export type KeyRole = "issuer" | "holder";
export interface AtomicKeyIdentity {
    readonly keyId: string;
    readonly publicKey: Uint8Array;
}
export interface AtomicSigningIdentity extends AtomicKeyIdentity {
    readonly role: KeyRole;
}
export interface KeyHandle {
    sign(message: Uint8Array): Uint8Array | Promise<Uint8Array>;
    publicKey(): Uint8Array | Promise<Uint8Array>;
    thumbprint(): string | Promise<string>;
    keyIdentity?(): AtomicKeyIdentity | Promise<AtomicKeyIdentity>;
    signingIdentity?(): AtomicSigningIdentity | Promise<AtomicSigningIdentity>;
}
export type SignerErrorCode = "invalid_report" | "invalid_anchor" | "invalid_grant" | "invalid_transition" | "invalid_key_handle" | "signing_failed" | "producer_error";
export type SignerResult<T> = {
    readonly ok: true;
    readonly value: T;
} | {
    readonly ok: false;
    readonly error: SignerErrorCode;
};
export declare const ok: <T>(value: T) => SignerResult<T>;
export declare const err: <T = never>(error: SignerErrorCode) => SignerResult<T>;
/** A key check over the library's own copy (width, and for Ed25519 the verifier's acceptability). */
export type KeyCheck = (key: Uint8Array) => boolean;
export declare const ed25519Key: KeyCheck;
export declare function resolveKeyWith(read: () => unknown, check: KeyCheck): Promise<Uint8Array | undefined>;
export declare function resolveIdentityWith(read: () => unknown, check: KeyCheck): Promise<AtomicKeyIdentity | undefined>;
/** The C1 gate: grants require an issuer-role identity resolved atomically. */
export declare function resolveIssuerWith(read: () => unknown, check: KeyCheck): Promise<AtomicKeyIdentity | undefined>;
export declare function resolvePublicKey(handle: KeyHandle): Promise<Uint8Array | undefined>;
export declare function resolveKeyIdentity(handle: KeyHandle): Promise<AtomicKeyIdentity | undefined>;
export declare function resolveIssuerIdentity(handle: KeyHandle): Promise<AtomicKeyIdentity | undefined>;
export type Phase = "start" | "stop" | "error";
export declare function emitter<K extends string>(opts: unknown, kind: K): (phase: Phase) => void;