export declare const PAIRING_TOKEN_BYTES = 32;
/**
 * Generate a cryptographically secure pairing token.
 * Returns a base64url-encoded random string.
 */
export declare function generatePairingToken(): string;
/**
 * Hash a token using SHA-256 for safe at-rest storage.
 * Returns a prefixed hash string: "sha256:<hex>".
 */
export declare function hashToken(token: string): string;
/**
 * Check if a stored token value is a SHA-256 hash (vs legacy plaintext).
 */
export declare function isHashedToken(storedValue: string): boolean;
/**
 * Verify a provided token against a stored value.
 *
 * Supports both:
 * - SHA-256 hashed tokens: hash the provided token and compare hashes
 * - Legacy plaintext tokens: constant-time comparison (backward compatible)
 */
export declare function verifyPairingToken(provided: string, stored: string): boolean;
