/**
 * Tests for who may talk to the session host.
 *
 * The desktop app opens every connection with the person's HQ ID token. The
 * host checks it the way any careful server would — signature against the
 * user pool's published keys, issuer, expiry, and that it is an ID token — and
 * then that it belongs to the box's owner. It needs no new dependency: Node's
 * own crypto verifies RS256.
 *
 * The box learns its owner and user pool from its OWN cached sign-in. An
 * Outpost signs in as a machine identity whose token names the owning person in
 * `custom:delegatedSub`; older boxes hold the person's own token. A company
 * agent box has no human owner, so nobody may drive sessions on it this way.
 */
export {};
//# sourceMappingURL=session-host-auth.test.d.ts.map