import type { VaultProviderId } from './types.js';
export interface VaultConfig {
    /** master key 文件 (default: ~/.skillfm/vault.key) */
    master_key_path?: string;
    /** vault 加密文件 (default: ~/.skillfm/vault.enc) */
    vault_path?: string;
}
export declare class Vault {
    private master_key_path;
    private vault_path;
    private _master_key;
    private _entries;
    constructor(cfg?: VaultConfig);
    /** 初始化: 加载 master key (没有则生成) + 加载 vault entries (没有则空) */
    init(): Promise<void>;
    put(provider: VaultProviderId, key: string): Promise<void>;
    get(provider: VaultProviderId): Promise<string | null>;
    list(): Promise<VaultProviderId[]>;
    delete(provider: VaultProviderId): Promise<boolean>;
    /** 轮换 master key — 重生成 master key + 重加密所有 entries */
    rotate(): Promise<void>;
    /** 验证 vault 是否健康 (能解密) */
    health(): Promise<{
        ok: boolean;
        entry_count: number;
        error?: string;
    }>;
    private ensureDir;
    private ensureInitialized;
    private loadOrCreateMasterKey;
    private loadEntries;
    private saveEntries;
}
//# sourceMappingURL=vault.d.ts.map