export interface TpuIdentity {
    /** Ed25519 keypair used as QoS identity. */
    readonly keyPair: CryptoKeyPair;
    /** Self-signed DER-encoded X.509 cert for TLS ClientHello. */
    readonly certDer: Uint8Array;
    /** Self-signed cert as PEM string (cached at build time, avoid re-encoding per call). */
    readonly certPem: string;
    /** PKCS#8 private key as PEM string (cached at build time, avoid re-encoding per call). */
    readonly privateKeyPem: string;
    /** Identity pubkey in raw 32 bytes (for logging and diagnostics). */
    readonly pubkeyRaw: Uint8Array;
    /** True if this was generated ephemerally (no user-supplied key). */
    readonly ephemeral: boolean;
}
/**
 * Build a TpuIdentity from an existing keypair, or generate an ephemeral one.
 * Ephemeral identities are unstaked — validators will drop their packets first
 * under load.
 */
export declare function buildIdentity(supplied?: CryptoKeyPair): Promise<TpuIdentity>;
/**
 * Import an Ed25519 keypair from a 32-byte seed.
 *
 * Uses the minimal PKCS#8 wrapper for Ed25519:
 *   30 2e 02 01 00 30 05 06 03 2b 65 70 04 22 04 20 <32-byte seed>
 * then re-exports the private key as JWK to obtain the derived public key.
 */
export declare function ed25519KeyPairFromSeed(seed32: Uint8Array): Promise<CryptoKeyPair>;
/**
 * Import an Ed25519 keypair from a 64-byte Solana secret key file
 * (32-byte seed concatenated with 32-byte public key, as produced by solana-keygen).
 *
 * The private key is imported from the seed (first 32 bytes) and the public key
 * is imported directly from the trailing 32 bytes via SPKI wrapper.
 */
export declare function ed25519KeyPairFromSolanaSecret(secret64: Uint8Array): Promise<CryptoKeyPair>;
//# sourceMappingURL=identity.d.ts.map