import { type SigningKey, type VerifyKey } from './keys.js';
export interface CountersignSig {
    alg: 'Ed25519';
    keyId: string;
    value: string;
}
export declare function countersignBody(record: Record<string, unknown>): Record<string, unknown>;
export declare function countersignDigest(record: Record<string, unknown>): string;
export declare function signAnchorRecord<T extends object>(record: T, key: SigningKey): T & {
    sig: CountersignSig;
};
export declare function verifyAnchorRecord(record: Record<string, unknown>, key: VerifyKey): boolean;
/** Same content check as nexus/deploy/hetzner-proof-route.mjs — never serve a private PEM. */
export declare function isServablePublicPem(text: string): boolean;
//# sourceMappingURL=anchor-sign.d.ts.map