import { type CommandSpec } from "../internals/plan.js";
/** Upsert `[global] cert=<pem>` into a pip config, leaving the truststore hint. */
export declare function pipConfig(existing: string, pemPath: string): string;
/** Upsert cargo's `[http] cainfo = "<pem>"` and `[net] git-fetch-with-cli = true`. */
export declare function cargoConfig(existing: string, pemPath: string): string;
/** Upsert git's `[http] sslCAInfo = <pem>` without disturbing other git config. */
export declare function gitConfig(existing: string, pemPath: string): string;
/** Upsert Gradle JVM SSL properties pointing at the generated user truststore. */
export declare function gradleProperties(existing: string, trustStorePath: string): string;
/** Upsert a Maven rc block that appends the generated truststore to MAVEN_OPTS. */
export declare function mavenRc(existing: string, trustStorePath: string, platform?: "windows" | "darwin" | "linux"): string;
/**
 * Upsert `ssl_verify: <pem>` into a YAML `.condarc`, preserving every other line.
 * conda/Anaconda verifies TLS through this key (not the shell env), so writing it
 * applies the corporate trust the same way `.npmrc`/pip/cargo do — no `conda` run.
 */
export declare function condarcConfig(existing: string, pemPath: string): string;
export declare const command: CommandSpec;