import { z } from "zod";
export declare const IDENTITY_ASSERTION_TTL_MS: number;
export declare const IDENTITY_ASSERTION_MAX_TTL_MS: number;
export declare const ENV_PLATFORM_IDENTITY_KEY = "PLATFORM_IDENTITY_KEY";
export declare const IdentityAssertionMethodSchema: z.ZodEnum<{
    email: "email";
    google: "google";
}>;
export type IdentityAssertionMethod = z.infer<typeof IdentityAssertionMethodSchema>;
export interface IdentityAssertion {
    readonly sandboxId: string;
    readonly email: string;
    readonly method: IdentityAssertionMethod;
    readonly issuedAt: number;
    readonly expiresAt: number;
    readonly nonce: string;
}
export declare const isIdentityAssertion: (bearer: string) => boolean;
export declare const mintIdentityAssertion: (privateKeyPem: string, claim: {
    readonly sandboxId: string;
    readonly email: string;
    readonly method: IdentityAssertionMethod;
    readonly issuedAtMs: number;
    readonly ttlMs?: number;
}) => string;
export declare const verifyIdentityAssertion: (publicKeyPem: string, token: string, nowMs: number) => IdentityAssertion | undefined;
//# sourceMappingURL=identity-assertion.d.ts.map