/** One decrypted record from an extracted-partition compartment. */
export interface DecryptedRecord {
    readonly id: string;
    readonly record: Record<string, unknown>;
    /** Source envelope write timestamp (ISO) — for last-write-wins merges. */
    readonly ts: string;
    /** Source envelope version. */
    readonly version: number;
    /** Provenance source id (FR-5). Present only when the source collection had provenance:true and a source was supplied on put. */
    readonly source?: string;
    /** ISO-8601 timestamp the provenance source was recorded (FR-5). */
    readonly sourceTs?: string;
}
/**
 * Decrypt every record of an extracted-partition bundle to plaintext,
 * grouped by collection. Throws if the bundle isn't an
 * extracted-partition or the transfer key is wrong.
 */
export declare function decryptExtractedPartition(bundleBytes: Uint8Array, transferKey: Uint8Array): Promise<Record<string, DecryptedRecord[]>>;