/** Error codes returned by {@linkcode AttestationError}. */
export declare enum AttestationErrorCode {
    /** CBOR decoding or structural validation failed. */
    INVALID_FORMAT = "INVALID_FORMAT",
    /** X.509 certificate chain verification failed. */
    INVALID_CERTIFICATE_CHAIN = "INVALID_CERTIFICATE_CHAIN",
    /** Computed nonce does not match the nonce in the leaf certificate. */
    NONCE_MISMATCH = "NONCE_MISMATCH",
    /** RP ID hash does not match SHA-256 of the app ID. */
    RP_ID_MISMATCH = "RP_ID_MISMATCH",
    /** Public key hash does not match the provided key ID. */
    KEY_ID_MISMATCH = "KEY_ID_MISMATCH",
    /** Sign count is not zero (required for attestation). */
    INVALID_COUNTER = "INVALID_COUNTER",
    /** AAGUID does not match the expected environment (production/development). */
    INVALID_AAGUID = "INVALID_AAGUID",
    /**
     * The `consumeChallenge` callback returned `false`, meaning the challenge
     * was missing, expired, or already consumed. Used by {@linkcode withAttestation}.
     */
    CHALLENGE_INVALID = "CHALLENGE_INVALID",
    /**
     * An internal or storage callback error occurred (used by
     * {@linkcode withAttestation}). The original error is attached via
     * `Error.cause` and is deliberately NOT reflected in the HTTP response
     * body to avoid leaking database schema or driver diagnostics.
     */
    INTERNAL_ERROR = "INTERNAL_ERROR"
}
/** Thrown when attestation verification fails. */
export declare class AttestationError extends Error {
    /** Machine-readable error code. */
    readonly code: AttestationErrorCode;
    /** Discriminant for `instanceof` checks in catch blocks. Always `"AttestationError"`. */
    readonly name = "AttestationError";
    /** Create an AttestationError with a machine-readable code and human-readable message. */
    constructor(
    /** Machine-readable error code. */
    code: AttestationErrorCode, message: string, options?: {
        cause?: unknown;
    });
}
/** Error codes returned by {@linkcode AssertionError}. */
export declare enum AssertionErrorCode {
    /** CBOR decoding or structural validation failed. */
    INVALID_FORMAT = "INVALID_FORMAT",
    /** RP ID hash does not match SHA-256 of the app ID. */
    RP_ID_MISMATCH = "RP_ID_MISMATCH",
    /** Sign count was not greater than the previously stored value. */
    COUNTER_NOT_INCREMENTED = "COUNTER_NOT_INCREMENTED",
    /** ECDSA signature verification failed. */
    SIGNATURE_INVALID = "SIGNATURE_INVALID",
    /** No device key found for the given device ID (used by {@linkcode withAssertion}). */
    DEVICE_NOT_FOUND = "DEVICE_NOT_FOUND",
    /** An internal or storage callback error occurred (used by {@linkcode withAssertion}). */
    INTERNAL_ERROR = "INTERNAL_ERROR",
    /**
     * The `commitSignCount` callback returned `false`, meaning another
     * concurrent request already advanced the stored counter past this value.
     * Indicates an expected race under concurrent load, not a client bug.
     * Used by {@linkcode withAssertion}.
     */
    SIGN_COUNT_STALE = "SIGN_COUNT_STALE"
}
/**
 * Fixed, wire-safe message for an attestation error code. Used by the
 * default {@linkcode withAttestation} error response so parser/crypto
 * detail in `error.message` (which can embed client-supplied input)
 * never reaches unauthenticated callers. The full message stays
 * available server-side via the error object passed to `onError`.
 */
export declare function attestationWireMessage(code: AttestationErrorCode): string;
/** Fixed, wire-safe message for an assertion error code. See {@linkcode attestationWireMessage}. */
export declare function assertionWireMessage(code: AssertionErrorCode): string;
/** Thrown when assertion verification fails. */
export declare class AssertionError extends Error {
    /** Machine-readable error code. */
    readonly code: AssertionErrorCode;
    /** Discriminant for `instanceof` checks in catch blocks. Always `"AssertionError"`. */
    readonly name = "AssertionError";
    /** Create an AssertionError with a machine-readable code and human-readable message. */
    constructor(
    /** Machine-readable error code. */
    code: AssertionErrorCode, message: string, options?: {
        cause?: unknown;
    });
}