/**
 * Returns the origin-specific path used for the current CLI session.
 *
 * @param appOrigin - Application origin whose session path is requested.
 */
export declare function getSessionPath(appOrigin?: string): string;
/** Reads and validates the saved CLI session token for the current origin. */
export declare function loadSavedTokenSync(): string | null;
/**
 * Persists the session token for the current origin.
 *
 * @param token - Bearer token to save.
 */
export declare function saveTokenSync(token: string): void;
/**
 * Persists a newly authenticated token without inheriting another login's data.
 *
 * @param token - Bearer token returned by an explicit login flow.
 */
export declare function saveNewLoginTokenSync(token: string): void;
/**
 * Atomically rotates a token while preserving its local data association.
 *
 * @param sessionPath - Origin-specific session file to replace.
 * @param origin - Application origin recorded with the session.
 * @param token - New bearer token.
 * @param options - Whether a bearer rotation retains the authorized profile.
 * @param options.preserveExecutionDataProfile - Keep the current profile
 *   association. Explicit login flows must disable this.
 */
export declare function saveSessionTokenAtPathSync(sessionPath: string, origin: string, token: string, options?: {
    preserveExecutionDataProfile?: boolean;
}): void;
/**
 * Associates the current login session with its authorized local data profile.
 *
 * @param profileId - Opaque server-issued local profile identity.
 */
export declare function saveExecutionDataProfileSync(profileId: string): void;
/** Reads the local data profile authorized by the current login session. */
export declare function loadExecutionDataProfileSync(): string | null;
/** Removes the saved CLI session for the current origin. */
export declare function clearSavedTokenSync(): void;
//# sourceMappingURL=session.d.ts.map