export type PairingFailureLimitResult = {
    allowed: boolean;
    retryAfterMs: number;
};
/**
 * Records a failed pairing exchange and returns whether subsequent attempts
 * are still permitted. Called from the route handler on every invalid /
 * expired pairing secret — successful exchanges do NOT call this.
 */
export declare function consumePairingExchangeFailLimit(clientKey: string): PairingFailureLimitResult;
/** @internal */
export declare function resetPairingExchangeLimitsForTests(): void;