export interface ControlAuthOptions {
    statePath: string;
    now?: () => number;
}
export interface ControlSession {
    id: string;
    issuedAt: number;
    expiresAt: number;
    current: boolean;
}
/** 单个控制服务拥有状态文件；调用同步完成，不支持多个进程并行写入。 */
export declare class ControlAuth {
    private readonly statePath;
    private readonly now;
    private writeFailed;
    constructor(options: ControlAuthOptions);
    /** 只能由受本地权限保护的控制入口调用，禁止公开为匿名 HTTP API。 */
    issueBootstrap(): string;
    /** 仅受信部署入口；一次性消费标记永久保留，不能替代本地恢复码。 */
    installDeploymentBootstrap(code: string): void;
    /** 已配对部署的显式恢复入口；仅成功兑换后替换当前浏览器会话。 */
    installDeploymentRecovery(code: string): void;
    private installDeployment;
    /** 仅本地控制 socket 可调用；发码不撤销现有会话。 */
    issueRecovery(): string;
    /** 仅本地控制入口签发；追加设备，不撤销已授权浏览器。 */
    issueDevice(): string;
    private issue;
    pair(code: string): string;
    pairWithRevocations(code: string): {
        token: string;
        revoked: string[];
    };
    verify(token: string): boolean;
    sessions(token: string): ControlSession[];
    revokeSession(token: string, id: string): string | null;
    revoke(token: string): void;
    private currentSession;
    private read;
    private writeDeployment;
    private write;
}
//# sourceMappingURL=auth.d.ts.map