import type { Socket } from 'node:net';
export declare const MCP_GATEWAY_AUTH_FILENAME = "auth";
export declare function mcpGatewayAuthTokenPath(socketPath: string): string;
export declare function readMcpGatewayAuthToken(socketPath: string): string;
/** Authenticate a newly accepted worker-side socket before MCP sees any bytes. */
export declare function acceptMcpGatewayHandshake(socket: Socket, expectedToken: string): Promise<boolean>;
/** Authenticate the CLI-side relay before piping untrusted MCP stdio. */
export declare function sendMcpGatewayHandshake(socket: Socket, token: string): Promise<void>;
//# sourceMappingURL=socket-auth.d.ts.map