import type { ResolvedGatewayAuth } from '../gateway/auth.js';
/** A public FRP ingress cannot trust local sockets or proxy identity headers. */
export declare function requireTunnelGatewayToken(auth: ResolvedGatewayAuth): string;