/**
 * Bearer token authentication middleware for Friday HTTP routes.
 *
 * Validates that the bearer token matches the gateway's configured auth token.
 * This ensures plugin HTTP endpoints use the same token as gateway WS connections.
 */
import type { IncomingMessage } from "node:http";
/**
 * Extract and validate bearer token from Authorization header.
 * Returns the token only if it matches the gateway's configured auth token.
 * Returns null if token is missing, malformed, or doesn't match.
 */
export declare function extractBearerToken(req: IncomingMessage): string | null;
