/**
 * API key authentication for the gateway server.
 */
import type { IncomingMessage, ServerResponse } from 'http';
/**
 * Extract the presented API key from either `X-API-Key: <key>` or
 * `Authorization: Bearer <key>`. Returns undefined if neither is present.
 * Exported so callers can resolve the key's namespace scope after auth passes
 * (task 097 P2).
 */
export declare function getPresentedKey(req: IncomingMessage): string | undefined;
/**
 * Validate the presented API key (`X-API-Key` or `Authorization: Bearer`)
 * against the allowed keys. Returns true if valid, sends error response and
 * returns false otherwise.
 */
export declare function authenticate(req: IncomingMessage, res: ServerResponse, apiKeys: string[]): boolean;
//# sourceMappingURL=auth.d.ts.map