import { Result } from "@adviser/cement";
import { importJWK as joseImportJWK } from "jose";
import type { JWK } from "jose";
import { z } from "zod";
import type { SuperThis } from "../types/sthis.js";
import type { JWKPublic, JWKPrivate } from "../types/wire.js";
type JoseKey = Awaited<ReturnType<typeof joseImportJWK>>;
export declare const envKeyDefaults: {
    SECRET: string;
    PUBLIC: string;
};
export declare function importJWK(jwk: JWK, alg?: string, options?: {
    extractable?: boolean;
}): Promise<Result<{
    key: JoseKey;
    alg: string;
}>>;
export declare function jwk2env(jwk: CryptoKey | JWK, sthis?: SuperThis): Promise<string>;
export declare function env2jwk(env: string, alg?: string, sthis?: SuperThis): Promise<JoseKey[]>;
export declare function coerceJWKWithSchema(sthis: SuperThis, validator: z.ZodTypeAny, ...inputs: unknown[]): Promise<Result<unknown>[]>;
export declare function coerceJWK(sthis: SuperThis, ...i: unknown[]): Promise<unknown[]>;
export declare function coerceJWKPublic(sthis: SuperThis, ...i: unknown[]): Promise<JWKPublic[]>;
export declare function coerceJWKPrivate(sthis: SuperThis, ...i: unknown[]): Promise<JWKPrivate[]>;
interface VerifyTokenOptions {
    fetchTimeoutMs: number;
    parseSchema: (payload: unknown) => Result<unknown>;
    fetch: typeof globalThis.fetch;
    verifyToken: (token: string, pubKey: JWK) => Promise<Result<{
        payload: unknown;
    }>>;
    sthis: SuperThis;
}
export declare function verifyToken(token: string, presetPubKey: readonly (JWK | string)[], wellKnownUrls: readonly string[], iopts?: Partial<VerifyTokenOptions>): Promise<Result<unknown>>;
interface FetchWellKnownJwksResultOk {
    readonly type: "ok";
    readonly keys: JWKPublic[];
    readonly url: string;
}
interface FetchWellKnownJwksResultErr {
    readonly type: "error";
    readonly error: unknown;
    readonly url: string;
}
interface FetchWellKnownJwksResultTimeout {
    readonly type: "timeout";
    readonly url: string;
}
type FetchWellKnownJwksResult = FetchWellKnownJwksResultOk | FetchWellKnownJwksResultErr | FetchWellKnownJwksResultTimeout;
export declare function isFetchWellKnownJwksResultOk(r: FetchWellKnownJwksResult): r is FetchWellKnownJwksResultOk;
export declare function isFetchWellKnownJwksResultErr(r: FetchWellKnownJwksResult): r is FetchWellKnownJwksResultErr;
export declare function isFetchWellKnownJwksResultTimeout(r: FetchWellKnownJwksResult): r is FetchWellKnownJwksResultTimeout;
export declare function fetchWellKnownJwks(urls: string | (string | undefined)[], iopts?: Partial<Pick<VerifyTokenOptions, "fetchTimeoutMs" | "fetch">>): Promise<FetchWellKnownJwksResult[]>;
export {};