import { type Express } from 'express';
import type { EnvSecretStore } from '../secrets/env-secret-store.js';
import type { OauthSecretStore } from '../secrets/oauth-secret-store.js';
import type { SecretProxyManager } from '../secrets/proxy-manager.js';
export interface SecretRoutesDeps {
    secretStore: EnvSecretStore;
    secretProxy: SecretProxyManager;
    oauthStore: OauthSecretStore;
    /** When true, the full sign-and-forward error is logged for the local operator. */
    devMode: boolean;
}
/**
 * Secret management API — direct .env file access (no browser needed). The
 * `secretStore` is wired into `secretProxy` so the fetch-proxy and the
 * management API share one source of truth.
 */
export declare function registerSecretRoutes(app: Express, deps: SecretRoutesDeps): void;