import type { ActAs } from "../../core/index.js";
import { type ClaimsOption, type JwtClaims, type SecretSource } from "./shared.js";
export interface GenericJwtPresetOptions {
    /** An HS256 secret or lazy secret resolver. An unavailable secret declines actAs. */
    secret?: SecretSource;
    /** Static claims or a resolver. Returning null declines actAs for that principal/grant. */
    claims?: ClaimsOption;
    /** Extra protected-header fields. `alg` is always forced to HS256. */
    jwtHeader?: JwtClaims;
    /** Convert the compact JWT to AuthMaterial headers. Defaults to Authorization: Bearer. */
    headers?: (token: string) => Record<string, string>;
    expiresInSeconds?: number;
    cacheSafetySeconds?: number;
}
/** Configurable HS256 actAs for hosts with a conventional shared-secret JWT verifier. */
export declare function genericJwtPreset(options: GenericJwtPresetOptions): ActAs;
export type { ClaimsOption, ClaimsResolver, JwtClaims, SecretSource } from "./shared.js";