import { KeyManager } from '../identity/key-manager';
/**
 * Device authentication manager.
 * Session token is stored in OS Keychain (not config file) for security.
 * Falls back to config file for migration from older versions.
 */
export declare class DeviceAuth {
    private readonly configPath;
    private readonly keyManager;
    constructor(configPath: string, keyManager?: KeyManager);
    getSessionToken(): string | undefined;
    setSessionToken(token: string): void;
    isAuthenticated(): boolean;
    /**
     * Decode the session token JWT and return the `exp` claim (Unix epoch seconds).
     * Returns null if no token is stored or the token is malformed.
     */
    getTokenExpiry(): number | null;
    /**
     * Check if the current session token is expiring within the given threshold.
     * Returns true if no token is stored (treat as expired).
     */
    isTokenExpiringSoon(thresholdSeconds: number): boolean;
    getGatewayUrl(): string;
}
//# sourceMappingURL=auth.d.ts.map