import type { ArkmeSecureValueStore } from '../keychain-store.js';
/**
 * Stores only the local command-ledger encryption key and replay cursor.
 * These values protect local recovery data; they are not remote authority.
 */
export declare class DshRemoteRuntimeSecretBroker {
    private readonly store;
    private readonly inFlight;
    private readonly cursorWrites;
    constructor(store: ArkmeSecureValueStore);
    ledgerKey(accountId: string): Promise<Buffer>;
    runtimeCursor(input: {
        accountId: string;
        runtimeRef: string;
        channelRef: string;
    }): Promise<number>;
    putRuntimeCursor(input: {
        accountId: string;
        runtimeRef: string;
        channelRef: string;
        lastTransportSequence: number;
        reset?: boolean;
    }): Promise<void>;
    private secrets;
    private loadOrCreate;
    private parseCursor;
    private cursorKey;
}
//# sourceMappingURL=runtime-secret-broker.d.ts.map