import { type ControlPlaneClaims, type ControlPlaneSurface } from "../channels/control-plane.js";
import type { HandlerContext } from "../types/index.js";
declare const verifiedControlPlaneRequestBrand: unique symbol;
export type VerifiedControlPlaneRequestClaims = ControlPlaneClaims & {
    readonly [verifiedControlPlaneRequestBrand]: true;
};
export interface VerifiedControlPlaneCacheCredential {
    readonly token: string;
    readonly projectId: string;
    readonly projectSlug: string;
}
export declare function consumeVerifiedControlPlaneCacheCredential(claims: VerifiedControlPlaneRequestClaims): VerifiedControlPlaneCacheCredential | null;
export declare class ControlPlaneRequestError extends Error {
    readonly status: number;
    constructor(status: number, message: string);
}
export declare function getControlPlaneVerificationPublicKey(ctx: HandlerContext): string | undefined;
export declare function verifyControlPlaneRequest(req: Request, ctx: HandlerContext, rawBody: string, options?: {
    expectedSubject?: string;
    expectedSurface?: ControlPlaneSurface;
}): Promise<VerifiedControlPlaneRequestClaims>;
export {};
//# sourceMappingURL=control-plane-auth.d.ts.map