import type { KvService } from '@redocly/config';
import type { UpstreamAuthScheme } from './upstream-auth-scheme.js';
export declare const ELICITATION_TTL_MS: number;
export type StoredSecret = {
    header: string;
    value: string;
    savedAt?: number;
};
export type UpstreamSecrets = Record<string, Record<string, StoredSecret>>;
export type ElicitationScheme = {
    name: string;
    label?: string;
    auth: UpstreamAuthScheme;
    hasExistingSecret: boolean;
    operations?: string[];
};
export type ElicitationTarget = {
    subject: string;
    api: string;
    name: string;
    scheme: string;
    schemeLabel?: string;
    auth: UpstreamAuthScheme;
    hasExistingSecret?: boolean;
    schemes?: ElicitationScheme[];
};
export declare class SecretStore {
    #private;
    setSecret(kv: KvService, subject: string, api: string, scheme: string, secret: StoredSecret): Promise<void>;
    getSecretsForSubject(kv: KvService, subject: string): Promise<UpstreamSecrets>;
    hasSecret(kv: KvService, subject: string, api: string, scheme: string): Promise<boolean>;
    deleteSecret(kv: KvService, subject: string, api: string, scheme: string): Promise<void>;
    deleteSubject(kv: KvService, subject: string): Promise<void>;
    createElicitation(kv: KvService, target: ElicitationTarget): Promise<string>;
    peekElicitation(kv: KvService, token: string): Promise<ElicitationTarget | undefined>;
    consumeElicitation(kv: KvService, token: string): Promise<ElicitationTarget | undefined>;
}
export declare const secretStore: SecretStore;
//# sourceMappingURL=secret-store.d.ts.map