export interface SecretFileContext {
    rootDid: string;
    approvedResource?: string;
    approvedFingerprint?: string;
}
export interface SecretFileResult {
    success: boolean;
    data?: string;
    error?: string;
    normalizedResource: string;
    resourceFingerprint: string;
}
/**
 * Read a secret file with resource verification (spec §8.3).
 *
 * Flow:
 * 1. canonicalize(requested_path) -> normalized_resource
 * 2. Compute fingerprint
 * 3. Compare with approved resource (from VC/grant)
 * 4. If mismatch -> deny
 * 5. If match -> read file
 */
export declare function readSecretFile(filePath: string, context: SecretFileContext): SecretFileResult;
/**
 * Write content to a secret file with resource verification (spec §8.3).
 */
export declare function writeSecretFile(filePath: string, content: string, context: SecretFileContext): SecretFileResult;
//# sourceMappingURL=secret-file.d.ts.map