/**
 * ANAMNESIS WebAuthn — Browser Passkey Integration (K8)
 *
 * Wraps the browser WebAuthn API for passkey registration and authentication.
 * The passkey private key lives in the device's Secure Enclave/TPM — it
 * cannot be exported, copied, or stolen remotely.
 *
 * Combined with T-OPRF: password proves knowledge, passkey proves device possession.
 * Both are required. Stealing one without the other is useless.
 */
/**
 * WebAuthn credential registration result.
 */
export interface WebAuthnCredential {
    credentialId: string;
    publicKey: string;
    algorithm: number;
    attestationType: string;
}
/**
 * WebAuthn assertion (authentication) result.
 */
export interface WebAuthnAssertionResult {
    credentialId: string;
    authenticatorData: string;
    clientDataJSON: string;
    signature: string;
}
/**
 * Check if WebAuthn is supported in this environment.
 */
export declare function isWebAuthnSupported(): boolean;
/**
 * Register a new passkey (create credential).
 *
 * @param walletId - Wallet ID to bind the passkey to
 * @param userName - Display name for the credential
 * @param rpId - Relying Party ID (e.g., "sequence0.network")
 * @returns Credential registration result
 */
export declare function registerPasskey(walletId: string, userName: string, rpId?: string): Promise<WebAuthnCredential>;
/**
 * Authenticate with an existing passkey (get assertion).
 *
 * @param challenge - Challenge bytes from the agent network
 * @param credentialId - Optional: specific credential to use
 * @param rpId - Relying Party ID
 * @returns Assertion result for agent verification
 */
export declare function authenticatePasskey(challenge: Uint8Array, credentialId?: string, rpId?: string): Promise<WebAuthnAssertionResult>;
//# sourceMappingURL=webauthn.d.ts.map