import type { ModuleContext } from "@similie/hyphen-command-server-types";
export type AuthPayload = {
    deviceId: string;
    sigB64: string;
};
export declare class DeviceAuth {
    private readonly ctx;
    constructor(ctx: ModuleContext);
    deviceSensors(identity: string): Promise<{
        results: any;
        values: Record<string, string>;
    }>;
    device(identity: string): Promise<import("@similie/ellipsies").ObjectLiteral | null>;
    private ds;
    /**
     * Parse "AUTH <deviceId> <sigB64>"
     * Returns null if invalid.
     */
    parseAuthLine(line: string): AuthPayload | null;
    /**
     * Lookup device certificate by identity and verify signature
     * over `${deviceId}.${nonceB64}` using RSA-SHA256.
     */
    verify(deviceId: string, nonceB64: string, sigB64: string): Promise<boolean>;
}
//# sourceMappingURL=device-auth.d.ts.map