/**
 * @typedef {Object} ClaimsOptions
 * @property {string | string[] | RegExp | Array<string | RegExp> | ((claimed: string) => boolean | Promise<boolean>)} [issuer]
 * @property {string | string[] | RegExp | Array<string | RegExp> | ((claimed: string) => boolean | Promise<boolean>)} [audience]
 * @property {string} [subject]
 * @property {string} [nonce]
 * @property {string | string[]} [typ]
 * @property {string[]} [requiredClaims]
 * @property {string[]} [requiredScopes]
 * @property {number | string} [clockTolerance]
 * @property {number | string} [maxAge]
 * @property {Date} [currentDate]
 */
/**
 * Basic claim validation shared by verify. Phase-3 skeleton runs `exp`
 * / `nbf` / `iat` checks and enforces `typ` header consistency; the
 * broader claim surface (iss / aud / sub / nonce / maxAge /
 * requiredClaims / requiredScopes) lands in the claims-layer commit.
 *
 * @param {Record<string, unknown>} payload
 * @param {Record<string, unknown>} header
 * @param {ClaimsOptions} [options]
 * @returns {Promise<void>}
 */
export function validateClaims(payload: Record<string, unknown>, header: Record<string, unknown>, options?: ClaimsOptions): Promise<void>;
/**
 * Build the payload the signer will encode. Handles `iat` (auto unless
 * `noTimestamp`), `exp` (from `expiresIn`), `nbf` (from `notBefore`),
 * `jti` (boolean → random 16 bytes hex, object → configured size /
 * encoding, function → custom), and copies `iss` / `aud` / `sub` /
 * `nonce`. Full function-shaped `jti` + custom encoding lands in the
 * DX commit; boolean + hex works in phase 3.
 *
 * @param {Record<string, unknown>} payload
 * @param {import('./sign.js').SignOptions} options
 * @returns {Promise<Record<string, unknown>>}
 */
export function injectClaims(payload: Record<string, unknown>, options: import("./sign.js").SignOptions): Promise<Record<string, unknown>>;
export type ClaimsOptions = {
    issuer?: string | RegExp | string[] | (string | RegExp)[] | ((claimed: string) => boolean | Promise<boolean>) | undefined;
    audience?: string | RegExp | string[] | (string | RegExp)[] | ((claimed: string) => boolean | Promise<boolean>) | undefined;
    subject?: string | undefined;
    nonce?: string | undefined;
    typ?: string | string[] | undefined;
    requiredClaims?: string[] | undefined;
    requiredScopes?: string[] | undefined;
    clockTolerance?: string | number | undefined;
    maxAge?: string | number | undefined;
    currentDate?: Date | undefined;
};