import { FlowBase, type FlowRunOptions, type ScopeEntry, type ServerRequest } from '../../../common';
declare const inputSchema: import("@frontmcp/lazy-zod").ZodObject<{
    request: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
    response: import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>;
    next: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodFunction<import("zod/v4/core").$ZodFunctionArgs, import("zod/v4/core").$ZodFunctionOut>>;
}, import("zod/v4/core").$strip>;
declare const stateSchema: import("@frontmcp/lazy-zod").ZodObject<{
    action: import("@frontmcp/lazy-zod").ZodEnum<{
        search: "search";
        list: "list";
        get: "get";
    }>;
    skillId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
    query: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
    tags: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
    tools: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
    limit: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
    offset: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
    category: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
    minRating: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
    semanticQuery: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
}, import("zod/v4/core").$strip>;
declare const outputSchema: import("@frontmcp/lazy-zod").ZodObject<{
    kind: import("@frontmcp/lazy-zod").ZodLiteral<"json">;
    status: import("@frontmcp/lazy-zod").ZodNumber;
    body: import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodObject<{}, import("zod/v4/core").$loose>, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodAny>, import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodAny>]>;
    contentType: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
    headers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>]>]>>>>;
    cookies: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
        name: import("@frontmcp/lazy-zod").ZodString;
        value: import("@frontmcp/lazy-zod").ZodString;
        path: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
        domain: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
        httpOnly: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
        secure: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
        sameSite: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
            strict: "strict";
            none: "none";
            lax: "lax";
        }>>;
        maxAge: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
        expires: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodDate>;
    }, import("zod/v4/core").$strip>>>>;
}, import("zod/v4/core").$strip>;
declare const plan: {
    readonly pre: ["checkEnabled", "parseRequest"];
    readonly execute: ["handleRequest"];
};
declare global {
    interface ExtendFlows {
        'skills-http:api': FlowRunOptions<SkillsApiFlow, typeof plan, typeof inputSchema, typeof outputSchema, typeof stateSchema>;
    }
}
declare const name: "skills-http:api";
/**
 * Flow for serving skills via JSON API.
 *
 * Endpoints:
 * - GET /skills - List all skills
 * - GET /skills?query=X - Search skills
 * - GET /skills?tags=a,b - Filter by tags
 * - GET /skills/{id} - Get specific skill by ID/name
 */
export default class SkillsApiFlow extends FlowBase<typeof name> {
    logger: import("../../../common").FrontMcpLogger;
    /**
     * Check if this flow should handle the request.
     * Matches GET requests to /skills or /skills/{id}.
     */
    static canActivate(request: ServerRequest, scope: ScopeEntry): boolean;
    checkEnabled(): Promise<void>;
    parseRequest(): Promise<void>;
    handleRequest(): Promise<void>;
    private handleGetSkill;
    private handleSearchSkills;
    /**
     * Lazily resolve the optional semantic-search provider. Wrapped in a
     * helper so the flow stays a single-class file and tests can stub the
     * provider via the scope DI container.
     */
    private tryGetSemanticProvider;
    /**
     * Best-effort AuthInfo for HTTP authorities evaluation.
     *
     * The skills HTTP auth validator (api-key / bearer) is a binary gate and does
     * not surface claims, so authority-gated skills are evaluated fail-closed on
     * the HTTP surface. When the server runs in transparent/auth mode the request
     * MAY carry a verified `authSession` with `user` claims; we forward those so a
     * JWT bearer with roles/permissions still evaluates correctly. Otherwise an
     * empty AuthInfo is returned, which denies any role/permission-gated skill.
     */
    private httpAuthInfo;
    /**
     * Filter search results (whose projected metadata lacks `authorities`) down
     * to skills the caller can discover, by resolving the live skill entry to
     * read its declared authorities. No-op when no engine is configured.
     */
    private filterHttpResultsByAuthorities;
    private handleListSkills;
}
export {};
//# sourceMappingURL=skills-api.flow.d.ts.map