/**
 * Resolve an LTEnvelopePrincipal from external_id or UUID in a single query.
 *
 * Called at the front door (API routes, cron) — never inside workflows.
 * Uses a LEFT JOIN to fetch user + roles in one round-trip.
 *
 * Accepts either:
 * - external_id (e.g., 'superadmin', 'lt-system')
 * - UUID id (e.g., '76d28d6c-...' — as stored in JWT userId)
 */
import type { LTEnvelopePrincipal } from '../../types/envelope';
export declare function resolvePrincipal(identifier: string): Promise<LTEnvelopePrincipal | null>;