/**
 * @param {string} token
 * @param {KeyInput | KeyInput[] | KeyResolverFn} keyish
 * @param {VerifyOptions} options
 * @returns {Promise<VerifyResult>}
 */
export function verify(token: string, keyish: KeyInput | KeyInput[] | KeyResolverFn, options: VerifyOptions): Promise<VerifyResult>;
/**
 * Verify the signature but **skip claim validation**. Use for audit
 * paths where you need a trustworthy identity even from an expired
 * token. Never gate authorisation on this — use `verify` for that.
 *
 * @param {string} token
 * @param {KeyInput | KeyInput[] | KeyResolverFn} keyish
 * @param {Pick<VerifyOptions, 'alg' | 'knownCriticalHeaders' | 'maxTokenSize'>} options
 * @returns {Promise<VerifyResult>}
 */
export function peek(token: string, keyish: KeyInput | KeyInput[] | KeyResolverFn, options: Pick<VerifyOptions, "alg" | "knownCriticalHeaders" | "maxTokenSize">): Promise<VerifyResult>;
export type KeyInput = import("./internal/keys.js").KeyInput;
export type KeyResolverFn = import("./internal/resolver.js").KeyResolverFn;
export type ClaimsOptions = import("./claims.js").ClaimsOptions;
export type VerifyOptions = ClaimsOptions & {
    alg: string[];
    knownCriticalHeaders?: Iterable<string>;
    maxTokenSize?: number;
};
export type VerifyResult = {
    header: Record<string, unknown>;
    payload: Record<string, unknown>;
    kid: string | undefined;
};