import type { PublicKeyRecord, PrivateKeyRecord } from "./types.js";
/**
 * Generate a new Ed25519 key pair for a responder.
 */
export declare function generateKeyPair(responderId: string, responderName: string): {
    publicKeyRecord: PublicKeyRecord;
    privateKeyRecord: PrivateKeyRecord;
};
/**
 * Save a public key to the trusted keys directory (git-tracked).
 */
export declare function saveTrustedPublicKey(publicKeyRecord: PublicKeyRecord, baseDir?: string): Promise<string>;
/**
 * Save a private key to the private keys directory (gitignored).
 */
export declare function savePrivateKey(privateKeyRecord: PrivateKeyRecord, baseDir?: string): Promise<string>;
/**
 * Load all trusted public keys from the trusted directory.
 */
export declare function loadTrustedPublicKeys(baseDir?: string): Promise<PublicKeyRecord[]>;
/**
 * Load a private key by fingerprint.
 */
export declare function loadPrivateKey(fingerprint: string, baseDir?: string): Promise<PrivateKeyRecord | null>;
/**
 * Rotate a key: generate new pair, save both, mark old public key as expired.
 */
export declare function rotateKey(responderId: string, responderName: string, oldFingerprint: string, baseDir?: string): Promise<{
    publicKeyRecord: PublicKeyRecord;
    privateKeyRecord: PrivateKeyRecord;
}>;
export type { PublicKeyRecord, PrivateKeyRecord, KeyPairMetadata } from "./types.js";
//# sourceMappingURL=keys.d.ts.map