/**
 * Binding store -- scope-to-environment binding CRUD.
 *
 * Bindings map scope patterns (e.g. 'aws/prod/**') to environments,
 * controlling which scoped secrets are available in each environment.
 */
import type { Kysely } from 'kysely';
import type { Database, EnvironmentBinding } from '../db/types.js';
/**
 * Data access layer for environment bindings.
 */
export declare class BindingStore {
    private readonly db;
    constructor(db: Kysely<Database>);
    /** List all bindings for an environment. */
    list(orgId: string, environmentId: string): Promise<EnvironmentBinding[]>;
    /**
     * Replace all bindings for an environment in a transaction.
     *
     * Deletes existing bindings and inserts the new set atomically.
     * Pass an empty array to clear all bindings.
     */
    set(orgId: string, environmentId: string, scopePatterns: string[]): Promise<void>;
    /** Find bindings for an environment (alias for list, used by secret resolver). */
    findBindingsForEnvironment(orgId: string, environmentId: string): Promise<EnvironmentBinding[]>;
}
//# sourceMappingURL=binding-store.d.ts.map