/**
 * Per-Session API Auth Token
 *
 * Generates a random token on server start, writes it to
 * ~/.shieldcortex/.api-token (0600 permissions), and validates
 * incoming requests against it. Cleaned up on shutdown.
 */
/**
 * Generate a new session token, write to disk, and return it.
 * Called once on server start.
 */
export declare function generateSessionToken(): string;
/**
 * Read the current session token from disk (or cache).
 */
export declare function getSessionToken(): string | null;
/**
 * Validate a token using constant-time comparison.
 */
export declare function validateSessionToken(token: string): boolean;
/**
 * Delete the token file on shutdown.
 */
export declare function cleanupSessionToken(): void;
