import type { TokenStore } from '../token-store.js';
import type { IdentityResolver } from '../identity.js';
import type { AuditSink } from '../audit.js';
import type { PairingRegistry } from '../ws/pairing-registry.js';
export type RevokeDeps = {
    tokenStore: TokenStore;
    identityResolver: IdentityResolver;
    auditSink: AuditSink;
    /**
     * Live pairing registry. Revoke must tear the pairing DOWN, not just
     * flip the record: without this the WebSocket stays open and the
     * per-tid subscriber / recent-log / confirm-outcome buffers leak for
     * the life of the process. On revoke we push a `revoked` frame (so the
     * browser closes its side) and then `unregister` the tid (fires close
     * handlers, drops the buffers).
     */
    registry: PairingRegistry;
    now?: () => number;
};
export declare function handleRevoke(req: Request, deps: RevokeDeps): Promise<Response>;
//# sourceMappingURL=revoke.d.ts.map