export interface JWTPayload {
    sub: string;
    sid?: string;
    org_id?: string;
    role?: string;
    permissions?: string[];
    iss: string;
    aud: string;
    exp: number;
    iat: number;
}
interface SignOptions {
    expiresIn?: number;
}
export declare class JWTManager {
    private privateKey;
    private publicKey;
    private kid;
    issuer: string;
    constructor(issuer?: string);
    sign(payload: Omit<JWTPayload, 'iss' | 'iat' | 'exp'>, options?: SignOptions): string;
    verify(token: string): JWTPayload;
    getJWKS(): {
        keys: Record<string, unknown>[];
    };
    getPublicKeyPem(): string;
}
export {};