declare const createUserSecretDeclarationSchema: z.ZodObject<{
-    targetType: z.ZodEnum<["agent", "project", "environment", "routine", "plugin", "issue", "run", "tool_connection", "system"]>;
+    targetType: z.ZodEnum<{
+        project: "project";
+        agent: "agent";
+        system: "system";
+        plugin: "plugin";
+        environment: "environment";
+        routine: "routine";
+        issue: "issue";
+        run: "run";
+        tool_connection: "tool_connection";
+    }>;
     targetId: z.ZodString;
     configPath: z.ZodString;
-} & {
     definitionKey: z.ZodString;
     envKey: z.ZodString;
-    versionSelector: z.ZodDefault<z.ZodUnion<[z.ZodLiteral<"latest">, z.ZodNumber]>>;
+    versionSelector: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"latest">, z.ZodNumber]>>;
     required: z.ZodDefault<z.ZodBoolean>;
     allowMissingOverride: z.ZodDefault<z.ZodBoolean>;
     label: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strip", z.ZodTypeAny, {
-    required: boolean;
-    allowMissingOverride: boolean;
-    targetType: "project" | "agent" | "system" | "plugin" | "environment" | "routine" | "issue" | "run" | "tool_connection";
-    targetId: string;
-    configPath: string;
-    versionSelector: number | "latest";
-    definitionKey: string;
-    envKey: string;
-    label?: string | null | undefined;
-}, {
-    targetType: "project" | "agent" | "system" | "plugin" | "environment" | "routine" | "issue" | "run" | "tool_connection";
-    targetId: string;
-    configPath: string;
-    definitionKey: string;
-    envKey: string;
-    required?: boolean | undefined;
-    allowMissingOverride?: boolean | undefined;
-    versionSelector?: number | "latest" | undefined;
-    label?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export type CreateUserSecretDeclaration = z.infer<typeof createUserSecretDeclarationSchema>;
 export declare const localEncryptedProviderConfigSchema: z.ZodObject<{
     backupReminderAcknowledged: z.ZodOptional<z.ZodBoolean>;
-}, "strict", z.ZodTypeAny, {
-    backupReminderAcknowledged?: boolean | undefined;
-}, {
-    backupReminderAcknowledged?: boolean | undefined;
-}>;
+}, z.core.$strict>;
 export declare const awsSecretsManagerProviderConfigSchema: z.ZodObject<{
     region: z.ZodString;
     namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
@@ -481,73 +240,25 @@ export declare const awsSecretsManagerProviderConfigSchema: z.ZodObject<{
     kmsKeyId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     ownerTag: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     environmentTag: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strict", z.ZodTypeAny, {
-    region: string;
-    namespace?: string | null | undefined;
-    secretNamePrefix?: string | null | undefined;
-    kmsKeyId?: string | null | undefined;
-    ownerTag?: string | null | undefined;
-    environmentTag?: string | null | undefined;
-}, {
-    region: string;
-    namespace?: string | null | undefined;
-    secretNamePrefix?: string | null | undefined;
-    kmsKeyId?: string | null | undefined;
-    ownerTag?: string | null | undefined;
-    environmentTag?: string | null | undefined;
-}>;
+}, z.core.$strict>;
 export declare const gcpSecretManagerProviderConfigSchema: z.ZodObject<{
     projectId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     location: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     secretNamePrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strict", z.ZodTypeAny, {
-    namespace?: string | null | undefined;
-    secretNamePrefix?: string | null | undefined;
-    projectId?: string | null | undefined;
-    location?: string | null | undefined;
-}, {
-    namespace?: string | null | undefined;
-    secretNamePrefix?: string | null | undefined;
-    projectId?: string | null | undefined;
-    location?: string | null | undefined;
-}>;
+}, z.core.$strict>;
 export declare const vaultProviderConfigSchema: z.ZodObject<{
-    address: z.ZodNullable<z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, unknown>>>;
+    address: z.ZodNullable<z.ZodOptional<z.ZodPreprocess<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>>;
     namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     mountPath: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     secretPathPrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-}, "strict", z.ZodTypeAny, {
-    namespace?: string | null | undefined;
-    address?: string | null | undefined;
-    mountPath?: string | null | undefined;
-    secretPathPrefix?: string | null | undefined;
-}, {
-    namespace?: string | null | undefined;
-    address?: unknown;
-    mountPath?: string | null | undefined;
-    secretPathPrefix?: string | null | undefined;
-}>;
-export declare const secretProviderConfigPayloadSchema: z.ZodDiscriminatedUnion<"provider", [z.ZodObject<{
+}, z.core.$strict>;
+export declare const secretProviderConfigPayloadSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     provider: z.ZodLiteral<"local_encrypted">;
     config: z.ZodObject<{
         backupReminderAcknowledged: z.ZodOptional<z.ZodBoolean>;
-    }, "strict", z.ZodTypeAny, {
-        backupReminderAcknowledged?: boolean | undefined;
-    }, {
-        backupReminderAcknowledged?: boolean | undefined;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    provider: "local_encrypted";
-    config: {
-        backupReminderAcknowledged?: boolean | undefined;
-    };
-}, {
-    provider: "local_encrypted";
-    config: {
-        backupReminderAcknowledged?: boolean | undefined;
-    };
-}>, z.ZodObject<{
+    }, z.core.$strict>;
+}, z.core.$strip>, z.ZodObject<{
     provider: z.ZodLiteral<"aws_secrets_manager">;
     config: z.ZodObject<{
         region: z.ZodString;
@@ -556,217 +267,73 @@ export declare const secretProviderConfigPayloadSchema: z.ZodDiscriminatedUnion<
         kmsKeyId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
         ownerTag: z.ZodNullable<z.ZodOptional<z.ZodString>>;
         environmentTag: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-    }, "strict", z.ZodTypeAny, {
-        region: string;
-        namespace?: string | null | undefined;
-        secretNamePrefix?: string | null | undefined;
-        kmsKeyId?: string | null | undefined;
-        ownerTag?: string | null | undefined;
-        environmentTag?: string | null | undefined;
-    }, {
-        region: string;
-        namespace?: string | null | undefined;
-        secretNamePrefix?: string | null | undefined;
-        kmsKeyId?: string | null | undefined;
-        ownerTag?: string | null | undefined;
-        environmentTag?: string | null | undefined;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    provider: "aws_secrets_manager";
-    config: {
-        region: string;
-        namespace?: string | null | undefined;
-        secretNamePrefix?: string | null | undefined;
-        kmsKeyId?: string | null | undefined;
-        ownerTag?: string | null | undefined;
-        environmentTag?: string | null | undefined;
-    };
-}, {
-    provider: "aws_secrets_manager";
-    config: {
-        region: string;
-        namespace?: string | null | undefined;
-        secretNamePrefix?: string | null | undefined;
-        kmsKeyId?: string | null | undefined;
-        ownerTag?: string | null | undefined;
-        environmentTag?: string | null | undefined;
-    };
-}>, z.ZodObject<{
+    }, z.core.$strict>;
+}, z.core.$strip>, z.ZodObject<{
     provider: z.ZodLiteral<"gcp_secret_manager">;
     config: z.ZodObject<{
         projectId: z.ZodNullable<z.ZodOptional<z.ZodString>>;
         location: z.ZodNullable<z.ZodOptional<z.ZodString>>;
         namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
         secretNamePrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-    }, "strict", z.ZodTypeAny, {
-        namespace?: string | null | undefined;
-        secretNamePrefix?: string | null | undefined;
-        projectId?: string | null | undefined;
-        location?: string | null | undefined;
-    }, {
-        namespace?: string | null | undefined;
-        secretNamePrefix?: string | null | undefined;
-        projectId?: string | null | undefined;
-        location?: string | null | undefined;
-    }>;
-}, "strip", z.ZodTypeAny, {
-    provider: "gcp_secret_manager";
-    config: {
-        namespace?: string | null | undefined;
-        secretNamePrefix?: string | null | undefined;
-        projectId?: string | null | undefined;
-        location?: string | null | undefined;
-    };
-}, {
-    provider: "gcp_secret_manager";
-    config: {
-        namespace?: string | null | undefined;
-        secretNamePrefix?: string | null | undefined;
-        projectId?: string | null | undefined;
-        location?: string | null | undefined;
-    };
-}>, z.ZodObject<{
+    }, z.core.$strict>;
+}, z.core.$strip>, z.ZodObject<{
     provider: z.ZodLiteral<"vault">;
     config: z.ZodObject<{
-        address: z.ZodNullable<z.ZodOptional<z.ZodEffects<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, string, unknown>>>;
+        address: z.ZodNullable<z.ZodOptional<z.ZodPreprocess<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>>>;
         namespace: z.ZodNullable<z.ZodOptional<z.ZodString>>;
         mountPath: z.ZodNullable<z.ZodOptional<z.ZodString>>;
         secretPathPrefix: z.ZodNullable<z.ZodOptional<z.ZodString>>;
-    }, "strict", z.ZodTypeAny, {
-        namespace?: string | null | undefined;
-        address?: string | null | undefined;
-        mountPath?: string | null | undefined;
-        secretPathPrefix?: string | null | undefined;
-    }, {
-        namespace?: string | null | undefined;
-        address?: unknown;
-        mountPath?: string | null | undefined;
-        secretPathPrefix?: string | null | undefined;
+    }, z.core.$strict>;
+}, z.core.$strip>], "provider">;
+export declare const createSecretProviderConfigSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        local_encrypted: "local_encrypted";
+        aws_secrets_manager: "aws_secrets_manager";
+        gcp_secret_manager: "gcp_secret_manager";
+        vault: "vault";
     }>;
-}, "strip", z.ZodTypeAny, {
-    provider: "vault";
-    config: {
-        namespace?: string | null | undefined;
-        address?: string | null | undefined;
-        mountPath?: string | null | undefined;
-        secretPathPrefix?: string | null | undefined;
-    };
-}, {
-    provider: "vault";
-    config: {
-        namespace?: string | null | undefined;
-        address?: unknown;
-        mountPath?: string | null | undefined;
-        secretPathPrefix?: string | null | undefined;
-    };
-}>]>;
-export declare const createSecretProviderConfigSchema: z.ZodEffects<z.ZodObject<{
-    provider: z.ZodEnum<["local_encrypted", "aws_secrets_manager", "gcp_secret_manager", "vault"]>;
     displayName: z.ZodString;
-    status: z.ZodOptional<z.ZodEnum<["ready", "warning", "coming_soon", "disabled"]>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        warning: "warning";
+        ready: "ready";
+        coming_soon: "coming_soon";
+        disabled: "disabled";
+    }>>;
     isDefault: z.ZodOptional<z.ZodBoolean>;
     config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-}, "strip", z.ZodTypeAny, {
-    provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
-    config: Record<string, unknown>;
-    displayName: string;
-    status?: "warning" | "ready" | "coming_soon" | "disabled" | undefined;
-    isDefault?: boolean | undefined;
-}, {
-    provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
-    displayName: string;
-    status?: "warning" | "ready" | "coming_soon" | "disabled" | undefined;
-    config?: Record<string, unknown> | undefined;
-    isDefault?: boolean | undefined;
-}>, {
-    provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
-    config: Record<string, unknown>;
-    displayName: string;
-    status?: "warning" | "ready" | "coming_soon" | "disabled" | undefined;
-    isDefault?: boolean | undefined;
-}, {
-    provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
-    displayName: string;
-    status?: "warning" | "ready" | "coming_soon" | "disabled" | undefined;
-    config?: Record<string, unknown> | undefined;
-    isDefault?: boolean | undefined;
-}>;
+}, z.core.$strip>;
 export type CreateSecretProviderConfig = z.infer<typeof createSecretProviderConfigSchema>;
-export declare const updateSecretProviderConfigSchema: z.ZodEffects<z.ZodObject<{
+export declare const updateSecretProviderConfigSchema: z.ZodObject<{
     displayName: z.ZodOptional<z.ZodString>;
-    status: z.ZodOptional<z.ZodEnum<["ready", "warning", "coming_soon", "disabled"]>>;
+    status: z.ZodOptional<z.ZodEnum<{
+        warning: "warning";
+        ready: "ready";
+        coming_soon: "coming_soon";
+        disabled: "disabled";
+    }>>;
     isDefault: z.ZodOptional<z.ZodBoolean>;
     config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-}, "strip", z.ZodTypeAny, {
-    status?: "warning" | "ready" | "coming_soon" | "disabled" | undefined;
-    config?: Record<string, unknown> | undefined;
-    displayName?: string | undefined;
-    isDefault?: boolean | undefined;
-}, {
-    status?: "warning" | "ready" | "coming_soon" | "disabled" | undefined;
-    config?: Record<string, unknown> | undefined;
-    displayName?: string | undefined;
-    isDefault?: boolean | undefined;
-}>, {
-    status?: "warning" | "ready" | "coming_soon" | "disabled" | undefined;
-    config?: Record<string, unknown> | undefined;
-    displayName?: string | undefined;
-    isDefault?: boolean | undefined;
-}, {
-    status?: "warning" | "ready" | "coming_soon" | "disabled" | undefined;
-    config?: Record<string, unknown> | undefined;
-    displayName?: string | undefined;
-    isDefault?: boolean | undefined;
-}>;
+}, z.core.$strip>;
 export type UpdateSecretProviderConfig = z.infer<typeof updateSecretProviderConfigSchema>;
 export declare const remoteSecretImportPreviewSchema: z.ZodObject<{
     providerConfigId: z.ZodString;
     query: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     nextToken: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     pageSize: z.ZodOptional<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    providerConfigId: string;
-    query?: string | null | undefined;
-    nextToken?: string | null | undefined;
-    pageSize?: number | undefined;
-}, {
-    providerConfigId: string;
-    query?: string | null | undefined;
-    nextToken?: string | null | undefined;
-    pageSize?: number | undefined;
-}>;
+}, z.core.$strip>;
 export type RemoteSecretImportPreview = z.infer<typeof remoteSecretImportPreviewSchema>;
-export declare const secretProviderConfigDiscoveryPreviewSchema: z.ZodEffects<z.ZodObject<{
-    provider: z.ZodEnum<["local_encrypted", "aws_secrets_manager", "gcp_secret_manager", "vault"]>;
+export declare const secretProviderConfigDiscoveryPreviewSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        local_encrypted: "local_encrypted";
+        aws_secrets_manager: "aws_secrets_manager";
+        gcp_secret_manager: "gcp_secret_manager";
+        vault: "vault";
+    }>;
     config: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     query: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     nextToken: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     pageSize: z.ZodOptional<z.ZodNumber>;
-}, "strip", z.ZodTypeAny, {
-    provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
-    config: Record<string, unknown>;
-    query?: string | null | undefined;
-    nextToken?: string | null | undefined;
-    pageSize?: number | undefined;
-}, {
-    provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
-    config?: Record<string, unknown> | undefined;
-    query?: string | null | undefined;
-    nextToken?: string | null | undefined;
-    pageSize?: number | undefined;
-}>, {
-    provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
-    config: Record<string, unknown>;
-    query?: string | null | undefined;
-    nextToken?: string | null | undefined;
-    pageSize?: number | undefined;
-}, {
-    provider: "local_encrypted" | "aws_secrets_manager" | "gcp_secret_manager" | "vault";
-    config?: Record<string, unknown> | undefined;
-    query?: string | null | undefined;
-    nextToken?: string | null | undefined;
-    pageSize?: number | undefined;
-}>;
+}, z.core.$strip>;
 export type SecretProviderConfigDiscoveryPreview = z.infer<typeof secretProviderConfigDiscoveryPreviewSchema>;
 export declare const remoteSecretImportSelectionSchema: z.ZodObject<{
     externalRef: z.ZodString;
@@ -775,21 +342,7 @@ export declare const remoteSecretImportSelectionSchema: z.ZodObject<{
     description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
     providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
-}, "strip", z.ZodTypeAny, {
-    externalRef: string;
-    description?: string | null | undefined;
-    key?: string | null | undefined;
-    name?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}, {
-    externalRef: string;
-    description?: string | null | undefined;
-    key?: string | null | undefined;
-    name?: string | null | undefined;
-    providerMetadata?: Record<string, unknown> | null | undefined;
-    providerVersionRef?: string | null | undefined;
-}>;
+}, z.core.$strip>;
 export declare const remoteSecretImportSchema: z.ZodObject<{
     providerConfigId: z.ZodString;
     secrets: z.ZodArray<z.ZodObject<{
@@ -799,42 +352,8 @@ export declare const remoteSecretImportSchema: z.ZodObject<{
         description: z.ZodNullable<z.ZodOptional<z.ZodString>>;
         providerVersionRef: z.ZodNullable<z.ZodOptional<z.ZodString>>;
         providerMetadata: z.ZodNullable<z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
-    }, "strip", z.ZodTypeAny, {
-        externalRef: string;
-        description?: string | null | undefined;
-        key?: string | null | undefined;
-        name?: string | null | undefined;
-        providerMetadata?: Record<string, unknown> | null | undefined;
-        providerVersionRef?: string | null | undefined;
-    }, {
-        externalRef: string;
-        description?: string | null | undefined;
-        key?: string | null | undefined;
-        name?: string | null | undefined;
-        providerMetadata?: Record<string, unknown> | null | undefined;
-        providerVersionRef?: string | null | undefined;
-    }>, "many">;
-}, "strip", z.ZodTypeAny, {
-    secrets: {
-        externalRef: string;
-        description?: string | null | undefined;
-        key?: string | null | undefined;
-        name?: string | null | undefined;
-        providerMetadata?: Record<string, unknown> | null | undefined;
-        providerVersionRef?: string | null | undefined;
-    }[];
-    providerConfigId: string;
-}, {
-    secrets: {
-        externalRef: string;
-        description?: string | null | undefined;
-        key?: string | null | undefined;
-        name?: string | null | undefined;
-        providerMetadata?: Record<string, unknown> | null | undefined;
-        providerVersionRef?: string | null | undefined;
-    }[];
-    providerConfigId: string;
-}>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
 export type RemoteSecretImportSelection = z.infer<typeof remoteSecretImportSelectionSchema>;
 export type RemoteSecretImport = z.infer<typeof remoteSecretImportSchema>;
 //# sourceMappingURL=secret.d.ts.map