/**
 * Manages a Google Calendar OAuth token in a 0600 sidecar file at
 * .bober/calendar/google-token.json.
 *
 * readToken() returns undefined when the sidecar is absent or corrupt —
 * fail-closed so the connector refuses without a token rather than crashing.
 *
 * writeToken() persists the token with mode 0600 (mirrors whoop-token.ts:84).
 *
 * NOTE: The OAuth acquire handshake is out of scope — the token is provisioned
 * out-of-band into the sidecar. Hosted OAuth is unfit for unattended/cron runs;
 * use the local .ics fallback (`bober calendar plan --export-ics`) for scheduled use.
 *
 * NO network imports in this file; all HTTP lives outside this module.
 *
 * bober: env-var / file sidecar; swap for OS keychain if per-user isolation
 *        is needed across multiple OS accounts (deferred).
 */
export declare class CalendarTokenStore {
    private readonly projectRoot;
    constructor(projectRoot: string);
    private path;
    /**
     * Returns the stored token, or undefined when the sidecar is absent or corrupt.
     * Fail-closed: any read/parse error => undefined (not yet authorised).
     */
    readToken(): Promise<string | undefined>;
    /**
     * Persist token at .bober/calendar/google-token.json with mode 0600.
     * Directory is created if absent (mirrors whoop-token.ts:80-84).
     */
    writeToken(token: string): Promise<void>;
}
//# sourceMappingURL=calendar-token.d.ts.map