/**
 * Claim-name resolution shared by authoring validation and the runtime token
 * mapper, so both agree on which claim supplies each envelope field.
 */
import type { ClaimMapping } from "./types.js";
/** The claim supplying the caller id, or `undefined` when none is mapped. */
export declare function userClaimName(mapping: ClaimMapping): string | undefined;
/**
 * Normalize a `groups` claim value into a list.
 *
 * IdPs are inconsistent here: Auth0 and Okta send an array, Entra sends an array
 * of object ids, and some proxies flatten to a delimited string. Accept all
 * three rather than making authors pre-process the claim.
 */
export declare function normalizeGroups(value: unknown): string[];
//# sourceMappingURL=claims.d.ts.map