/**
 * Identity Resolution
 *
 * Deterministic identity derivation from API key.
 * user_id = "usr_" + sha256(api_key).slice(0, 16)
 * org_id  = "org_" + sha256(user_id).slice(0, 16)
 */
import type { Attribution, IdentityContext } from '../types/index.js';
export declare function deriveUserId(apiKey: string): string;
export declare function deriveOrgId(userId: string): string;
/**
 * Build a full IdentityContext from an API key.
 * Role defaults to 'owner' (key holder owns their default org).
 */
export declare function resolveIdentityFromKey(apiKey: string, email?: string): IdentityContext;
/**
 * Resolve attribution (created_by + org_id) from cached identity or credentials.
 * Returns 'unknown' fields if neither is available.
 */
export declare function resolveAttribution(): Promise<Attribution>;
//# sourceMappingURL=identity-resolver.d.ts.map