import type { StepUser } from '../types/execution-context';
/**
 * What a run envelope's `userProfile` and an automated inbox's service-account profile have in
 * common. The optional strings are what the server actually sends as null.
 */
export interface StepUserProfile {
    id: number;
    email: string;
    firstName?: string | null;
    lastName?: string | null;
    team?: string | null;
    renderingId: number;
    role?: string | null;
    permissionLevel?: string | null;
    tags: Record<string, string>;
}
/**
 * Shared so a run-driven step and an automation poll reach the agent as the exact same caller: the
 * JWT they mint has to carry identical claims, or the same account would be two callers.
 */
export declare function toStepUser(profile: StepUserProfile): StepUser;
export declare function mintStepToken(user: StepUser, authSecret: string): string;
//# sourceMappingURL=step-user.d.ts.map