import type { CredentialRef } from "@yanlinglabs/winter-agent-sdk";
export interface KeychainSeam {
    /**
     * The credential material for `ref`, or `undefined` when the host has none for it.
     *
     * `undefined` is a normal answer, not an error: the selector's own `CredentialPresence` is what
     * decides whether a route is available, and a missing credential at spawn is a typed refusal
     * (WS-10's `child-provider-unavailable`), never a throw from the middle of a launch.
     */
    read(ref: CredentialRef): Promise<string | undefined>;
}