export declare function buildBridgeTlsOptions(cert: Buffer): Record<string, unknown>;
/** Read the Bridge CA cert at `certPath`, verifying it matches the hash we
 *  pinned on first read. Throws if the bytes have changed since startup. */
export declare function readPinnedBridgeCert(certPath: string): Buffer;
/** Reset the pinned-hash table. Test-only. */
export declare function _resetBridgeCertPinsForTests(): void;
//# sourceMappingURL=bridge-tls.d.ts.map