export interface SecretProtector {
    protect(secret: string): Promise<string>;
    reveal(ciphertext: string): Promise<string>;
}
/** AES-GCM envelope used for signing secrets that must be recovered by delivery workers. */
export declare class AesGcmSecretProtector implements SecretProtector {
    private readonly key;
    constructor(key: Uint8Array);
    static fromBase64(value: string): AesGcmSecretProtector;
    protect(secret: string): Promise<string>;
    reveal(envelope: string): Promise<string>;
}
export declare function generateApiToken(): string;
export declare function generateIncomingWebhookToken(): string;
export declare function generateSigningSecret(): string;
export declare function tokenPrefix(token: string): string;
export declare function secretHash(secret: string): string;
export declare function hashesEqual(left: string, right: string): boolean;
//# sourceMappingURL=secrets.d.ts.map