/** A short-lived browser-authorized session used only by the public CLI. */
export interface CliSession {
    api: string;
    /** Browser application origin that approved this session and fresh actions. */
    app?: string;
    /** Internal URL selector. `platform` or the tenant slug; never presented as identity. */
    realm: string;
    /** Stable database/crypto identity returned by the API. */
    realmId?: string;
    /** Human-readable routing coordinate, when this is a tenant session. */
    tenantSlug?: string;
    cookie: string;
    createdAtTs: number;
    lastUsedAtTs: number;
    user?: {
        key?: string;
        email?: string;
        displayName?: string;
    };
}
export declare function canonicalApi(value: string): string;
export declare const sessionId: (api: string, realm: string) => string;
export declare function defaultSessionPath(env?: NodeJS.ProcessEnv): string;
export declare function activeSession(path?: string): CliSession | null;
export declare function sessionFor(api: string, realm: string, path?: string): CliSession | null;
export declare function saveSession(session: CliSession, path?: string): void;
export declare function removeSession(api: string, realm: string, path?: string): void;