export type ActorAssurance = 'shared-token' | 'per-user-token';
export interface ResolvedActor {
    id: string;
    assurance: ActorAssurance;
    isUser: boolean;
}
/** hash → person id. If the file is missing, null = per-person identity is off (not an error). */
export declare function loadTokenStore(path?: string): Map<string, string> | null;
/**
 * Resolves the incoming token to a person. If there is no match it NEVER
 * invents a person identity — it falls back to shared-token behavior.
 */
export declare function resolveActor(supplied: string, store: Map<string, string> | null, fallbackId: string): ResolvedActor;
//# sourceMappingURL=tokens.d.ts.map