import { CredentialListFilter, CredentialRecord, CredentialStore } from './types';
export interface FileCredentialStoreOptions {
    /** Absolute path to the encrypted file. Defaults to ~/.robinpath/credentials.enc (resolved lazily). */
    path?: string;
    /** Absolute path to the master key file. Defaults to ~/.robinpath/master.key. */
    masterKeyPath?: string;
    /** Raw or base64url-encoded 32-byte master key. Overrides env + file. */
    masterKey?: Uint8Array | string;
}
export declare class FileCredentialStore implements CredentialStore {
    private readonly options;
    private resolvedFilePath;
    private resolvedMasterKeyPath;
    private readonly inlineMasterKey;
    private keyCache;
    constructor(options?: FileCredentialStoreOptions);
    get(slug: string): Promise<Record<string, unknown> | null>;
    list(filter?: CredentialListFilter): Promise<Omit<CredentialRecord, "fields">[]>;
    set(slug: string, type: string, fields: Record<string, unknown>): Promise<void>;
    delete(slug: string): Promise<boolean>;
    private paths;
    private masterKey;
    private loadOrCreateMasterKeyFile;
    private load;
    private save;
    private encryptString;
    private decryptString;
}