export interface AppTenantAuthArgs {
    tenant: string;
    app: string;
    services: string[];
    roles?: string[];
}
export interface ProvisionedAuth {
    orgId: string;
    projectId: string;
    created: string[];
}
export declare function authSecretPath(tenant: string, app: string, service: string): string;
export declare function registerLocalApp(args: AppTenantAuthArgs & {
    ports?: Record<string, number>;
    links?: string[];
    version?: string;
    kinds?: Record<string, string>;
}): Promise<string>;
export declare function reconcileRegistryFromZitadel(): Promise<{
    tenants: string[];
    apps: number;
}>;
export declare function ensureSignInApp(args: {
    tenant: string;
    app: string;
    service: string;
    baseUrl: string;
}): Promise<void>;
export declare function ensureAppTenantAuth(args: AppTenantAuthArgs): Promise<ProvisionedAuth>;