import type { CodexAccountIdentity } from './types';
/**
 * Decode the payload of a JWT id_token without signature verification.
 * Returns only the display-safe fields: email, plan_type, account_id.
 * Returns {} on any parse failure — never throws.
 *
 * Security note: signature is NOT verified. This is purely cosmetic data
 * for dashboard display. Auth boundary is OS file perms on auth.json.
 */
export declare function decodeIdToken(idToken: string): CodexAccountIdentity;
export declare function hasStructurallyValidIdToken(idToken: string): boolean;
//# sourceMappingURL=decode-id-token.d.ts.map