/**
 * Auth Crypto Helpers
 *
 * Shared low-level crypto utilities used by both AuthService and auth-cli.
 * All functions take an explicit saltFile path so they work regardless of
 * whether the caller uses the default user directory or a custom auth dir.
 */
import type { EncryptedSessionFile, SessionFile } from '../types/auth.js';
export declare const FILE_PERMISSIONS = 384;
/**
 * Check if a session file is encrypted (v2) or plaintext (v1)
 */
export declare function isEncryptedSession(data: SessionFile): data is EncryptedSessionFile;
/**
 * Get or create the encryption salt stored at the given path.
 */
export declare function getOrCreateSalt(saltFile: string): Buffer;
/**
 * Derive the AES-256-GCM encryption key from the machine ID and the salt
 * stored at the given path.
 */
export declare function getOrCreateEncryptionKey(saltFile: string): Buffer;
//# sourceMappingURL=auth-crypto.d.ts.map