import type { CodexCredentialDelivery, CodexSubscriptionRefreshInput, CodexSubscriptionRefreshResult } from "@skaile/workspaces/types";
/** Validate credential shape and provenance without including input values in errors. */
export declare function parseCodexCredential(value: unknown, now?: number): CodexCredentialDelivery;
/** Validate runtime-only refresh input against the authenticated session's pinned delivery. */
export declare function parseCodexRefreshInput(value: unknown, pinned: Extract<CodexCredentialDelivery, {
    kind: "codex-subscription";
}>): CodexSubscriptionRefreshInput;
/** Accept refreshed subscription credentials only within the existing config/account binding. */
export declare function parseCodexRefreshResult(value: unknown, pinned: Extract<CodexCredentialDelivery, {
    kind: "codex-subscription";
}>, now?: number): CodexSubscriptionRefreshResult;
//# sourceMappingURL=credentials.d.ts.map