import { Result } from "@adviser/cement";
import type { BaseXXEndeCoder } from "../types/sthis.js";
import type { CertificatePayload } from "../types/cert-payload.js";
import type { CACertResult, HeaderCertInfo, VerifyWithCertificateError, VerifyWithCertificateOptions, VerifyWithCertificateResult } from "../types/device-id-types.js";
type DeviceIdVerifyOptions = VerifyWithCertificateOptions & {
    readonly requireCASignature?: boolean;
};
export declare class DeviceIdVerifyMsg {
    #private;
    constructor(base64: BaseXXEndeCoder, trustedCAs: CACertResult[], options: DeviceIdVerifyOptions);
    createVerifyWithCertificateError(error: Result<unknown>, partialResults?: Partial<VerifyWithCertificateError["partialResults"]>): VerifyWithCertificateError;
    verifyWithCertificate<S>(jwt: string, schema?: S): Promise<VerifyWithCertificateResult<S>>;
    extractCertificateFromJWT(jwt: string): Result<HeaderCertInfo>;
    validateCertificateThumbprint(certInfo: HeaderCertInfo): Promise<Result<boolean>>;
    validateCertificate(certor: HeaderCertInfo["certificate"]): Promise<Result<unknown>>;
    findTrustedCA(cert: CertificatePayload, trustedCAs: CertificatePayload[]): CertificatePayload | undefined;
    validateCertificateChainSignature(certInfo: HeaderCertInfo): Promise<Result<true>>;
    getErrorCode(ierror: unknown): VerifyWithCertificateError["errorCode"];
}
export {};