import { Result } from "@adviser/cement";
import type { SuperThis } from "../types/sthis.js";
import type { VerifyWithCertificateOptions } from "../types/device-id-types.js";
import { DeviceIdCA } from "../device-id/ca.js";
import { ClerkOauthFallbackToken } from "./clerk-oauth-token.js";
import type { FPApiToken, VerifiedClaimsResult, JWKPublic } from "../types/wire.js";
export { ClerkApiToken } from "./clerk-token.js";
export { ClerkOauthFallbackToken } from "./clerk-oauth-token.js";
export declare class DeviceIdApiToken implements FPApiToken {
    readonly sthis: SuperThis;
    readonly opts: VerifyWithCertificateOptions;
    constructor(sthis: SuperThis, opts: VerifyWithCertificateOptions);
    decode(token: string): Promise<Result<VerifiedClaimsResult>>;
    verify(token: string): Promise<Result<VerifiedClaimsResult>>;
}
export declare const deviceIdCAFromEnv: (sthis: SuperThis) => Promise<Result<DeviceIdCA, Error>>;
export declare function getCloudPubkeyFromEnv(cloudToken?: string, sthis?: SuperThis): Promise<Result<{
    keys: JWKPublic[];
}>>;
export declare const tokenApi: (sthis: SuperThis, opts: VerifyWithCertificateOptions) => Promise<{
    "device-id": DeviceIdApiToken;
    clerk: ClerkOauthFallbackToken;
}>;