import type { AuthContext } from '../../types/index.js';
/**
 * Evaluate an incoming Authorization header against the current auth config.
 *
 * Behavior:
 * - No auth config → returns disabled context (all tools allowed, no enforcement).
 * - Auth config present but no token → returns invalid context.
 * - Auth config present and token provided → validates and maps scopes to tools.
 *
 * This function is async because it loads config from disk on first call
 * (cached thereafter) and may call the introspection endpoint.
 */
export declare function evaluateAuthContext(authorizationHeader: string | undefined): Promise<AuthContext>;
/**
 * Check whether the caller is authorized to invoke a specific tool.
 * When auth is disabled (stdio mode), all tools are accessible.
 */
export declare function authorizeToolCall(toolName: string, context: AuthContext): boolean;
//# sourceMappingURL=middleware.d.ts.map