import { Ed25519KeyIdentity } from '@icp-sdk/core/identity';
import type { Identity } from '@icp-sdk/core/agent';
/** Default self-custody owner-key location. A 32-byte Ed25519 seed. */
export declare const DEFAULT_KEY_PATH: string;
export interface LocalKey {
    identity: Ed25519KeyIdentity;
    created: boolean;
    keyPath: string;
}
/**
 * Load or generate a LOCAL, self-custody Ed25519 owner key (a 32-byte seed at ~/.engramx/owner.key by
 * default). EngramX holds nothing. A bare local key means loss = permanent loss of ownership — the
 * caller is responsible for backing up the seed. Refuses symlinks and world/group-readable files.
 */
export declare function localOwnerKey(keyPath?: string): LocalKey;
/**
 * Reuse an existing icp-cli identity (secp256k1) by name, via `icp identity export`. Custody stays in
 * the user's icp-cli store; EngramX holds nothing, and the user keeps whatever backup/recovery the
 * icp-cli identity already has (e.g. its 24-word seed). Still a single key.
 */
export declare function icpCliOwnerKey(name: string): Identity;