/**
 * Legacy pending-token helpers. New bridges must not write these.
 *
 * Import from this module only when an example still needs to clear leftover
 * sessionStorage / JS-readable cookies from older clients.
 */
/** @deprecated Legacy web-storage key. No longer written; cleared on logout. */
export declare const PENDING_AUTH_SESSION_TOKEN_STORAGE_KEY = "athena-auth-ui.pending-auth-session-token";
/** @deprecated Legacy non-HttpOnly pending cookie. Cleared; never set for new tokens. */
export declare const PENDING_AUTH_SESSION_TOKEN_COOKIE_NAME = "athena-auth-ui.pending-auth-session-token";
export interface SessionBridgeCookieOptions {
    path?: string;
    sameSite?: "Lax" | "Strict" | "None";
    secure?: boolean;
}
export declare function buildPendingSessionTokenSetCookie(token: string, options?: SessionBridgeCookieOptions): string;
export declare function buildClearPendingSessionTokenCookie(options?: SessionBridgeCookieOptions): string;
/** Read the pending bridge token from a Cookie header. */
export declare function readPendingAuthSessionTokenCookie(cookieHeader: string | null | undefined): string | undefined;
/**
 * Read leftover pending tokens from older clients. New bridges do not write
 * this storage; prefer HttpOnly cookies and live `getSession()` results.
 */
export declare function readPendingAuthSessionToken(): string | undefined;
/**
 * Persist is a no-op for new tokens (must not land in web storage). Passing
 * undefined/empty clears leftover pending cookie + sessionStorage.
 */
export declare function writePendingAuthSessionToken(token: string | undefined): void;