interface KeyPair {
    publicKey: string;
    privateKey: string;
}
/**
 * Get the agent's RSA keypair (loads from disk or generates)
 */
export declare function getKeyPair(): KeyPair;
/**
 * Get the agent's public key (for sending to vault)
 */
export declare function getPublicKey(): string;
/**
 * Get the agent's private key (for decrypting configs)
 */
export declare function getPrivateKey(): string;
/**
 * Decrypt AES key using agent's RSA private key
 */
export declare function decryptAesKey(encryptedKeyBase64: string): Buffer;
/**
 * Decrypt config using AES-256-GCM
 */
export declare function decryptConfig(ciphertextBase64: string, aesKey: Buffer, nonceBase64: string, authTagBase64: string): string;
/**
 * Encrypt password using vault's public key (RSA-OAEP)
 */
export declare function encryptPassword(password: string, vaultPublicKey: string): string;
/**
 * Initialize keypair (call on agent startup)
 */
export declare function initializeKeyPair(): void;
export {};
//# sourceMappingURL=keypair.d.ts.map