/** Encrypt a one-time device-flow token for brief DB storage (decrypted on poll). */
export declare function sealDeviceToken(plaintext: string, secret: string): string;
export declare function unsealDeviceToken(sealed: string, secret: string): string | null;