type CmTokenBundle = {
    accessToken?: string;
    refreshToken?: string;
    refreshTokenParameters?: Record<string, string>;
    expiresIn?: number | null;
    lastUpdated?: string | null;
};
export declare const getDeployToken: (envName: string) => Promise<string | undefined>;
export declare const setDeployToken: (envName: string, token: string) => Promise<boolean>;
export declare const clearDeployToken: (envName: string) => Promise<boolean>;
export declare const getPublishingToken: (envName: string) => Promise<string | undefined>;
export declare const setPublishingToken: (envName: string, token: string) => Promise<boolean>;
export declare const clearPublishingToken: (envName: string) => Promise<boolean>;
/**
 * The cached Content Operations Brief API token, keyed by Sitecore
 * `organizationId`. The Brief API is org-scoped — one minted token
 * covers every env profile in the organization — so the cache key is
 * the org id, not an env-profile name.
 */
export declare const getBriefToken: (orgId: string) => Promise<string | undefined>;
export declare const setBriefToken: (orgId: string, token: string) => Promise<boolean>;
export declare const clearBriefToken: (orgId: string) => Promise<boolean>;
export declare const getCampaignToken: (envName: string) => Promise<string | undefined>;
export declare const setCampaignToken: (envName: string, token: string) => Promise<boolean>;
export declare const clearCampaignToken: (envName: string) => Promise<boolean>;
/**
 * The Agentic Studio browser session for an environment, stored as a
 * JSON-serialized `AgentsCredential` (see `src/agents/session/types.ts`).
 * Unlike the other entries here this is not an OAuth token — Agentic
 * Studio has no machine-credential path yet, so scai captures a browser
 * session cookie instead. Temporary; tracked in that file.
 */
export declare const getAgentsCredential: (envName: string) => Promise<string | undefined>;
export declare const setAgentsCredential: (envName: string, credential: string) => Promise<boolean>;
export declare const clearAgentsCredential: (envName: string) => Promise<boolean>;
export declare const getCmTokens: (envName: string) => Promise<CmTokenBundle | undefined>;
export declare const setCmTokens: (envName: string, tokens: CmTokenBundle) => Promise<boolean>;
export declare const clearCmTokens: (envName: string) => Promise<boolean>;
/**
 * The **secret** of the scai-minted env-scoped automation client for an
 * environment. Stored under a distinct `cm-client:` prefix — separate
 * from the `cm:` token bundle (which holds short-lived access/refresh
 * tokens).
 *
 * Per `docs/credentials.md` the keychain holds only secrets: the
 * client's non-secret metadata (`clientId`, `name`, `mintedAt`) lives in
 * the env profile's `automationClient` block in `sitecoreai.cli.json`.
 * `scai setup client create` writes the metadata to the config and the
 * secret here.
 */
export declare const getCmClientSecret: (envName: string) => Promise<string | undefined>;
export declare const setCmClientSecret: (envName: string, secret: string) => Promise<boolean>;
export declare const clearCmClientSecret: (envName: string) => Promise<boolean>;
/**
 * The **secret** of the scai-minted **org-level** automation client,
 * keyed by Sitecore `organizationId`. This is the organization-scoped
 * client `scai setup client create --org` provisions (the Deploy clients
 * API `deploy` client type); one per org, shared by every env profile in
 * that org.
 *
 * Per `docs/credentials.md` the keychain holds only secrets: the
 * client's non-secret metadata (`clientId`, `name`, `mintedAt`) lives in
 * the `orgClients[orgId]` block in `sitecoreai.cli.json`.
 */
export declare const getOrgClientSecret: (orgId: string) => Promise<string | undefined>;
export declare const setOrgClientSecret: (orgId: string, secret: string) => Promise<boolean>;
export declare const clearOrgClientSecret: (orgId: string) => Promise<boolean>;
/**
 * Brand credentials are keyed by Sitecore `organizationId`, not by
 * env profile. The AI APIs key is one-org-per-credential (Cloud Portal
 * → Stream → Admin → AI APIs keys), so every env profile in the same
 * org shares one credential. We store the client secret and the cached
 * access token under separate entries to keep their lifecycles
 * independent (token rotates ~daily; secret is long-lived).
 */
export declare const getBrandClientSecret: (orgId: string) => Promise<string | undefined>;
export declare const setBrandClientSecret: (orgId: string, secret: string) => Promise<boolean>;
export declare const clearBrandClientSecret: (orgId: string) => Promise<boolean>;
export declare const getBrandToken: (orgId: string) => Promise<string | undefined>;
export declare const setBrandToken: (orgId: string, token: string) => Promise<boolean>;
export declare const clearBrandToken: (orgId: string) => Promise<boolean>;
export {};