/**
 * Process-lifetime in-memory access-token cache (ADR-306).
 *
 * The access token is never written to `auth.json` or any other disk file —
 * only the refresh token (via the OS keychain, or nowhere in session-only
 * mode) survives a process exit. Every fresh `ruflo` invocation starts with
 * an empty cache and re-derives an access token from the refresh token (or
 * asks the user to log in again, in session-only mode). This is a deliberate
 * ADR-306 usability cost, not something to "fix" by persisting the access
 * token — see auth/types.ts's doc comment.
 */
export declare function setSessionToken(profile: string, accessToken: string, expiresAtMs: number): void;
/**
 * Returns the cached access token when it remains valid for at least
 * `minValidityMs`. Authenticated callers use a small refresh window so a
 * token cannot expire while an outbound request is in flight.
 */
export declare function getSessionToken(profile: string, minValidityMs?: number): string | null;
export declare function clearSessionToken(profile: string): void;
//# sourceMappingURL=session.d.ts.map