import type { WakeState } from './types.js';
/** Caller identity resolved from a token. */
type CallerIdentity = {
    role: 'owner' | 'verifier' | 'beneficiary' | 'unknown';
    name: string;
    hashPrefix: string;
};
/** Validate a raw token against a stored hash. */
declare function validateToken(raw: string, storedHash: string): boolean;
/** Identify who is calling based on their token. */
declare function identifyCaller(token: string, state: WakeState): CallerIdentity;
/** Get a short identifier from a raw token for audit logging. */
declare function tokenPrefix(token: string): string;
export { validateToken, identifyCaller, tokenPrefix };
export type { CallerIdentity };