import type { ResolvedSecret } from '@struktoai/mirage-core/secrets/types';
import type { AWSSMConfig } from './config.ts';
/**
 * Shape one `SecretString` into secret fields.
 *
 * A JSON object with all-string values is the fields as-is (the common
 * Secrets Manager layout); anything else -- a plain string, a JSON
 * list, an object with non-string values -- is the whole text under
 * `value`.
 */
export declare function fieldsFromSecretString(text: string): Record<string, string>;
/**
 * Fetch one secret from AWS Secrets Manager.
 *
 * `ref` is the `SecretId` -- a secret name or full ARN. The SDK loads
 * on first use (the lazy-module trick Python spells as an import
 * path), and an absent explicit credential falls to the SDK's default
 * provider chain, so an empty config reads the ambient AWS settings.
 * A binary secret is refused: v1 reads `SecretString` only.
 */
export declare function fetchAwsSm(config: AWSSMConfig, ref: string): Promise<ResolvedSecret>;
//# sourceMappingURL=aws.d.ts.map