import type { PluginRuntimeConfig } from "./types.js";
/** Normalizes persisted plugin runtime config across legacy lockfile shapes. */
export declare function normalizePluginRuntimeConfig(config: Partial<PluginRuntimeConfig>): PluginRuntimeConfig;
/**
 * Write a plugin runtime lockfile readable only by its owner.
 *
 * The lockfile holds plugin settings, and a setting a plugin marks `secret` is
 * a credential the user asked to be masked. The config is staged in a fresh
 * 0600 sibling and renamed over the lockfile, so the credential never lands in
 * an older, wider-mode inode another account may already hold open.
 */
export declare function writePluginRuntimeConfig(lockPath: string, config: PluginRuntimeConfig): Promise<void>;