export interface BackgroundSnapshotKeyOptions {
    /** Test seam; production keys always live below the OS account home. */
    readonly homeDir?: string;
}
/**
 * Load the stable owner-only HMAC key for one canonical config, creating it
 * exactly once when a controller first approves a managed snapshot.
 */
export declare function loadOrCreateBackgroundSnapshotKey(configPath: string, options?: BackgroundSnapshotKeyOptions): Promise<Buffer>;
/** Load an already-created key. Workers never create a replacement implicitly. */
export declare function loadBackgroundSnapshotKey(configPath: string, options?: BackgroundSnapshotKeyOptions): Promise<Buffer>;
/** Resolve an existing proof key without creating or repairing any ancestor. */
export declare function existingBackgroundSnapshotKeyPath(configPath: string, options?: BackgroundSnapshotKeyOptions): Promise<string>;
export declare function backgroundSnapshotKeyPath(configPath: string, options?: BackgroundSnapshotKeyOptions): Promise<string>;
//# sourceMappingURL=background-snapshot-key.d.ts.map