import type { HostAuthPreset, HostAuthPresetOptions } from "./shared.js";
/**
 * 09-vendo §2.1 — the host-generic JWT host-identity preset, pairing the
 * docs' generic recipe (https://docs.vendo.run/connect/act-as-presets) with a matching session
 * resolver: the host API's own HS256 bearer JWT, verified with the same
 * shared secret the actAs half (`genericJwtPreset`, 04 §2.1) signs with.
 *
 * Unlike the vendor presets this one is NOT zero-argument by nature: there is
 * no vendor-owned env variable a generic scheme could read (AUTH_SECRET
 * belongs to Auth.js, SUPABASE_JWT_SECRET to Supabase — a host's own secret
 * name is unknowable), so `secret` is required and construction fails loud
 * without it. Sessions arrive as `Authorization: Bearer <jwt>`; display
 * derives from name/email claims; the optional subject→user resolver has the
 * same semantics as authJs (null = subject unknown → decline/null).
 */
export declare function jwt(options?: HostAuthPresetOptions): HostAuthPreset;