export type SecureStoreBackend = 'macos-keychain' | 'linux-secret-tool' | 'windows-dpapi';
export interface SecureStoreReference {
    readonly backend: SecureStoreBackend;
    readonly account: string;
}
/**
 * Persists a secret in the platform credential store.
 * Returns a reference on success, null if the platform has no supported
 * credential store or the required CLI tool is missing (ENOENT).
 * Throws on all other failures (locked keychain, permission denied, etc.).
 */
export declare function saveSecretInSecureStore(params: {
    configDir: string;
    profileName: string;
    secret: string;
}): SecureStoreReference | null;
/**
 * Reads a secret from the platform credential store.
 * Returns the plaintext secret on success, null if the entry is missing,
 * the platform tool is unavailable, or the backend is unrecognized.
 * Throws on unexpected failures (locked keychain, corrupted data, etc.).
 */
export declare function readSecretFromSecureStore(params: {
    configDir: string;
    ref: SecureStoreReference;
}): string | null;
/**
 * Removes a secret from the platform credential store.
 * No-ops silently if the entry does not exist or the tool is missing.
 * Throws on unexpected failures.
 */
export declare function deleteSecretFromSecureStore(params: {
    configDir: string;
    ref: SecureStoreReference;
}): void;
//# sourceMappingURL=secure-store.d.ts.map