export interface SignatureComponents {
    signatureInput: string;
    signature: string;
}
/**
 * Parse RFC 9421 Signature-Input header.
 * Format: sig1=("@method" "@authority" "@path"); keyid="agent-key"; alg="ed25519"; created=1234567890
 */
export declare function parseSignatureInput(input: string): {
    label: string;
    components: string[];
    params: Record<string, string>;
} | null;
/**
 * Build the RFC 9421 signature base string from request components.
 */
export declare function buildSignatureBase(components: string[], request: {
    method: string;
    url: string;
    headers: Record<string, string>;
}, signatureInputValue: string, label: string): string;
/**
 * Verify an Ed25519 signature.
 * Returns true if the signature is valid for the given public key and data.
 */
export declare function verifyEd25519Signature(publicKeyBase64: string, signatureBase64: string, data: string): boolean;
export declare function registerAgentPublicKey(agentKey: string, publicKeyBase64: string): void;
export declare function getAgentPublicKey(agentKey: string): string | undefined;
/**
 * Full Web Bot Auth verification.
 * Checks Signature-Input + Signature headers against agent's registered public key.
 */
export declare function verifyWebBotAuth(headers: Record<string, string>, request: {
    method: string;
    url: string;
    headers: Record<string, string>;
}, agentKey: string): boolean;
//# sourceMappingURL=webbotauth.d.ts.map