import type { Baseline, BaselineStorage } from "./baseline.js";
export declare class HttpBaselineStorage implements BaselineStorage {
    readonly endpointUrl: string;
    readonly authToken: string;
    /**
     * Optional Vercel Deployment Protection bypass secret, sent as the
     * `x-vercel-protection-bypass` header so calls reach an orchestrator
     * endpoint behind Vercel's auth wall. Omitted when empty.
     */
    private readonly protectionBypass?;
    constructor(endpointUrl: string, authToken: string, 
    /**
     * Optional Vercel Deployment Protection bypass secret, sent as the
     * `x-vercel-protection-bypass` header so calls reach an orchestrator
     * endpoint behind Vercel's auth wall. Omitted when empty.
     */
    protectionBypass?: string | undefined);
    private buildUrl;
    private headers;
    locator(kind: string, envName: string, recipeHandle: string): string;
    load<TPayload = unknown>(kind: string, envName: string, recipeHandle: string): Promise<Baseline<TPayload> | null>;
    write<TPayload = unknown>(kind: string, envName: string, recipeHandle: string, baseline: Baseline<TPayload>): Promise<string>;
}
/**
 * Env-var keys the orchestrator sets before spawning scai. Single
 * source of truth shared by every CLI verb that participates in
 * three-way merge.
 */
export declare const SYNC_BASELINE_ENV_VARS: {
    readonly ENDPOINT_URL: "SYNC_BASELINE_ENDPOINT_URL";
    readonly AUTH_TOKEN: "SYNC_BASELINE_AUTH_TOKEN";
    /** Optional Vercel Deployment Protection bypass secret. */
    readonly PROTECTION_BYPASS: "SYNC_BASELINE_PROTECTION_BYPASS";
};
/**
 * Read env vars and return an `HttpBaselineStorage` instance when
 * both are set, `undefined` otherwise. CLI verbs use this to inject
 * the remote storage when the orchestrator drives them; operator
 * invocations from a terminal fall through to local file storage.
 *
 * The protection-bypass value is optional: an explicit
 * `SYNC_BASELINE_PROTECTION_BYPASS` wins; otherwise the standard Vercel
 * `VERCEL_AUTOMATION_BYPASS_SECRET` (inherited from the orchestrator's
 * function env) is used so a protected preview endpoint works with no
 * extra orchestrator config. Empty/unset → no bypass header.
 */
export declare const resolveHttpBaselineStorageFromEnv: () => HttpBaselineStorage | undefined;