/** A numeric cap, or `'unlimited'` for no cap. */
declare type EntitlementLimit = number | 'unlimited';

/**
 * Sign a license token with an Ed25519 private key (PKCS8/PEM). Returns a compact
 * EdDSA JWT that {@link verifyLicense} checks offline. `nowSeconds` is injectable
 * for deterministic tests.
 */
export declare const signLicense: (input: SignLicenseInput, privateKeyPem: string, nowSeconds?: number) => Promise<string>;

export declare interface SignLicenseInput {
    /** Scope the license to one tenant id; omit for a deployment-wide license. */
    readonly tenant?: string;
    /** Edition label (e.g. `'pro'`, `'enterprise'`). */
    readonly edition: string;
    /** Per-key numeric limits (`'unlimited'` for no cap). */
    readonly entitlements: Readonly<Record<string, EntitlementLimit>>;
    /** Boolean feature flags to grant. */
    readonly features?: ReadonlyArray<string>;
    /** Plugins licensed for production use (names without the
     *  `@voltro/plugin-` prefix, e.g. `['storage']`). */
    readonly plugins?: ReadonlyArray<string>;
    /** Seconds from `now` until the license expires. */
    readonly ttlSeconds: number;
    /** Key id stamped into the JWS header (public-key rotation). */
    readonly kid?: string;
}

export { }