export interface PluginSecretContext {
    installationId: string;
    key: string;
}
export interface PluginSecretProtector {
    protect(secret: string, context: PluginSecretContext): Promise<string>;
    reveal(ciphertext: string, context: PluginSecretContext): Promise<string>;
}
/** Authenticated envelope dedicated to recoverable plugin environment variables. */
export declare class AesGcmPluginSecretProtector implements PluginSecretProtector {
    private readonly key;
    constructor(key: Uint8Array);
    static fromBase64(value: string): AesGcmPluginSecretProtector;
    protect(secret: string, context: PluginSecretContext): Promise<string>;
    reveal(envelope: string, context: PluginSecretContext): Promise<string>;
}
//# sourceMappingURL=secrets.d.ts.map