import type { H3Event } from "h3";
declare const TOKEN_KIND = "agent-native-embed-session";
export interface EmbedSessionTicketInput {
    ownerEmail: string;
    orgId?: string | null;
    targetPath: string;
    scope?: string | null;
    ttlSeconds?: number;
}
export interface EmbedSessionTicket {
    ticket: string;
    ticketHash: string;
    expiresAt: number;
}
export interface ConsumeEmbedSessionTicketOptions {
    expectedOrgId?: string | null;
}
export interface ConsumedEmbedSessionTicket {
    ownerEmail: string;
    orgId?: string;
    targetPath: string;
    scope?: string;
    expiresAt: number;
}
export interface EmbedSessionTokenClaims {
    kind: typeof TOKEN_KIND;
    ownerEmail: string;
    orgId?: string;
    targetPath: string;
    scope?: string;
    iat: number;
    exp: number;
}
export type VerifyEmbedSessionTokenResult = {
    ok: true;
    claims: EmbedSessionTokenClaims;
} | {
    ok: false;
    reason: string;
};
export type ResolvedEmbedSession = {
    email: string;
    orgId?: string;
    token: string;
    targetPath: string;
    scope?: string;
};
export declare function requestMatchesEmbedTarget(event: H3Event, targetPath: string): boolean;
export declare function normalizeEmbedTargetPath(raw: string | undefined | null, requestOrigin?: string): string | null;
export declare function createEmbedSessionTicket(input: EmbedSessionTicketInput): Promise<EmbedSessionTicket>;
export declare function consumeEmbedSessionTicket(ticket: string | undefined | null, options?: ConsumeEmbedSessionTicketOptions): Promise<ConsumedEmbedSessionTicket | null>;
export declare function signEmbedSessionToken(input: {
    ownerEmail: string;
    orgId?: string | null;
    targetPath: string;
    scope?: string | null;
    ttlSeconds?: number;
}): string;
export declare function verifyEmbedSessionToken(token: string | undefined | null): VerifyEmbedSessionTokenResult;
export declare function setEmbedSessionCookie(event: H3Event, token: string): void;
export declare function resolveEmbedSessionFromRequest(event: H3Event): Promise<ResolvedEmbedSession | null>;
export declare function requestHasEmbedAuthMarker(event: H3Event): boolean;
export declare function isEmbedModeRequest(event: H3Event): boolean;
export {};
//# sourceMappingURL=embed-session.d.ts.map