/** Canonical NAME=value / NAME_DOMAINS=csv secret-storage schema. */
export declare const DOMAINS_SUFFIX = "_DOMAINS";
export interface EnvEntry {
    key: string;
    value: string;
}
export interface SecretEnvEntry {
    name: string;
    value: string;
    domains: string[];
}
export declare function parseDomainsCsv(raw: string): string[];
/** Pair values with non-empty domain companions, preserving first-name order. */
export declare function pairEnvEntriesToSecrets(entries: EnvEntry[]): SecretEnvEntry[];
/** Parse the shared, deliberately small .env subset used for secret storage. */
export declare function parseEnvFile(content: string): EnvEntry[];
/** Parse assignment lines while preserving every character after the first `=`. */
export declare function parseEnvFilePreservingValues(content: string): EnvEntry[];
export declare function serializeEnvFile(entries: EnvEntry[]): string;
/** Profile name validation shared by every S3 secret-schema writer. */
export declare const PROFILE_RE: RegExp;
/** Derive the default authorized-host wildcard for an S3-compatible endpoint. */
export declare function deriveS3Domains(endpoint: string | undefined): string[];
export interface S3ProfileInput {
    profile: string;
    accessKey: string;
    secretKey: string;
    region?: string;
    endpoint?: string;
    pathStyle?: boolean;
    domains?: string[];
}
export interface S3ProfileValidation {
    ok: boolean;
    error?: string;
    resolvedDomains?: string[];
}
export declare function validateS3ProfileInput(input: S3ProfileInput): S3ProfileValidation;
//# sourceMappingURL=secret-env-schema.d.ts.map