import { type CustomProviderStores } from '../domain/pi-providers/index.js';
export interface ProviderCliResult {
    exitCode: number;
    stdout: string;
    stderr: string;
}
export interface ProviderCliOptions {
    /** Reads the key when `--key -` is used. Injected so tests need no real stdin. */
    readSecret?: () => string;
}
export declare function getProviderHelp(): string;
/**
 * `cortex auth provider <list|add|remove>`. `add` is an upsert, so retrying it is safe; `remove`
 * takes `--dry-run` because it deletes a gateway route the running gateway is serving.
 */
export declare function runProviderCli(args: string[], stores: CustomProviderStores, options?: ProviderCliOptions): ProviderCliResult;