import type { ApiFunctionsUser } from '@redocly/config';
export declare const ANONYMOUS_SUBJECT_PREFIX = "anon:";
export declare const USER_SUBJECT_PREFIX = "user:";
export declare const MISSING_SESSION_HANDLE_MESSAGE = "This API requires credentials and the caller is anonymous; call createAnonymousSession first, then retry with sessionHandle";
export declare const MALFORMED_SESSION_HANDLE_MESSAGE = "The sessionHandle is not a valid handle; call createAnonymousSession to obtain one";
export type SubjectResolution = {
    kind: 'resolved';
    subject: string;
} | {
    kind: 'anonymous';
} | {
    kind: 'invalid';
    message: string;
};
export declare function createSessionHandle(): string;
export declare function isValidSessionHandle(value: string): boolean;
export declare function userSubject(user: ApiFunctionsUser | undefined): string | undefined;
export declare function resolveSecretSubject(user: ApiFunctionsUser | undefined, sessionHandle: string | undefined): SubjectResolution;
export declare function secretTtlSeconds(subject: string): number;
//# sourceMappingURL=subject.d.ts.map