import { FlowBase, httpInputSchema, httpOutputSchema, type FlowRunOptions, type ScopeEntry, type ServerRequest } from '../../common';
declare const plan: {
    readonly pre: ["traceRequest", "acquireQuota", "acquireSemaphore", "checkAuthorization", "router"];
    readonly execute: ["handleWebFetch", "handleLegacySse", "handleSse", "handleStreamableHttp", "handleStatefulHttp", "handleStatelessHttp", "handleDeleteSession"];
    readonly finalize: ["audit", "metrics", "releaseSemaphore", "releaseQuota", "finalize"];
    readonly error: [];
};
export declare const httpRequestStateSchema: import("@frontmcp/lazy-zod").ZodObject<{
    decision: import("@frontmcp/lazy-zod").ZodObject<{
        intent: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"legacy-sse">, import("@frontmcp/lazy-zod").ZodLiteral<"sse">, import("@frontmcp/lazy-zod").ZodLiteral<"streamable-http">, import("@frontmcp/lazy-zod").ZodLiteral<"stateful-http">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless-http">, import("@frontmcp/lazy-zod").ZodLiteral<"delete-session">, import("@frontmcp/lazy-zod").ZodLiteral<"unknown">]>;
        reasons: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
        recommendation: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
            httpStatus: import("@frontmcp/lazy-zod").ZodNumber;
            message: import("@frontmcp/lazy-zod").ZodString;
        }, import("zod/v4/core").$strip>>;
        debug: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
            key: import("@frontmcp/lazy-zod").ZodNumber;
            channel: import("@frontmcp/lazy-zod").ZodNumber;
            flags: import("@frontmcp/lazy-zod").ZodNumber;
        }, import("zod/v4/core").$strip>>;
    }, import("zod/v4/core").$strip>;
    intent: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"legacy-sse">, import("@frontmcp/lazy-zod").ZodLiteral<"sse">, import("@frontmcp/lazy-zod").ZodLiteral<"streamable-http">, import("@frontmcp/lazy-zod").ZodLiteral<"stateful-http">, import("@frontmcp/lazy-zod").ZodLiteral<"stateless-http">, import("@frontmcp/lazy-zod").ZodLiteral<"delete-session">, import("@frontmcp/lazy-zod").ZodLiteral<"unknown">]>;
    verifyResult: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{
        kind: import("@frontmcp/lazy-zod").ZodLiteral<"unauthorized">;
        prmMetadataHeader: import("@frontmcp/lazy-zod").ZodString;
    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
        kind: import("@frontmcp/lazy-zod").ZodLiteral<"authorized">;
        authorization: import("@frontmcp/lazy-zod").ZodObject<{
            token: import("@frontmcp/lazy-zod").ZodString;
            session: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                id: import("@frontmcp/lazy-zod").ZodString;
                payload: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
                    nodeId: import("@frontmcp/lazy-zod").ZodString;
                    authSig: import("@frontmcp/lazy-zod").ZodString;
                    uuid: import("@frontmcp/lazy-zod").ZodString;
                    iat: import("@frontmcp/lazy-zod").ZodNumber;
                    protocol: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
                        "legacy-sse": "legacy-sse";
                        sse: "sse";
                        "streamable-http": "streamable-http";
                        "stateful-http": "stateful-http";
                        "stateless-http": "stateless-http";
                    }>>;
                    isPublic: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
                    platformType: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
                        unknown: "unknown";
                        continue: "continue";
                        openai: "openai";
                        claude: "claude";
                        gemini: "gemini";
                        cursor: "cursor";
                        cody: "cody";
                        "generic-mcp": "generic-mcp";
                        "ext-apps": "ext-apps";
                    }>>;
                    clientName: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
                    clientVersion: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
                    supportsElicitation: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
                    skillsOnlyMode: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
                }, import("zod/v4/core").$strip>>;
            }, import("zod/v4/core").$strip>>;
            user: import("@frontmcp/lazy-zod").ZodObject<{
                iss: import("@frontmcp/lazy-zod").ZodString;
                sid: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
                sub: import("@frontmcp/lazy-zod").ZodString;
                exp: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
                iat: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
                aud: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>>;
                email: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
                username: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
                preferred_username: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
                name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
                picture: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
            }, import("zod/v4/core").$loose>;
        }, import("zod/v4/core").$strip>;
    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
        kind: import("@frontmcp/lazy-zod").ZodLiteral<"forbidden">;
        prmMetadataHeader: import("@frontmcp/lazy-zod").ZodString;
    }, import("zod/v4/core").$strip>]>;
}, import("zod/v4/core").$strip>;
declare const name: "http:request";
declare global {
    interface ExtendFlows {
        'http:request': FlowRunOptions<HttpRequestFlow, typeof plan, typeof httpInputSchema, typeof httpOutputSchema, typeof httpRequestStateSchema>;
    }
}
export default class HttpRequestFlow extends FlowBase<typeof name> {
    logger: import("../../common").FrontMcpLogger;
    private requestStartTime;
    private requestId;
    static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
    traceRequest(): Promise<void>;
    acquireQuota(): Promise<void>;
    checkAuthorization(): Promise<void>;
    /**
     * Build a live {@link OrchestratedAuthAccessorAdapter} for the verified request
     * and register it under {@link ORCHESTRATED_AUTH_ACCESSOR} so tools can read
     * upstream provider tokens via `this.orchestration.getToken(id)`.
     *
     * `session:verify` returns a lightweight authorization (`{ token, user, … }`)
     * rather than a full OrchestratedAuthorization, so we reconstruct one here from
     * the verified JWT + the primary auth's encrypted token store (the same store
     * the federated provider-callback flow wrote upstream tokens into, keyed by
     * `deriveAuthorizationId(token)`). No-op unless the scope is in orchestrated
     * mode with a token store and a non-empty bearer token — so public/transparent
     * and anonymous requests are unaffected.
     *
     * Security: tokens stay server-side and AES-GCM-encrypted at rest; only the
     * non-PII provider ids are read here to project the authorization.
     */
    private bindOrchestrationAccessor;
    router(): Promise<void>;
    /**
     * Web-fetch (V8-isolate) MCP execute stage. The worker carries its native Web
     * `Request` on the normalized `ServerRequest` under {@link
     * ServerRequestTokens.webRequest}; its presence is the web-mode signal. When
     * present, this stage runs the MCP request through the SDK's
     * `WebStandardStreamableHTTPServerTransport` (via {@link runWebStandardMcp})
     * and responds with the resulting Web `Response` — so the worker runs the SAME
     * `http:request` flow (auth, quota, router, audit, metrics + hooks all apply)
     * and only the transport rendering differs per runtime.
     *
     * On the Node/Express path there is no `webRequest`, so this is a no-op and the
     * request falls through to the Node-`ServerResponse`-coupled handle stages.
     * Auth has already been enforced by `router` (a 401/403 short-circuits before
     * execute), and the verified authorization is read from the request token.
     */
    handleWebFetch(): Promise<void>;
    handleLegacySse(): Promise<void>;
    handleSse(): Promise<void>;
    handleStreamableHttp(): Promise<void>;
    handleStatefulHttp(): Promise<void>;
    handleStatelessHttp(): Promise<void>;
    handleDeleteSession(): Promise<void>;
    finalize(): Promise<void>;
    /**
     * Log an error that occurred during request processing.
     * Called from stage handlers that catch errors.
     */
    private logError;
}
export {};
//# sourceMappingURL=http.request.flow.d.ts.map