import { type FailureKind, type InvokeContext, type ProviderDefinition } from './index';
export { githubAppConfigSchema, githubAppCredentialSchema, githubAppConfigurationFields, githubAppCredentialFields } from './git-schema';
/**
 * GitHub is one provider authority with two deliberately separate service
 * bindings. OAuth Server receives only user-authorization methods; Git Connect
 * receives only installation/repository methods. Both resolve the same
 * provider instance and therefore the same Vault credential exactly once.
 */
export interface GitHubUserAuthorizationRequest {
    intent: 'signin' | 'signup' | 'invite' | 'recover' | 'session';
    returnTo: string;
    state: string;
    codeChallenge: string;
}
export interface GitHubUserAuthorization {
    url: string;
    expiresAtTs: number;
}
export interface GitHubUserAuthorizationCompletion {
    code: string;
    state: string;
    codeVerifier: string;
}
export interface GitHubVerifiedIdentity {
    providerUserId: string;
    email: string;
    displayName?: string;
}
export interface GitHubUserGrant {
    accessToken: string;
    expiresAtTs?: number;
    refreshToken?: string;
    refreshTokenExpiresAtTs?: number;
}
export interface GitHubUserGrantRefreshRequest {
    refreshToken: string;
}
export interface GitHubUserGrantRevokeRequest {
    accessToken: string;
}
export interface GitInstallation {
    id: string;
    accountId: string;
    accountLabel: string;
    accountKind: 'user' | 'organization';
}
export interface GitRepository {
    id: string;
    fullName: string;
    private: boolean;
    defaultBranch: string;
    cloneUrl: string;
}
export interface GitBranch {
    name: string;
    protected?: boolean;
}
export interface GitCloneCredential {
    username: string;
    token: string;
    expiresAtTs: number;
}
export interface GitInstallationStartRequest {
    returnTo: string;
    state: string;
}
export interface GitInstallationStart {
    url: string;
    expiresAtTs: number;
}
export interface GitInstallationCompletionRequest {
    installationId: string;
    setupAction?: 'install' | 'update';
    state: string;
}
export interface GitInstallationRequest {
    installationId: string;
}
export interface GitRepositoryRequest {
    installationId: string;
    cursor?: string;
}
export interface GitBranchRequest {
    installationId: string;
    repository: string;
    cursor?: string;
}
export interface GitCloneCredentialRequest {
    installationId: string;
    repository: string;
}
export interface GitWebhookVerificationRequest {
    rawBody: Uint8Array;
    signature: string;
    deliveryId: string;
    event: string;
}
export interface GitWebhookEvent {
    deliveryId: string;
    event: string;
    payload: unknown;
}
export declare const oauthServerService: import("./index").ServiceDefinition<"oauth-server", {
    beginUserAuthorization: import("./index").ServiceMethodContract<GitHubUserAuthorizationRequest, GitHubUserAuthorization>;
    completeUserAuthorization: import("./index").ServiceMethodContract<GitHubUserAuthorizationCompletion, GitHubUserGrant>;
    readVerifiedIdentity: import("./index").ServiceMethodContract<GitHubUserGrant, GitHubVerifiedIdentity>;
    refreshUserGrant: import("./index").ServiceMethodContract<GitHubUserGrantRefreshRequest, GitHubUserGrant>;
    revokeUserGrant: import("./index").ServiceMethodContract<GitHubUserGrantRevokeRequest, void>;
}>;
export declare const gitConnectService: import("./index").ServiceDefinition<"git-connect", {
    beginInstallation: import("./index").ServiceMethodContract<GitInstallationStartRequest, GitInstallationStart>;
    completeInstallation: import("./index").ServiceMethodContract<GitInstallationCompletionRequest, GitInstallation>;
    listInstallations: import("./index").ServiceMethodContract<Record<string, never>, readonly GitInstallation[]>;
    listRepositories: import("./index").ServiceMethodContract<GitRepositoryRequest, readonly GitRepository[]>;
    listBranches: import("./index").ServiceMethodContract<GitBranchRequest, readonly GitBranch[]>;
    mintCloneCredential: import("./index").ServiceMethodContract<GitCloneCredentialRequest, GitCloneCredential>;
    verifyWebhook: import("./index").ServiceMethodContract<GitWebhookVerificationRequest, GitWebhookEvent>;
    disconnectInstallation: import("./index").ServiceMethodContract<GitInstallationRequest, void>;
}>;
export interface GitHubProviderAdapter {
    beginUserAuthorization(context: InvokeContext, args: GitHubUserAuthorizationRequest): Promise<GitHubUserAuthorization>;
    completeUserAuthorization(context: InvokeContext, args: GitHubUserAuthorizationCompletion): Promise<GitHubUserGrant>;
    readVerifiedIdentity(context: InvokeContext, args: GitHubUserGrant): Promise<GitHubVerifiedIdentity>;
    refreshUserGrant(context: InvokeContext, args: GitHubUserGrantRefreshRequest): Promise<GitHubUserGrant>;
    revokeUserGrant(context: InvokeContext, args: GitHubUserGrantRevokeRequest): Promise<void>;
    beginInstallation(context: InvokeContext, args: GitInstallationStartRequest): Promise<GitInstallationStart>;
    completeInstallation(context: InvokeContext, args: GitInstallationCompletionRequest): Promise<GitInstallation>;
    listInstallations(context: InvokeContext, args: Record<string, never>): Promise<readonly GitInstallation[]>;
    listRepositories(context: InvokeContext, args: GitRepositoryRequest): Promise<readonly GitRepository[]>;
    listBranches(context: InvokeContext, args: GitBranchRequest): Promise<readonly GitBranch[]>;
    mintCloneCredential(context: InvokeContext, args: GitCloneCredentialRequest): Promise<GitCloneCredential>;
    verifyWebhook(context: InvokeContext, args: GitWebhookVerificationRequest): Promise<GitWebhookEvent>;
    disconnectInstallation(context: InvokeContext, args: GitInstallationRequest): Promise<void>;
}
/** Define the single GitHub App provider. No OAuth-App compatibility identity exists. */
export declare function defineGitHubProvider(args: {
    version: string;
    adapter: GitHubProviderAdapter;
    classify?: (error: unknown) => FailureKind;
}): ProviderDefinition;