import type { Host } from "../host/host.js";
/**
 * Store a secret in the system keyring.
 * macOS: Keychain via `security` CLI
 * Linux: Secret Service via `secret-tool` CLI
 */
export declare function _setSecret(key: string, value: string, service?: string): Promise<void>;
/** `_setSecret` for a caller that has the host. */
export declare function setSecret(host: Host, key: string, value: string, service?: string): Promise<void>;
/**
 * Retrieve a secret from the system keyring.
 * Returns null if the secret doesn't exist.
 *
 * `timeoutMs` bounds the lookup: a locked keychain can pop a prompt and a
 * broken Secret Service backend can hang, and a caller on a request path
 * cannot wait on either. When the child is killed at the deadline the
 * lookup reads as a miss. Unset means no bound, the historical behavior.
 */
export declare function _getSecret(key: string, service?: string, timeoutMs?: number): Promise<string | null>;
/** `_getSecret` for a caller that has the host. */
export declare function getSecret(host: Host, key: string, service?: string, timeoutMs?: number): Promise<string | null>;
/**
 * Delete a secret from the system keyring.
 * Returns true if the secret was deleted, false if it didn't exist.
 */
export declare function _deleteSecret(key: string, service?: string): Promise<boolean>;
/** `_deleteSecret` for a caller that has the host. */
export declare function deleteSecret(host: Host, key: string, service?: string): Promise<boolean>;
/**
 * Check if the system keyring is available on this platform.
 */
export declare function _isKeyringAvailable(): Promise<boolean>;
/** `_isKeyringAvailable` for a caller that has the host. */
export declare function isKeyringAvailable(host: Host): Promise<boolean>;