/**
 * profile — resolver for a vault's optional profile.yaml.
 *
 * Reads <vaultDir>/profile.yaml on demand and returns:
 *   - The parsed VaultProfile when the file is plaintext YAML.
 *   - { encrypted: true } when the file carries a SOPS top-level `sops:` key
 *     (structural detection only — no decryption, no key management).
 *   - undefined when the file is absent (ENOENT).
 *
 * PURE w.r.t. clock: never calls Date.now() or new Date().
 *       No crypto, network, or sops-binary imports — detection is key-presence only.
 *
 * bober: reuses parseFrontmatter (the ONE YAML path) by wrapping the standalone
 *        YAML body in `---` delimiters — no second YAML parser is introduced.
 *        Swap for a full YAML library if nested mappings beyond the Dataview
 *        scalar/list subset are needed.
 */
/**
 * Generic, mostly-open vault profile. Domains add optional well-known keys
 * at their own use sites — no medical or financial fields are hardcoded here.
 */
export type VaultProfile = Record<string, unknown>;
/**
 * Resolve the vault profile from `<vaultDir>/profile.yaml`.
 *
 * Returns:
 *   - `VaultProfile` — plaintext YAML parsed into an open record.
 *   - `{ encrypted: true }` — SOPS-encrypted file detected (top-level `sops:` key
 *     present); no value is decrypted or exposed.
 *   - `undefined` — profile.yaml is absent (no throw).
 */
export declare function resolveProfile(vaultDir: string): Promise<VaultProfile | {
    encrypted: true;
} | undefined>;
//# sourceMappingURL=profile.d.ts.map