import type { Identity, OwnIdentity } from '@kokuin/token';
type Logger = {
    warn: (message: string, properties?: Record<string, unknown>) => void;
};
export type IdentityOptions = {
    privateKey?: string;
    id?: string;
    p2p?: boolean;
};
/**
 * Resolve the server signing identity from CLI options.
 *
 * The random-identity fallback logs only the DID — never the private key — and
 * flags that the identity is ephemeral so it is not mistaken for a persistent
 * one. Logging the key would leak the server's signing secret to console sinks
 * and log aggregation.
 */
export declare function resolveIdentity(opts: IdentityOptions, logger: Logger): Identity | OwnIdentity;
export {};