import { AUTH_MOUNT_ID, type AuthFlowState, type AuthSlot } from './auth-ui.contract';
import { type AuthUiRegistry } from './auth-ui.registry';
/**
 * The mount id the client renders into. Re-exported from the server-owned
 * contract so the shell and (via the wire contract) the `@frontmcp/ui/auth`
 * client mount agree on a single value.
 */
export { AUTH_MOUNT_ID };
/** Path the auth extra submissions POST to (action discriminates the extra). */
export declare function authUiExtraPath(fullPath: string): string;
/**
 * The Content-Security-Policy for an auth-UI page.
 *
 * Allows `https://esm.sh` for module scripts + connections + styles (the
 * import-map resolves every dependency there) and `'unsafe-inline'` for scripts
 * (only the server-controlled, JSON-escaped state `<script>` is inline; never
 * user input). It does NOT include `'unsafe-eval'` — the TSX→JS transform is
 * done server-side, so the browser never evals source. Framing is denied to
 * prevent clickjacking of the login / consent form.
 */
export declare const AUTH_UI_CSP: string;
/**
 * Build the auth security headers for an auth-UI page (CSP + anti-clickjacking).
 *
 * @param csp - Override the CSP value (defaults to {@link AUTH_UI_CSP}).
 */
export declare function authUiPageHeaders(csp?: string): Record<string, string>;
/** Convenience wrapper used by the OAuth flows. Same as `authUiPageHeaders()`. */
export declare function authUiSecurityHeaders(): Record<string, string>;
/**
 * Build the complete auth-UI HTML page for a slot.
 *
 * Returns `undefined` when the registry has no file for the slot — the caller
 * then renders the built-in page (defaults preserved). On a transform/read
 * failure the error is cached on the registry (so a broken file isn't
 * re-transpiled every request) and `undefined` is returned (fallback).
 */
export declare function buildAuthUiPage(options: {
    registry: AuthUiRegistry;
    slot: AuthSlot;
    state: AuthFlowState;
    fullPath: string;
    /** Page <title> (defaults to a slot-appropriate label). */
    title?: string;
}): {
    html: string;
    headers: Record<string, string>;
} | undefined;
//# sourceMappingURL=auth-ui.render.d.ts.map