/**
 * Auth middleware — HttpClient wrapping layer.
 *
 * Intercepts outgoing HTTP requests to inject Bearer tokens and handle
 * automatic refresh on 401.
 *
 * Layer composition: wraps the base HttpClient so all downstream consumers
 * get auth headers automatically for registry URLs.
 *
 * @experimental This API is unstable and may change without notice.
 */
import * as HttpClient from "effect/unstable/http/HttpClient";
import * as Layer from "effect/Layer";
import { AuthClient } from "./auth-client.js";
import { CredentialStore } from "./credential-store.js";
import { RegistryUrl } from "./registry-url.js";
/**
 * Creates an auth middleware layer that wraps HttpClient with token injection
 * and automatic refresh on 401.
 *
 * The `flagToken` parameter allows per-command --token flag injection.
 */
export declare const makeAuthMiddlewareLive: (flagToken?: string) => Layer.Layer<HttpClient.HttpClient, never, HttpClient.HttpClient | CredentialStore | RegistryUrl | AuthClient>;
/**
 * Default auth middleware layer (no --token flag).
 */
export declare const AuthMiddlewareLive: Layer.Layer<HttpClient.HttpClient, never, HttpClient.HttpClient | CredentialStore | RegistryUrl | AuthClient>;
//# sourceMappingURL=auth-middleware.d.ts.map