/**
 * Boot-token auth: every /api request (X-Harness-Token header) and every WS
 * upgrade (token query param) is checked against the same per-boot secret.
 */
import type { RequestHandler } from "express";
/** Constant-time string comparison — avoids leaking token length/prefix via timing. */
export declare function timingSafeEqualString(a: string, b: string): boolean;
export declare function createBootTokenMiddleware(bootToken: string): RequestHandler;
//# sourceMappingURL=auth.d.ts.map