import { type ApiKeyCapability } from "@uptimizr/db";
/** What a verified live token authorizes. */
export interface LiveTokenClaims {
    projectId: string;
    capabilities: ApiKeyCapability[];
}
/**
 * Mint a token authorizing `projectId` — with the minting key's `capabilities`
 * — until `now + ttlMs`.
 */
export declare function mintLiveToken(projectId: string, capabilities: readonly ApiKeyCapability[], secret: string, ttlMs: number, now?: number): {
    token: string;
    expiresAt: number;
};
/**
 * Verify a token and return its claims, or `null` if malformed, tampered, or
 * expired. Uses a constant-time signature comparison.
 */
export declare function verifyLiveToken(token: string, secret: string, now?: number): LiveTokenClaims | null;
//# sourceMappingURL=liveToken.d.ts.map