/**
 * YAML configuration file loader for the orchestrator.
 *
 * Reads the local YAML config file from a configurable path with fallback:
 * 1. Explicit configPath argument
 * 2. KICI_CONFIG environment variable
 * 3. /etc/kici/orchestrator.yaml default
 *
 * When no YAML file is found and no explicit path was given,
 * returns an empty config (YAML is optional -- env-only mode).
 */
import type { LocalConfig } from './types.js';
/**
 * Shared config field paths that contain sensitive values.
 * Used by SharedConfigStore for encryption before DB storage.
 */
export declare const SENSITIVE_FIELD_PATHS: readonly ["platform.token", "secrets.key", "secrets.bootstrapAdminToken", "cluster.joinToken"];
/**
 * Load and validate the local orchestrator YAML configuration.
 *
 * @param configPath - Explicit path to the config file (highest precedence)
 * @returns Validated LocalConfig
 * @throws Error if explicit path doesn't exist, or if validation fails
 */
export declare function loadLocalConfig(configPath?: string): Promise<LocalConfig>;
//# sourceMappingURL=loader.d.ts.map