/**
 * Request authentication for the dashboard API.
 *
 * Three accepted credentials, any one passes:
 *
 *   - `Authorization: Bearer <PRZM_CORTEX_API_AUTH_TOKEN>` — direct API
 *     access (Claude Code on MCP, scripts, etc.)
 *   - `X-Cortex-Gateway-Secret: <PRZM_CORTEX_GATEWAY_SECRET>` — server-to-
 *     server, used by the pyre-web proxy fronting the dashboard
 *   - Signed session cookie set via `/cortex-session/issue` — browser
 *     sessions handed off from pyre-web
 *
 * When neither PRZM_CORTEX_API_AUTH_TOKEN nor PRZM_CORTEX_GATEWAY_SECRET is set
 * the gate is off entirely (local dev — the operator drives the
 * dashboard from localhost). `/health` is always public so Fly's
 * machine probes can reach it.
 *
 * Constant-time compare so an attacker can't time-sidechannel either
 * token's length or contents.
 */
import type { IncomingMessage } from "node:http";
export declare function apiAuthOk(req: IncomingMessage): boolean;
//# sourceMappingURL=auth.d.ts.map