/**
 * Registry authentication module
 * Uses the same refresh token as Watchtower (unified Nori auth), or a raw API token
 * for private-org programmatic access.
 */
import type { RegistryAuth } from "../cli/config.js";
/**
 * Get auth token for a registry.
 * Precedence: NORI_API_TOKEN env var (scoped match) > config apiToken (scoped match)
 * > unexpired idToken > refreshToken exchange. API tokens are returned raw and NOT cached.
 *
 * @param args - The authentication parameters
 * @param args.registryAuth - Registry authentication credentials
 *
 * @returns The token to use as `Authorization: Bearer <token>`
 */
export declare const getRegistryAuthToken: (args: {
    registryAuth: RegistryAuth;
}) => Promise<string>;
/**
 * Clear the registry auth cache
 * Useful for testing
 */
export declare const clearRegistryAuthCache: () => void;
//# sourceMappingURL=registryAuth.d.ts.map