import type { OfficeAddress } from "../types.js";
import type { SandboxConfig, SandboxCredentialCapabilities } from "../sandbox/types.js";
import type { PlatformTrustModel } from "../types.js";
export declare function normalizeSharedVaultName(name: string): string | undefined;
export declare function sharedVaultKey(name: string): string | undefined;
import type { ResolvedVault, VaultManager } from "./types.js";
export declare function parseEnvFile(content: string): Record<string, string>;
export declare class FileVaultManager implements VaultManager {
    private readonly vaultsDir;
    private readonly mountTargetsDir;
    constructor(stateDir: string);
    isEnabled(): boolean;
    hasEntry(key: string): boolean;
    listSharedVaults(): string[];
    deleteSharedVault(name: string): boolean;
    copySharedVaultTo(name: string, targetKey: string): {
        filesCopied: number;
        envKeysCopied: number;
    };
    resolve(userId: string): ResolvedVault | undefined;
    list(): ResolvedVault[];
    upsertEnv(key: string, env: Record<string, string>): void;
    deleteEnvKey(key: string, envKey: string): boolean;
    upsertFile(key: string, relativePath: string, content: string, targetPath?: string): void;
    private buildResolved;
    private mountTargetsPath;
}
export declare const GOOGLE_VAULT_CREDENTIAL_FILES: Readonly<{
    workspaceCli: Readonly<{
        relativePath: "gws.json";
        targetPath: string;
    }>;
    cloudSdk: Readonly<{
        relativePath: "gcloud-adc.json";
        targetPath: string;
    }>;
}>;
export declare function defaultVaultTargetPath(relativePath: string): string;
export declare function allowsAmbientDefaultSharedVault(options: {
    trustModel?: PlatformTrustModel;
    sandboxType: SandboxConfig["type"];
}): boolean;
import type { VaultInjection } from "./types.js";
export declare function resolveVaultInjection(options: {
    vault: ResolvedVault | undefined;
    capabilities: SandboxCredentialCapabilities;
    sandboxType: SandboxConfig["type"];
    address: OfficeAddress;
}): VaultInjection;
export declare const disabledVaultManager: VaultManager;
//# sourceMappingURL=index.d.ts.map