/**
 * Shared scaffolding for Fly SecretKey HTTP bindings.
 *
 * NOT exported from `index.ts`.
 */
import * as Effect from "effect/Effect";
import { FlyKmsError } from "./Errors.ts";
import type { SecretAuth } from "./SecretHttp.ts";
import type { SecretKey } from "./SecretKey.ts";
export declare const bytesToBase64: (bytes: Uint8Array | ArrayLike<number>) => string;
export declare const base64ToBytes: (value: string | undefined) => Uint8Array;
/**
 * PetSem crypto over the Machine unix socket. Fly expects base64 strings,
 * not integer arrays. Org tokens are Forbidden; `/.fly/api` is the
 * machine identity.
 */
export declare const flyKmsPost: (appName: string, secretName: string, op: "encrypt" | "decrypt" | "sign" | "verify", body: Record<string, unknown>) => Effect.Effect<Record<string, unknown>, FlyKmsError>;
export declare const makeHttpSecretKeyBinding: <Client>(options: {
    makeClient: (auth: SecretAuth, appName: Effect.Effect<string>, secretName: Effect.Effect<string>) => Client;
}) => Effect.Effect<(resource: SecretKey) => Effect.Effect<Client, never, never>, never, import("@distilled.cloud/fly-io").Credentials | import("effect/unstable/http/HttpClient").HttpClient>;
//# sourceMappingURL=SecretKeyHttp.d.ts.map