/**
 * Lightweight credential resolver for open-testers.
 *
 * Supports three value formats in persona/auth-preset credential fields:
 *   @secrets:<key>   — look up from the @hasna/secrets vault (~/.hasna/secrets/vault.db)
 *   $ENV_VAR_NAME    — resolve from the current process environment
 *   <plain text>     — used as-is
 *
 * No dependency on @hasna/secrets package — reads the vault SQLite directly,
 * matching the same pattern used by todos-connector.ts for the todos DB.
 */
/**
 * Resolve a credential value, supporting these patterns:
 *
 * - `@secrets:hasnastudio/alumia/platform/test/member/password`
 *   → looks up the key in the hasna secrets vault
 *
 * - `$ANTHROPIC_API_KEY`
 *   → resolves from process.env
 *
 * - `myplaintextpassword`
 *   → returned unchanged
 *
 * Returns `null` if a reference is declared but can't be resolved
 * (vault missing, key not found, or env var not set).
 */
export declare function resolveCredential(value: string | null | undefined): string | null;
/**
 * Whether a credential value is a secrets reference (vault or env).
 * Useful for display purposes (avoid logging the value if it's a reference).
 */
export declare function isCredentialReference(value: string | null | undefined): boolean;
//# sourceMappingURL=secrets-resolver.d.ts.map