import { type MantleAuth as Auth } from "@aotter/mantle-auth";
export interface ConventionalAuthEnv {
    readonly DB: D1Database;
    readonly MANTLE_KV?: KVNamespace;
    readonly PUBLIC_ORIGIN?: string;
    readonly BETTER_AUTH_SECRET?: string;
    readonly MANTLE_AUTH_MODE?: string;
    readonly MANTLE_HOSTED_AUTH_ISSUER?: string;
    readonly MANTLE_HOSTED_AUTH_CLIENT_ID?: string;
    readonly GITHUB_CLIENT_ID?: string;
    readonly GITHUB_CLIENT_SECRET?: string;
    readonly ADMIN_GITHUB_LOGIN?: string;
}
/** Choose hosted or self-managed GitHub Auth, otherwise fail closed. */
export declare function createConventionalAuth(env: ConventionalAuthEnv): Auth;
/** Canonical origin shared by Better Auth and the MCP resource verifier. */
export declare function conventionalAuthBaseURL(env: ConventionalAuthEnv): string;
export declare function conventionalMcpResource(env: ConventionalAuthEnv): string;
/** Return the setup response only for Auth-owned private surfaces. */
export declare function setupIncompleteAuthResponse(request: Request, auth: Auth): Promise<Response | null>;
//# sourceMappingURL=conventionalAuth.d.ts.map