/**
 * Thin auth helpers for route modules — secondary features should use these.
 */
import type { IncomingMessage } from 'node:http';
import type { CapabilityId, UserDto } from 'ysk-server-shared';
import type { AppContext } from '../app-context.js';
/** Authenticate bearer → UserDto (throws YskError 401). */
export declare function requireUser(ctx: AppContext, req: IncomingMessage): UserDto;
/** Authenticate + require capability. */
export declare function requireUserCap(ctx: AppContext, req: IncomingMessage, cap: CapabilityId): UserDto;
//# sourceMappingURL=handler.d.ts.map