/**
 * Webhook Security Policy
 *
 * Startup-time counterpart to the per-request Twilio signature middleware.
 * Signature validation needs the Twilio auth token; without it the webhooks
 * cannot tell Twilio from anyone else who can reach them. Rather than mount
 * routes that quietly reject (or worse, quietly accept) every request, decide
 * once, loudly, at mount time.
 */
import type { TalkerConfig } from "../types";
/**
 * Assert that telephony webhooks may be mounted.
 *
 * Throws when no auth token is configured, unless the host has explicitly
 * opted into unsigned webhooks — in which case it warns instead, because an
 * unsigned deployment should never be a silent one.
 */
export declare function assertWebhookSecurity(config: TalkerConfig): void;