export interface IngestCredentialProvider {
    /** Issues a new opaque capability/runtime epoch and invalidates any prior one. */
    issue(sessionId: string): IssuedIngestCredential;
    /** Returns the server-owned runtime epoch for this exact capability. */
    authenticate(sessionId: string, token: string): string | null;
    revoke(sessionId: string): void;
}
export interface IssuedIngestCredential {
    token: string;
    /** Opaque process-local identity for the PTY generation receiving `token`. */
    runtimeEpoch: string;
}
/**
 * Process-local, session-bound ingest capabilities. Only token digests are
 * retained, so neither session records nor accidental object serialization
 * can disclose a credential. PTYs do not survive a server restart, therefore
 * the registry intentionally does not persist.
 */
export declare class IngestCredentialRegistry implements IngestCredentialProvider {
    private readonly generateToken;
    private readonly generateRuntimeEpoch;
    private readonly credentials;
    constructor(generateToken?: () => string, generateRuntimeEpoch?: () => string);
    issue(sessionId: string): IssuedIngestCredential;
    authenticate(sessionId: string, token: string): string | null;
    revoke(sessionId: string): void;
}
//# sourceMappingURL=ingest-credentials.d.ts.map