import { RequestHandler } from "express";
type SessionRole = "tenant_admin" | "super_admin";
/**
 * Resolves req.tenant/req.tenantAdmin (role "tenant_admin") or req.superAdmin (role
 * "super_admin") from the role-appropriate session cookie. Rejects if the cookie is
 * missing, the session is unknown/expired, or its role doesn't match requiredRole.
 */
export declare function sessionAuth(requiredRole: SessionRole): RequestHandler;
export {};