import { type RealtimeBatch, type RealtimePublishResponse } from '@forgezero/runtime/realtime';
import { type NodeKeyPair } from '@forgezero/runtime/identity';
export interface RealtimeProviderOptions {
    endpoint: string;
    /** Worker inbound credential. Required in addition to the hybrid proof. */
    secret: string;
    /** Ed25519 + ML-DSA producer identity. Both signatures are mandatory. */
    identity: Readonly<{
        nodeKey: string;
        keys: NodeKeyPair;
    }>;
    producer: string;
    requestTimeoutMs?: number;
    fetcher?: typeof fetch;
}
export declare class RealtimeProviderError extends Error {
    readonly code: 'INVALID_CONFIG' | 'UNAVAILABLE' | 'REFUSED';
    constructor(code: 'INVALID_CONFIG' | 'UNAVAILABLE' | 'REFUSED', message: string);
}
/** One external request per batch; Worker/DO bindings own the internal fan-out. */
export declare function cloudflareRealtime(options: RealtimeProviderOptions): {
    publish(input: RealtimeBatch): Promise<RealtimePublishResponse>;
};