import type { WizardPrompter } from 'openclaw/plugin-sdk/setup';
import type { CertSummary, ValidatedCaBytes, ValidateCaAgainstServerParams, ValidateCaAgainstServerResult, ProbeTlsParams, ProbeTlsResult } from './probe.d.mts';
import type { Locale } from './i18n';
export declare function resolveAbsPath(raw: string): string;
export declare function shortFp(fp: string | null | undefined): string;
export declare function assertNever(x: never): never;
export interface ProbeModule {
    probeTls: (params: ProbeTlsParams) => Promise<ProbeTlsResult>;
    parseCertFromPem: (b: Buffer | Uint8Array) => CertSummary | null;
    validateCaAgainstServer: (p: ValidateCaAgainstServerParams) => Promise<ValidateCaAgainstServerResult>;
}
export declare function promptInsecureConfirm(args: {
    prompter: WizardPrompter;
    locale: Locale;
}): Promise<boolean>;
export declare function readCaFileInteractive(args: {
    prompter: WizardPrompter;
    probe: ProbeModule;
    host: string;
    port: number;
    locale: Locale;
}): Promise<{
    nextCaPath: string;
    nextCaBytes: ValidatedCaBytes;
}>;
export type TrustDecision = {
    kind: 'pinned';
    caPath: string;
    caBytes: ValidatedCaBytes;
} | {
    kind: 'insecure';
} | {
    kind: 'system';
};
export interface ReviewExistingTrustArgs {
    prompter: WizardPrompter;
    probe: ProbeModule;
    host: string;
    port: number;
    current: {
        caPath?: string;
        tlsVerify?: boolean;
    };
    alreadyValidated?: {
        caBytes: ValidatedCaBytes;
    };
    locale: Locale;
}
export declare function reviewExistingTrust(args: ReviewExistingTrustArgs): Promise<TrustDecision>;
//# sourceMappingURL=setup-trust.d.ts.map