export declare enum EncryptionMode {
    REQUIRED = "required",
    OPTIONAL = "optional",
    DISABLED = "disabled"
}
export declare function getEncryptionMode(): EncryptionMode;
/**
 * Read and decrypt a file using SOPS.
 * In DISABLED mode: reads plaintext.
 * In OPTIONAL mode: tries SOPS, falls back to plaintext.
 * In REQUIRED mode: throws if SOPS fails.
 */
export declare function readDecrypted(path: string): Promise<string>;
/**
 * Encrypt a file in-place using SOPS.
 * In DISABLED mode: no-op.
 * In OPTIONAL mode: tries SOPS, silently skips if unavailable.
 * In REQUIRED mode: throws if SOPS fails.
 */
export declare function encryptInPlace(path: string): Promise<void>;