export interface RefreshGhAuthResult {
    ok: boolean;
    error?: string;
}
/**
 * Extract the GitHub token from a credential value based on its type.
 *
 * - `github-app`: JSON-encoded `{ token: string, ... }` — extracts `.token`
 * - `github-pat`: raw token string
 * - Other types: returns `null`
 */
export declare function extractGhToken(type: string, value: string): string | null;
/**
 * Refresh the `gh` CLI auth state by piping a token via stdin to
 * `gh auth login --with-token --hostname github.com`.
 *
 * Token is passed via stdin (never argv) to avoid leaking in `/proc/<pid>/cmdline`.
 * Non-fatal: caller should log on failure but not fail the credential write.
 */
export declare function refreshGhAuth(token: string): Promise<RefreshGhAuthResult>;
//# sourceMappingURL=gh-auth-refresh.d.ts.map