import * as plugins from '../../plugins.js';
import type { OpsServer } from '../classes.opsserver.js';
import * as interfaces from '../../../dist_ts_interfaces/index.js';
/**
 * DNS authority handlers.
 *
 * Adding a zone here is an authority claim — after it succeeds dcrouter answers
 * for that zone with the `aa` flag on a public port and will request
 * certificates for it. So it carries the same posture as the other DNS write
 * surfaces (admin identity or a `:write`-scoped token) *and* the claim itself is
 * gated on a delegation proof the caller cannot forge. Authorization decides who
 * may ask; the probe decides whether the answer is yes.
 */
export declare class DnsAuthorityHandler {
    private opsServerRef;
    typedrouter: plugins.typedrequest.TypedRouter<interfaces.typedrequestInterfaces.ITypedRequest>;
    constructor(opsServerRef: OpsServer);
    private requireAuth;
    private registerHandlers;
}