export type CredentialManagerErrorCode = "ambiguous_project_binding" | "invalid_description" | "invalid_profile" | "invalid_project_identity" | "invalid_provider_record" | "invalid_session_key" | "owner_setup_required" | "profile_exists" | "profile_not_found" | "project_not_bound";
export declare class CredentialManagerError extends Error {
    readonly code: CredentialManagerErrorCode;
    constructor(code: CredentialManagerErrorCode, message: string);
}
export type CredentialStorageErrorCode = "malformed_provider_data" | "not_connected" | "profile_not_found" | "provider_command_failed" | "provider_unavailable";
export declare class CredentialStorageError extends Error {
    readonly code: CredentialStorageErrorCode;
    constructor(code: CredentialStorageErrorCode, message: string);
}
export interface CredentialProjectIdentity {
    key: string;
    root: string;
    label: string;
    portable: boolean;
}
export type CredentialProjectResolver = (cwd: string) => Promise<CredentialProjectIdentity>;
export interface CredentialVariable {
    name: string;
    value: string;
}
export interface CredentialProfileRecord {
    profile: string;
    description?: string;
    variables: CredentialVariable[];
    projectKeys: string[];
}
export interface StoredCredentialProfileSummary {
    profile: string;
    description?: string;
    variableNames: string[];
    projectKeys: string[];
}
export type CredentialStorageProvider = "bitwarden_password_manager" | "bitwarden_secrets_manager";
export interface MachineCredentialSession {
    provider: CredentialStorageProvider;
    sessionKey: string;
}
export type MachineCredentialSessionResolver = (signal?: AbortSignal) => Promise<MachineCredentialSession | undefined>;
export interface CredentialProfileStorage {
    connect(sessionKey: string, signal?: AbortSignal, provider?: CredentialStorageProvider): Promise<void>;
    refresh?(signal?: AbortSignal): Promise<void>;
    listProfiles(signal?: AbortSignal): Promise<StoredCredentialProfileSummary[]>;
    readProfile(profile: string, signal?: AbortSignal): Promise<CredentialProfileRecord>;
    writeProfile(record: CredentialProfileRecord, signal?: AbortSignal): Promise<void>;
    deleteProfile(profile: string, signal?: AbortSignal): Promise<void>;
    lock(): void;
}
export interface CredentialProfileSummary {
    profile: string;
    description?: string;
    variableNames: string[];
    boundToCurrentProject: boolean;
}
export interface CredentialActivationResult {
    status: "activated";
    profile: string;
    variableNames: string[];
    project: string;
}
export interface CredentialMutationResult {
    status: "bound" | "removed" | "stored";
    profile: string;
    variableNames: string[];
    project?: string;
    portable?: boolean;
}
export interface CredentialConnectionStatus {
    connected: boolean;
    sessionAvailable: boolean;
}
export interface CredentialManagerOptions {
    storage: CredentialProfileStorage;
    resolveProject: CredentialProjectResolver;
    initialSessionKey?: string;
    resolveMachineSession?: MachineCredentialSessionResolver;
    onEnvironmentChanged?: () => void;
}
export declare function validateCredentialProfileName(profile: string): string;
export declare function validateCredentialDescription(description: string | undefined): string | undefined;
export declare function validateCredentialProfileRecord(record: CredentialProfileRecord): CredentialProfileRecord;
export declare class CredentialManager {
    private readonly storage;
    private readonly resolveProject;
    private readonly resolveMachineSession;
    private readonly onEnvironmentChanged;
    private readonly activeEnvironments;
    private readonly sensitiveValues;
    private pendingSessionKey;
    private pendingStorageProvider;
    private sessionKeyForRedaction;
    private connectionPromise;
    private connectionGeneration;
    private connected;
    constructor(options: CredentialManagerOptions);
    get status(): CredentialConnectionStatus;
    connect(sessionKey: string, signal?: AbortSignal): Promise<void>;
    ensureAvailable(signal?: AbortSignal): Promise<CredentialConnectionStatus>;
    listForProject(cwd: string, signal?: AbortSignal): Promise<CredentialProfileSummary[]>;
    activateForProject(cwd: string, profile?: string, signal?: AbortSignal): Promise<CredentialActivationResult>;
    storeForProject(cwd: string, input: {
        profile: string;
        description?: string;
        dotenv: string;
    }, signal?: AbortSignal): Promise<CredentialMutationResult>;
    prepareForMigration(cwd: string, input: {
        profile: string;
        replaceExisting?: boolean;
    }, signal?: AbortSignal): Promise<void>;
    storeVariablesForProject(cwd: string, input: {
        profile: string;
        description?: string;
        variables: CredentialVariable[];
        replaceExisting?: boolean;
    }, signal?: AbortSignal): Promise<CredentialMutationResult>;
    bindProfileToProject(cwd: string, profile: string, signal?: AbortSignal): Promise<CredentialMutationResult>;
    removeProfile(profile: string, signal?: AbortSignal): Promise<CredentialMutationResult>;
    getEnvironmentForCwd(cwd: string): Record<string, string> | undefined;
    private findActiveEnvironment;
    hasEnvironmentForCwd(cwd: string): boolean;
    redactSensitiveText(text: string): string;
    lock(): void;
    private ensureConnected;
    private assertAccessGeneration;
    private refreshProjectProfiles;
    private activate;
    private rebuildSensitiveValues;
}
//# sourceMappingURL=credential-manager.d.ts.map