import { RouteKitFailure } from "@velum-labs/routekit-runtime/effect";
import type { SecretStoreService } from "@velum-labs/routekit-runtime/secret-store";
import { Effect } from "effect";
import { type LegacySecretImportPlatform, LegacySecretImportRequiresLoginError } from "../adapters/darwin-legacy-secret-importer.js";
export type RemoteCredentialOptions = {
    home?: string;
    secretStore?: SecretStoreService;
    legacyImportPlatform?: LegacySecretImportPlatform;
};
export declare class RemoteCredentialRepository {
    private readonly options;
    constructor(options?: RemoteCredentialOptions);
    path(name: string): string;
    private store;
    private key;
    private keyEffect;
    private static storageError;
    writeEffect(name: string, token: string): Effect.Effect<undefined, RouteKitFailure | LegacySecretImportRequiresLoginError, never>;
    readEffect(name: string): Effect.Effect<string | undefined, RouteKitFailure | LegacySecretImportRequiresLoginError, never>;
    deleteEffect(name: string): Effect.Effect<void, RouteKitFailure | LegacySecretImportRequiresLoginError, never>;
    write(name: string, token: string): Promise<void>;
    read(name: string): Promise<string | undefined>;
    delete(name: string): Promise<void>;
    /**
     * Copy one already-enrolled remote token into an environment entry owned by
     * a newly spawned local daemon. Callers must not print the returned value.
     */
    exportToEnvironment(name: string): Promise<string | undefined>;
}