import type { GatewayAuthConfig } from '../../../config/schema.js';
import type { ResolvedGatewayAuth } from '../../auth.js';
export interface AuthConfig {
    /** Current gateway auth from config (for rate-limit settings); optional. */
    getGatewayAuth?: () => GatewayAuthConfig | undefined;
    getResolvedAuth?: () => ResolvedGatewayAuth;
    getTrustedProxyContext?: () => {
        trustedProxies?: string[];
        allowRealIpFallback?: boolean;
    };
}
/** Exported for gateway security tests. */
export declare function isQueryTokenAllowedPath(path: string, method: string): boolean;
export declare function auth(config?: AuthConfig): import("hono").MiddlewareHandler<any, string, {}, (Response & import("hono").TypedResponse<{
    error: string;
    code: string;
    message: string;
    retryAfter: number;
}, 429, "json">) | (Response & import("hono").TypedResponse<{
    error: string;
    code: string;
}, 401, "json">)>;