export declare const TENANT_SESSION_COOKIE = "booti_tenant_session";
export declare const ADMIN_SESSION_COOKIE = "booti_admin_session";
/** Returns the raw token to hand back to the client via Set-Cookie. Never persist this value directly. */
export declare function generateSessionToken(): string;
/** sha256 hex digest, safe to persist and to compare against on lookup. */
export declare function hashSessionToken(rawToken: string): string;
export declare function sessionExpiryFromNow(now?: Date): Date;
export declare function sessionCookieOptions(): {
    httpOnly: boolean;
    secure: boolean;
    sameSite: "lax";
    maxAge: number;
    path: string;
};