/**
 * Client-side session gate for an authenticated app shell.
 *
 * Wrap a template's private app shell with <RequireSession> so a logged-out
 * visitor is sent to the framework sign-in page instead of being left staring
 * at an infinite loading spinner.
 *
 * Why this exists in addition to the server-side auth guard (`runAuthGuard`,
 * which serves the onboarding/sign-in HTML for unauthenticated requests):
 * the server guard only protects requests that actually reach the Nitro
 * function. A statically-served / CDN-cached SPA shell, or a client-side
 * (React Router) navigation made after the session expired, never re-hits the
 * guard — so the app boots with no session, every data query 401s, and the UI
 * sticks on its loading state forever. This component closes that gap by
 * resolving the session on the client and redirecting when there is none.
 *
 * Place it INSIDE your providers (so the fallback is themed) but AROUND the
 * routed app layout:
 *
 *   <AppProviders ...>
 *     <RequireSession>
 *       <AppLayout><Outlet /></AppLayout>
 *     </RequireSession>
 *   </AppProviders>
 *
 * Templates with public/anonymous routes (share pages, embeds) must NOT wrap
 * their whole app — gate only the private subtree, or pass `bypass` for the
 * surfaces that authenticate by another mechanism.
 */
import React from "react";
export interface RequireSessionProps {
    children: React.ReactNode;
    /**
     * Rendered while the session is being resolved and while a redirect is in
     * flight. Defaults to the framework `<DefaultSpinner />`.
     */
    fallback?: React.ReactNode;
    /**
     * When true (default), unauthenticated visitors are redirected to the
     * framework sign-in entry point (`/_agent-native/sign-in`) carrying a `c`
     * continuation for the current URL — so they land back here once signed in.
     * When false, `signedOut` is rendered instead and no navigation happens.
     */
    redirect?: boolean;
    /**
     * Rendered for unauthenticated visitors when `redirect` is false. Ignored
     * when `redirect` is true.
     */
    signedOut?: React.ReactNode;
    /**
     * Skip the gate entirely and always render children. Use for surfaces that
     * authenticate by another mechanism (e.g. an embed/popout iframe carrying
     * its own token) so they are never bounced to the sign-in page.
     */
    bypass?: boolean;
}
/**
 * Build the framework sign-in URL that returns the visitor to where they are
 * now (or to `returnTo`). Emits the opaque `?c=` continuation.
 *
 * Returns the bare sign-in path — no continuation — when the browser is
 * already at an auth entry path, because there is no such thing as signing in
 * from the sign-in page. Callers that navigate must use `signInJourney`
 * directly and honour its `signInHref: null`.
 */
export declare function buildSignInReturnHref(opts?: {
    returnTo?: string;
}): string;
export declare function RequireSession({ children, fallback, redirect, signedOut, bypass, }: RequireSessionProps): React.JSX.Element;
//# sourceMappingURL=require-session.d.ts.map