/**
 * Resolve SSL certificates for local HTTPS — used by both the Vite dev server
 * (`mkcertPlugin`) and the Dune CLI's OAuth callback server. Prefers mkcert
 * certificates when present in `certDir`, otherwise falls back to a
 * self-signed certificate generated via `selfsigned`.
 */
export declare const SELF_SIGNED_VALIDITY_DAYS = 30;
export interface LocalCertificates {
    cert: string | Buffer;
    key: string | Buffer;
    source: 'mkcert' | 'self-signed';
}
export interface LoadLocalCertificatesOptions {
    /** Directory containing `localhost.pem` and `localhost-key.pem`. */
    certDir: string;
    /** Filename of the cert PEM. Defaults to `localhost.pem`. */
    certFileName?: string;
    /** Filename of the key PEM. Defaults to `localhost-key.pem`. */
    keyFileName?: string;
}
export interface GenerateSelfSignedCertsDeps {
    /** Clock used to compute `notAfterDate`. Override in tests. */
    now?: () => number;
    /** Validity in days. Defaults to `SELF_SIGNED_VALIDITY_DAYS`. */
    validityDays?: number;
}
export declare function generateSelfSignedCerts({ now, validityDays, }?: GenerateSelfSignedCertsDeps): Promise<{
    cert: string;
    key: string;
}>;
export declare function getSharedCertDir(): string;
export declare function loadLocalCertificates({ certDir, certFileName, keyFileName, }: LoadLocalCertificatesOptions): Promise<LocalCertificates>;