/**
 * Access token management for RDP (and formerly VNC) sessions.
 * Tokens are cryptographically random 64-character hex strings with a TTL.
 */
export interface AccessToken {
    expiresAt: number;
    reason: string;
}
/**
 * Generate a time-limited access token.
 * Returns the token string and the ISO expiry timestamp.
 */
export declare function generateToken(ttlMinutes: number, reason: string): {
    token: string;
    expiresAt: string;
};
/**
 * Validate a token. Returns the token entry if valid, null if expired or unknown.
 */
export declare function validateToken(token: string): AccessToken | null;
/**
 * Revoke a token immediately.
 */
export declare function revokeToken(token: string): void;
//# sourceMappingURL=token.d.ts.map