/**
 * Shared VC utility functions for agentd.
 *
 * NOTE: These functions decode the JWT payload WITHOUT verifying the signature.
 * This is intentional — the Gateway is the authoritative verifier. These local
 * checks are optimizations to avoid sending obviously-expired VCs over the network.
 */
/**
 * Extract jti (JWT ID) from an SD-JWT VC credential string.
 *
 * @param credentialJwt - The full SD-JWT credential string
 * @returns The jti string, or null if extraction fails
 */
export declare function extractJtiFromVC(credentialJwt: string): string | null;
/**
 * Extract exp (expiration time) from an SD-JWT VC credential string.
 *
 * @param credentialJwt - The full SD-JWT credential string
 * @returns The exp as seconds since epoch, or null if extraction fails.
 *          Returns null for non-finite or non-positive values.
 */
export declare function extractExpFromVC(credentialJwt: string): number | null;
//# sourceMappingURL=vc-utils.d.ts.map