import type { AwsProviderCredentials } from "../AwsProvider.js";
/**
 * Verdict for a deploy region's opt-in status.
 *
 * `unknown` is the fail-open outcome: the Account API was unreachable, denied,
 * throttled, or timed out, so the caller proceeds — a pre-flight must never
 * block a deploy on its own probe. The real error then surfaces at
 * synth/bootstrap if the region truly is unusable.
 */
export type RegionAvailability = "enabled" | "disabled" | "enabling" | "unknown";
/**
 * Resolve whether `region` is usable for a deploy in this account.
 *
 * Non-opt-in regions are enabled by default and short-circuit to "enabled"
 * with NO API call. Opt-in regions are probed via the Account API
 * (`GetRegionOptStatus`) against an always-on endpoint, with the per-call
 * timeout composed against any caller shutdown signal. Any failure maps to
 * "unknown" (fail-open).
 */
export declare function checkRegionEnabled(region: string, credentials: AwsProviderCredentials | undefined, abortSignal?: AbortSignal): Promise<RegionAvailability>;
/**
 * Canonical operator-facing message for a confirmed-disabled opt-in region.
 * Shared by the deploy-entry hard block and the CLI connect pre-flight so the
 * wording cannot drift (reuses `optInRegionWarning` from `@fjall/util`).
 */
export declare function regionDisabledMessage(region: string): string;