import { SecretResolver } from "@graphorin/core/contracts";

//#region src/secrets/resolvers/file.d.ts

/**
 * Resolver for the `file:` scheme. Reads a plaintext file and returns
 * the trimmed content as a `SecretValue`.
 *
 * The resolver enforces `chmod 0600` on POSIX systems and emits a
 * single console warning per process when the file is found at a wider
 * mode (heuristic: any group/other read or write bits set). Set
 * `?warnOnPermissions=0` in the URI to opt out - typical when reading
 * Docker `*_FILE` mounts that intentionally use a tmpfs with a wider
 * mode.
 *
 * @stable
 */
declare const fileResolver: SecretResolver;
/**
 * Tests reset the WARN-once registry to keep fixtures isolated.
 *
 * @experimental
 */
declare function _resetFileResolverWarningsForTesting(): void;
//#endregion
export { _resetFileResolverWarningsForTesting, fileResolver };
//# sourceMappingURL=file.d.ts.map