/**
 * Admin API routes for secret backend management.
 *
 * Provides CRUD, connectivity testing, and sync endpoints for managing
 * secret backends (PG, Vault) through the admin API. Backend credentials
 * are stored encrypted at rest and never exposed in API responses.
 *
 * All routes are mounted under /api/v1/admin/backends and protected by
 * the admin auth middleware in admin.ts.
 */
import { Hono } from 'hono';
import type { BackendSyncManager } from '@kici-dev/engine';
import type { BackendRegistry } from '../secrets/backend-registry.js';
import type { BackendHealthChecker } from '../secrets/backend-health.js';
import type { Role } from '../secrets/rbac.js';
type AdminBackendsEnv = {
    Variables: {
        role: Role;
        userId: string;
        routingKey: string | null;
    };
};
interface BackendRouteDeps {
    registry: BackendRegistry;
    healthChecker: BackendHealthChecker;
    syncManager?: BackendSyncManager;
}
/**
 * Create admin API routes for secret backend management.
 *
 * @param deps - Backend route dependencies (registry, health checker, sync manager)
 * @returns Hono app with backend routes
 */
export declare function createBackendRoutes(deps: BackendRouteDeps): Hono<AdminBackendsEnv>;
export {};
//# sourceMappingURL=admin-backends.d.ts.map