import { Variable, OperationLog, AuditConfig } from '../types.js';
export declare class StorageManager {
    private storePath;
    readonly encrypted: boolean;
    private password?;
    private cache;
    private maxBackups;
    constructor(storePath: string, encrypted?: boolean, maxBackups?: number);
    setPassword(password: string): void;
    load(): Promise<Record<string, Variable>>;
    save(variables: Record<string, Variable>): Promise<void>;
    private rotateBackups;
    private tryRestoreFromBackup;
    get(name: string): Promise<Variable | undefined>;
    set(name: string, variable: Variable): Promise<void>;
    delete(name: string): Promise<boolean>;
    list(): Promise<string[]>;
    exists(): Promise<boolean>;
    invalidateCache(): void;
    verify(): Promise<{
        valid: boolean;
        error?: string;
        count?: number;
        backups?: number;
    }>;
    destroy(): void;
}
export interface LogFilter {
    date?: string;
    operation?: string;
    variable?: string;
    source?: string;
    success?: boolean;
    tail?: number;
}
/**
 * Resolve the absolute directory to store audit logs in.
 *
 * Honors `audit.log_path` with these forms:
 *   - unset           → default `<projectPath>/.envcp/logs` (backward compatible)
 *   - "project:REL"   → `<projectPath>/REL`
 *   - starts with `~` → expanded against $HOME (or projectPath if unavailable)
 *   - absolute path   → used as-is
 *   - relative path   → treated as project-relative
 *
 * Rejects `..` traversal in the `project:` form.
 */
export declare function resolveLogPath(audit: AuditConfig | undefined, projectPath: string): string;
export declare class LogManager {
    private logDir;
    private readonly auditConfig;
    private hmacKey;
    private lastHmac;
    private chainIndex;
    private chainLoaded;
    constructor(logDir: string, auditConfig?: AuditConfig);
    init(): Promise<void>;
    private loadLastChainState;
    private loadOrCreateHmacKey;
    private signEntry;
    verifyEntry(entry: OperationLog): boolean;
    verifyLogChain(date?: string): Promise<{
        valid: boolean;
        entries: number;
        tampered: number[];
    }>;
    private applyFieldFilter;
    pruneOldLogs(retainDays?: number): Promise<void>;
    log(entry: OperationLog): Promise<void>;
    getLogs(filter?: LogFilter): Promise<OperationLog[]>;
    private execChattr;
    setAppendOnly(filePath: string): Promise<boolean>;
    setImmutable(filePath: string): Promise<boolean>;
    removeAppendOnly(filePath: string): Promise<boolean>;
    removeImmutable(filePath: string): Promise<boolean>;
    protectLogFiles(): Promise<{
        protected: string[];
        failed: string[];
    }>;
    getLogDates(): Promise<string[]>;
    destroy(): void;
}
//# sourceMappingURL=index.d.ts.map