/**
 * KeychainProvider — reads credentials from macOS Keychain via `security`.
 *
 * Tries `find-internet-password -s <host>` first; falls back to
 * `find-generic-password -s <host>` for app-scoped items. Returns the value
 * only if macOS approves (the user may see a per-item prompt the first time).
 *
 * Returns "not_found" on misses and "unsupported" on non-macOS.
 */
import type { CredentialLookup, CredentialProvider, CredentialResult } from "../credential-provider.js";
export declare class KeychainProvider implements CredentialProvider {
    readonly name = "macos-keychain";
    lookup(q: CredentialLookup): Promise<CredentialResult>;
}
//# sourceMappingURL=keychain.d.ts.map