import type { PlanContext } from "../internals/plan.js";
import type { Check } from "../internals/verify.js";
import type { CertEntry } from "../platform/base.js";
export interface RuntimeTlsObservation {
    origin: string;
    os: Check;
    node: Check;
}
export type NodeTrustCandidate = {
    kind: "system-ca";
} | {
    kind: "extra-ca";
    certs: CertEntry[];
} | {
    kind: "unresolved";
};
export declare function runtimeTlsOrigins(ctx: PlanContext): string[];
export declare function probeNodeTls(ctx: PlanContext, origin: string, env?: NodeJS.ProcessEnv, timeoutMs?: number): Promise<Check>;
export declare function selectNodeTrustCandidate(ctx: PlanContext, divergentOrigins: readonly string[]): Promise<NodeTrustCandidate>;