/**
 * Resolvers for credentials stored under more than one key name. The names,
 * and why they exist, are in `secrets/key-aliases.ts`.
 */
import { type ResolvedSecretDetail } from "./credential-provider.js";
export { GEMINI_API_KEY, LEGACY_GEMINI_API_KEY, canonicalSecretKey, secretKeyNames, } from "../secrets/key-aliases.js";
export interface ResolvedAliasedSecret extends ResolvedSecretDetail {
    /** The stored name that answered. Absent when nothing did. */
    key?: string;
}
/**
 * `resolveSecretDetailed` across every name of the credential. The best
 * scope wins regardless of name; at the same scope the canonical name wins.
 */
export declare function resolveSecretWithAliasesDetailed(key: string, options?: {
    skipUserScope?: boolean;
}): Promise<ResolvedAliasedSecret>;
/**
 * `resolveSecret` across every name of the credential: the value, or null
 * when no name has one. Throws `CredentialStoreUnavailableError` when the
 * store could not be read, exactly like `resolveSecret`.
 */
export declare function resolveSecretWithAliases(key: string): Promise<string | null>;
/** The Gemini key under either name, or null. Throws when the store is unreadable. */
export declare function resolveGeminiApiKey(): Promise<string | null>;
/** {@link resolveGeminiApiKey} with the source and the name that answered. */
export declare function resolveGeminiApiKeyDetailed(options?: {
    skipUserScope?: boolean;
}): Promise<ResolvedAliasedSecret>;
/** `readDeployCredentialEnv` across both Gemini names, canonical first. */
export declare function readGeminiDeployCredentialEnv(): string | undefined;