/**
 * Detects whether a token string is an OAuth JWT.
 *
 * JWTs have exactly 3 dot-separated non-empty segments and are not
 * project or test-run API tokens. Mirrors the backend's `isOAuthJwt`.
 */
export declare const isOAuthJwt: (token: string) => boolean;
/**
 * Decodes a JWT's payload claims without verifying the signature. Returns
 * `null` if the token is not a well-formed JWT.
 *
 * Intended for client-side hints (e.g. "is this token expired?"). Never
 * use the result for authorization decisions.
 */
export declare const getJwtClaims: (token: string) => Record<string, unknown> | null;
/**
 * Returns true if the JWT's `exp` claim has already passed. Returns false
 * if the token is malformed or has no `exp` claim — callers should treat
 * "false" as "no evidence of expiry", not "definitely still valid".
 */
export declare const isJwtExpired: (token: string) => boolean;
//# sourceMappingURL=oauth-utils.d.ts.map