import { SecretValue as SecretValue$1 } from "../secret-value.js";
import { SecretMetadata, SecretValue, SecretsSetOptions, SecretsStore } from "@graphorin/core/contracts";
import { SessionScope } from "@graphorin/core/types";

//#region src/secrets/stores/env.d.ts

/**
 * Options for `EnvSecretsStore`.
 *
 * @stable
 */
interface EnvSecretsStoreOptions {
  /**
   * Optional uppercase prefix applied to keys so multiple Graphorin
   * deployments can share a process. Defaults to no prefix.
   */
  readonly prefix?: string;
  /**
   * Whether `set(...)` is allowed to mutate `process.env`. Defaults to
   * `false` - the env store is intended for read-only chains where
   * secrets are baked into the host environment.
   */
  readonly allowMutation?: boolean;
}
/**
 * `SecretsStore` backed by `process.env`. Read-only by default -
 * enabling `allowMutation: true` keeps the API workable for tests but
 * still emits a single `console.warn` per mutation.
 *
 * @stable
 */
declare class EnvSecretsStore implements SecretsStore {
  #private;
  readonly kind: "env";
  constructor(opts?: EnvSecretsStoreOptions);
  get(key: string, _scope?: SessionScope): Promise<SecretValue$1 | null>;
  require(key: string, _scope?: SessionScope): Promise<SecretValue$1>;
  set(key: string, value: string | SecretValue, _opts?: SecretsSetOptions): Promise<void>;
  delete(key: string, _scope?: SessionScope): Promise<void>;
  list(_scope?: SessionScope): Promise<ReadonlyArray<SecretMetadata>>;
}
//#endregion
export { EnvSecretsStore, EnvSecretsStoreOptions };
//# sourceMappingURL=env.d.ts.map