export interface ProvisionReceiptPayload {
    typ: 'xpod-provision-receipt';
    podName: string;
    webId: string;
    podUrl: string;
    exp: number;
}
export interface CreateProvisionReceiptOptions {
    secret: string;
    podName: string;
    webId: string;
    podUrl: string;
    expiresAt?: number;
    ttlSeconds?: number;
    now?: () => number;
}
export interface VerifyProvisionReceiptOptions {
    secret: string;
    now?: () => number;
}
export type VerifyProvisionReceiptResult = {
    valid: true;
    payload: ProvisionReceiptPayload;
} | {
    valid: false;
    reason: 'malformed' | 'signature' | 'expired';
};
export declare function deriveProvisionReceiptSecret(serviceToken: string): string;
export declare function createProvisionReceipt(options: CreateProvisionReceiptOptions): string;
export declare function verifyProvisionReceipt(receipt: string | undefined | null, options: VerifyProvisionReceiptOptions): VerifyProvisionReceiptResult;