import { Socket } from "socket.io";
/**
 * Simplification vs ARCHITECTURE §4.3's one-time WS ticket design: this MVP
 * verifies the same short-lived access JWT apps/api issues, rather than a
 * separate Redis-backed single-use ticket. Tenant scope is still fixed at
 * connect time and never re-read from client input after — the load-bearing
 * property §4.3 actually cares about — but the ticket-exchange hop (and its
 * defence against a leaked access token being replayed as a WS credential)
 * is deferred. Revisit before Phase 3 hardening.
 */
export declare function verifyAccessToken(socket: Socket): number;
//# sourceMappingURL=ws-auth.d.ts.map