/**
 * Secure-store DI Providers (#470)
 *
 * Registers the per-request {@link SecureStoreAccessor} (`this.secureStore`).
 * The backend is a GLOBAL singleton owned by LocalPrimaryAuth; the accessor is
 * CONTEXT-scoped because it must resolve the CURRENT request's namespace (the
 * authenticated `sub` for `user` scope, the transport `sessionId` for `session`
 * scope) before calling the backend.
 */
import { type SecureStoreBackend, type SecureStoreScope } from '@frontmcp/auth';
import { type Token } from '@frontmcp/di';
import { type ProviderType } from '../../common';
import { type FrontMcpContext } from '../../context/frontmcp-context';
/**
 * GLOBAL DI token for the secure-store backend singleton. Provided by
 * LocalPrimaryAuth once the backing is initialized.
 */
export declare const SECURE_STORE_BACKEND: Token<SecureStoreBackend>;
/**
 * Resolve the transport session id for the current request, or undefined when
 * there is no session. Used for `session`-scoped secrets.
 */
export declare function resolveRequestSessionId(ctx: FrontMcpContext): string | undefined;
/**
 * Build the DI providers that back `this.secureStore`.
 *
 * @param backend - the GLOBAL secure-store backend singleton.
 * @param scope - the configured namespace scope (`user` | `session` | `global`).
 * @param ttlMs - optional default TTL applied to writes.
 */
export declare function createSecureStoreProviders(opts: {
    backend: SecureStoreBackend;
    scope: SecureStoreScope;
    ttlMs?: number;
}): ProviderType[];
//# sourceMappingURL=secure-store.providers.d.ts.map