import type { JWTPayload } from "jose";
export declare const A2A_ORG_MEMBER_DELEGATION_TYPE = "agent-native-org-member-delegation";
export interface VerifiedA2AOrganizationIdentity {
    orgId: string;
    orgDomain: string | null;
}
export interface A2AOrganizationCredential extends VerifiedA2AOrganizationIdentity {
    orgDomain: string;
    secret: string;
    a2aMemberDelegationEnabled?: boolean;
}
/**
 * An organization secret authenticates an organization principal. Its JWT
 * subject is caller-controlled data unless it is an opted-in, audience-bound
 * member delegation verified against the receiver's current roster.
 */
export declare function organizationPrincipalClaims(payload: JWTPayload, organization: A2AOrganizationCredential): JWTPayload | null;
/**
 * Bind deployment-secret organization claims to this receiver's organization
 * metadata before they can become request or action scope.
 */
export declare function verifyA2AOrganizationIdentity(payload: Record<string, unknown>): Promise<VerifiedA2AOrganizationIdentity | null | undefined>;