/**
 * Minimal CLI-side client for the Vigil AWS Lambda callable surface.
 *
 * Mirrors the `httpsCallable` envelope used by the portal:
 *   POST <API_BASE>/callable/<name>
 *   Authorization: Bearer <Firebase ID token>
 *   { data: ... }
 *
 * Used by the cron / webhook / HITL tools so they can talk to the same
 * Lambda + Firestore the portal does. Auth is best-effort: if the user
 * has not signed in, callable requests fail with a clear message rather
 * than throwing — the calling tool decides whether the missing auth is
 * fatal or fallback-able.
 */
export declare const LAMBDA_API_BASE = "https://cfqeqx4lt9.execute-api.us-east-1.amazonaws.com";
export interface LambdaCallResult<T> {
    ok: boolean;
    status?: number;
    result?: T;
    error?: string;
}
interface CachedAuth {
    uid?: string;
    token?: string;
    tokenExpiresAt?: number;
    refreshToken?: string;
}
export declare function readCliAuth(): CachedAuth | null;
export declare function callLambda<T = unknown>(name: string, data: Record<string, unknown> | undefined, options?: {
    signal?: AbortSignal;
    baseUrl?: string;
    timeoutMs?: number;
}): Promise<LambdaCallResult<T>>;
export {};
//# sourceMappingURL=lambdaClient.d.ts.map