export declare const ORG_CONFIG_CACHE_FILENAME = "org-config-cache.json";
/** Resolved per call, never captured at module load (`FJALL_CONFIG_DIR`). */
export declare function orgConfigCachePath(): string;
/** The identity fields every cache record carries (`GET /api/identity`). */
export interface CachedCredentialIdentity {
    readonly organisationId: string;
    readonly organisationName: string;
}
export declare function isCachedCredentialIdentity(value: unknown): value is CachedCredentialIdentity;
/**
 * The cached identity, whatever its age — but ONLY when the credential in
 * hand is the one that wrote the record. A fingerprint match is PROOF that
 * the cached identity is this credential's identity, which is what makes
 * this a sound zero-network oracle for an organisation gate rather than a
 * display-only hint. A record with no fingerprint (written before the field
 * existed) or another credential's fingerprint is a miss by construction.
 */
export declare function readCachedCredentialIdentity(credentialFingerprint: string): CachedCredentialIdentity | null;