export type DaemonTrustState = 'discovered_untrusted' | 'pending_verification' | 'trusted' | 'suspended' | 'revoked';
export interface EnrollmentState {
    daemon_id: string;
    daemon_fingerprint: string;
    trust_state: DaemonTrustState;
    token_hash?: string;
    token_salt?: string;
    token_expires_at?: string;
    token_created_at?: string;
    token_used_at?: string;
    failed_attempts: number;
    frozen_until?: string;
    trusted_at?: string;
    revoked_at?: string;
    suspended_at?: string;
    updated_at: string;
}
export declare function readEnrollmentState(daemonId?: string): EnrollmentState;
export declare function writeEnrollmentState(state: EnrollmentState): void;
export declare function createEnrollmentToken(opts?: {
    ttlMinutes?: number;
    daemonId?: string;
}): {
    token: string;
    expires_at: string;
    daemon_id: string;
    daemon_fingerprint: string;
};
export declare function verifyEnrollmentToken(input: {
    token: string;
    daemonFingerprint: string;
    daemonId?: string;
}): {
    ok: boolean;
    code: 'ok' | 'missing_token' | 'not_pending' | 'frozen' | 'expired' | 'daemon_fingerprint_mismatch' | 'token_mismatch';
    state: EnrollmentState;
};
export declare function setTrustState(target: DaemonTrustState, opts?: {
    daemonId?: string;
}): EnrollmentState;
//# sourceMappingURL=enrollment.d.ts.map