import { type AgentAccessResourceScope } from "../shared/agent-access.js";
import { type VerifyResult } from "./short-lived-token.js";
export { AGENT_ACCESS_PARAM, DEFAULT_AGENT_ACCESS_TTL_SECONDS, appendAgentAccessParam, buildAgentAccessApiUrl, buildAgentAccessUrl, normalizeAgentAccessBasePath, normalizeAgentAccessOrigin, scopedAgentAccessResourceId, toAgentAccessUrl, type AgentAccessApiUrlOptions, type AgentAccessResourceScope, type AgentAccessUrlOptions, } from "../shared/agent-access.js";
export interface ScopedAgentAccessTokenOptions extends AgentAccessResourceScope {
    viewerEmail?: string;
    ttlSeconds?: number;
}
export interface ScopedAgentAccessGrant {
    token: string;
    expiresAt: string;
    ttlSeconds: number;
}
export declare function signScopedAgentAccessToken({ resourceKind, resourceId, viewerEmail, ttlSeconds, }: ScopedAgentAccessTokenOptions): string;
export declare function verifyScopedAgentAccessToken(token: string, scope: AgentAccessResourceScope): VerifyResult;
export declare function createScopedAgentAccessGrant(options: ScopedAgentAccessTokenOptions): ScopedAgentAccessGrant;
//# sourceMappingURL=agent-access.d.ts.map