/**
 * Secrets Manager - v1.0.0
 * AES-256-GCM encrypted secrets storage with rotation, export/import.
 */
export interface SecretsStore {
    version: number;
    secrets: Record<string, string>;
}
export declare class SecretsManager {
    private masterKey;
    private filePath;
    private store;
    constructor(options: {
        password: string;
        filePath?: string;
    });
    private init;
    private load;
    private save;
    set(key: string, value: string): void;
    get(key: string): string | undefined;
    delete(key: string): boolean;
    list(): string[];
    has(key: string): boolean;
    /** Inject secrets into env-like object */
    inject(env: Record<string, string | undefined>, keys?: string[]): Record<string, string | undefined>;
    /** Rotate: re-encrypt with new password */
    rotate(newPassword: string): void;
    /** Export as encrypted buffer */
    exportEncrypted(): Buffer;
    /** Import from encrypted buffer (must know password) */
    static importEncrypted(data: Buffer, password: string, filePath: string): SecretsManager;
}
//# sourceMappingURL=secrets.d.ts.map