/**
 * Shared inbound-credential resolution.
 *
 * Consumed by both `SdkDispatcher` (kernel envelope) and `mountAuxiliaryRoutes`
 * (View / RemoteFunction routes). Centralises the auth-policy three-way
 * (`'required'` / `'optional'` / `'public'`) and the wrap of underlying
 * verification errors into canonical `AuthMissingError` / `AuthInvalidError`.
 */
import type { AuthPolicy } from '@astrale-os/kernel-api/routed';
import type { AuthContext, Authenticated, CredentialInput } from '@astrale-os/kernel-core';
import type { AuthenticateResult } from './authenticate.js';
import type { RemoteIdentityConfig } from './identity.js';
export type ResolvedAuth = {
    auth: AuthContext | null;
    kernel: AuthenticateResult['kernel'];
};
export declare function resolveInboundAuth(credential: CredentialInput, policy: AuthPolicy | undefined, identity: RemoteIdentityConfig): Promise<ResolvedAuth>;
export declare function buildAuthContext(authenticated: Authenticated): AuthContext;
//# sourceMappingURL=resolve.d.ts.map