/**
 * Derive a public JWK from a private one.
 *
 * Strips the private components for both EC keys (drops `d`) and RSA keys
 * (drops `d`, `p`, `q`, `dp`, `dq`, `qi`, and `oth` — the additional-primes
 * array on multi-prime RSA keys). The result is safe to publish at
 * `<url>/.well-known/jwks.json` so downstream verifiers can validate
 * signatures the server produced.
 */
export declare function derivePublicJwk(privateKey: JsonWebKey): Record<string, unknown>;
//# sourceMappingURL=jwks.d.ts.map