/**
 * Weavetab — tools/type_secret.ts
 * browser_type_secret: Securely injects a stored credential into a page input.
 *
 * Security model:
 *   - Secret value is resolved from JsonSecretStore (never process.env).
 *   - Domain enforcement: hard-fails if the current tab's hostname is not in the
 *     key's allowed domain list. This is the primary prompt-injection defense.
 *   - Value travels in-process only: secretStore → CDP Input.insertText.
 *     It is never returned in any tool_result, never logged, never trailed.
 *   - The DOM node is marked data-wt-secret so all subsequent read tools
 *     (browser_map, browser_scrape, browser_snapshot, delta) redact it.
 *   - Trail log records: key name + domain only, never value.
 *
 * Weavetab by fy2ne
 */
import CDP from "chrome-remote-interface";
import type { Config } from "../config/loader.js";
export declare function weaveTypeSecret(session: CDP.Client, args: {
    id?: string;
    target?: string;
    envKey: string;
}, config: Config): Promise<any>;