/**
 * Encrypt/decrypt utilities for the varlock env blob.
 *
 * Uses AES-256-GCM with a 12-byte random IV.
 * Encrypted format: "varlock:v1:" + base64(iv[12] + ciphertext + authTag[16])
 *
 * Sync versions use Node.js `node:crypto` (build-time + init-server).
 * Async version uses Web Crypto API (init-edge, where node:crypto is unavailable).
 */
declare function isEncryptedBlob(value: string): boolean;
declare function encryptEnvBlobSync(json: string, hexKey: string): string;
declare function decryptEnvBlobSync(encrypted: string, hexKey: string): string;
declare function decryptEnvBlobAsync(encrypted: string, hexKey: string): Promise<string>;
declare function generateEncryptionKeyHex(): string;

export { decryptEnvBlobAsync, decryptEnvBlobSync, encryptEnvBlobSync, generateEncryptionKeyHex, isEncryptedBlob };
