import { Response, Request } from 'express';
import { AuthService, PermissionsService, LoggerService } from '@backstage/backend-plugin-api';
import { BasicPermission } from '@backstage/plugin-permission-common';
import { CatalogClient } from '@backstage/catalog-client';
import { LiteLLMClient } from '../client';
import { ProvisioningDefaults, RoleConfig, VirtualKey, TeamInfo } from '../types';
import { TeamAdminConfig } from '../teamAdmin';
import type { KeyValidationConfig } from '@acarmisc/backstage-plugin-litellm-common';
import { TeamBudgetVisibility } from '../teamBudgetVisibility';
import { OpencodeConfig } from '../opencode';
import { MemberBreakdownConfig } from '../teamMemberUsage';
import { LangfuseConfig } from '../langfuse';
/**
 * Shared runtime context for all route handlers. Holds config-derived
 * constants, service clients, and helper functions needed by routes.
 */
export interface RouterContext {
    client: LiteLLMClient;
    catalogClient: CatalogClient;
    auth: AuthService;
    permissions: PermissionsService;
    logger: LoggerService;
    baseUrl: string;
    publicBaseUrl: string | null;
    supportContact: string | undefined;
    userIdDomain: string | undefined;
    provisioningEnabled: boolean;
    provisioningDefaults: ProvisioningDefaults;
    roleConfigs: RoleConfig[];
    auditGroup: string | undefined;
    allowUnlimitedBudget: boolean;
    teamRequired: boolean;
    allowOwnerResetSpend: boolean;
    keyValidationConfig: KeyValidationConfig;
    teamMgmtEnabled: boolean;
    objectPermsEnabled: boolean;
    teamAdminCfg: TeamAdminConfig;
    teamBudgetVisibility: TeamBudgetVisibility;
    opencodeCfg: OpencodeConfig;
    memberBreakdownCfg: MemberBreakdownConfig;
    langfuseCfg: LangfuseConfig;
    /**
     * LiteLLM user id of a Backstage user: the computed id, or the id of an
     * existing LiteLLM user with the same catalog email.
     */
    resolveMemberUserId(userEntityRef: string): Promise<string>;
    authorizeKeyAction(req: Request, keyId: string): Promise<{
        tokenEntityRef: string;
        userId: string;
        key: VirtualKey;
    }>;
    assertPermission(req: Request, permission: BasicPermission): Promise<boolean>;
    sendPermissionDenied(res: Response, permission: BasicPermission): void;
    requireTeamMgmt(res: Response): boolean;
    requireObjectPerms(res: Response): boolean;
    sendTeamError(err: unknown, res: Response): void;
    authorizeTeamSubresource(req: Request, res: Response, permission: BasicPermission, opts?: {
        allowTeamRole?: boolean;
    }): Promise<{
        teamId: string;
        owningGroup: string;
        actor: string;
        team: TeamInfo;
        via: 'group' | 'teamRole';
    } | null>;
}