import * as yup$1 from "yup";
import { KnownErrors } from "../known-errors.js";
import { inlineProductSchema } from "../schema-fields.js";
import { Result } from "../utils/results.js";
import { AccessToken, InternalSession, RefreshToken } from "../sessions.js";
import { TeamPermissionsCrud } from "./crud/team-permissions.js";
import { TeamsCrud } from "./crud/teams.js";
import { ProjectPermissionsCrud } from "./crud/project-permissions.js";
import { AdminUserProjectsCrud, ClientProjectsCrud } from "./crud/projects.js";
import { ReadonlyJson } from "../utils/json.js";
import { AuthenticationResponseJSON, PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON, RegistrationResponseJSON } from "../utils/passkey.js";
import { ConnectedAccountAccessTokenCrud, ConnectedAccountCrud } from "./crud/connected-accounts.js";
import { ContactChannelsCrud } from "./crud/contact-channels.js";
import { CurrentUserCrud } from "./crud/current-user.js";
import { CustomerInvoicesListResponse, ListCustomerInvoicesOptions } from "./crud/invoices.js";
import { ItemCrud } from "./crud/items.js";
import { NotificationPreferenceCrud } from "./crud/notification-preferences.js";
import { OAuthProviderCrud } from "./crud/oauth-providers.js";
import { CustomerProductsListResponse, ListCustomerProductsOptions } from "./crud/products.js";
import { TeamApiKeysCrud, UserApiKeysCrud, teamApiKeysCreateInputSchema, teamApiKeysCreateOutputSchema, userApiKeysCreateInputSchema, userApiKeysCreateOutputSchema } from "./crud/project-api-keys.js";
import { SessionsCrud } from "./crud/sessions.js";
import { TeamInvitationCrud } from "./crud/team-invitation.js";
import { TeamMemberProfilesCrud } from "./crud/team-member-profiles.js";

//#region src/interface/client-interface.d.ts
type ApiUrlFailure = {
  url: string;
  error: Error;
};
declare class ApiUrlsFailedError extends AggregateError {
  readonly urlFailures: readonly ApiUrlFailure[];
  readonly digest?: unknown;
  constructor(urlFailures: readonly ApiUrlFailure[]);
}
type RequestLogEntry = {
  path: string;
  method: string;
  status?: number;
  duration: number;
  error?: string;
};
type RequestListener = (entry: RequestLogEntry) => void;
type ClientInterfaceOptions = {
  clientVersion: string;
  getBaseUrl: () => string;
  getAnalyticsBaseUrl?: () => string;
  /**
   * Ordered list of base URLs for request routing with fallback.
   * Index 0 = primary, index 1..N = fallbacks in priority order.
   * A single-element array means no fallback occurs.
   */
  getApiUrls: () => string[];
  extraRequestHeaders: Record<string, string>;
  projectId: string;
  prepareRequest?: () => Promise<void>;
} & ({
  publishableClientKey?: string;
} | {
  projectOwnerSession: InternalSession | (() => Promise<string | null>);
});
type BotChallengeInput = {
  token?: string;
  phase?: "invisible" | "visible";
  unavailable?: true;
};
declare class HexclaveClientInterface {
  readonly options: ClientInterfaceOptions;
  private pendingNetworkDiagnostics?;
  private _requestListeners;
  /**
   * Last API URL that succeeded for this client. Requests start here and only
   * move to the next URL in the ring when the current host looks like an outage.
   * Null means we have never succeeded yet — start at the primary (index 0).
   */
  private _currentTargetApiUrl;
  constructor(options: ClientInterfaceOptions);
  addRequestListener(listener: RequestListener): () => void;
  get projectId(): string;
  getApiUrl(): string;
  getApiUrls(): string[];
  /**
   * Returns the current target API URL for browser-navigated URLs (e.g. OAuth
   * authorize) where `_withFallback` can't iterate hosts. Falls back to the
   * primary if the remembered URL is no longer in the list.
   */
  getCurrentTargetApiUrl(): string;
  /**
   * @deprecated Use {@link getCurrentTargetApiUrl} instead.
   */
  getBestApiUrl(): string;
  /**
   * Routes a request through an ordered URL ring with automatic failover.
   *
   * Starts at `_currentTargetApiUrl` (or primary if unset). On an outage-like
   * failure, walks `(start + k) % n` for two full laps. On success, remembers
   * that URL as the new current target. KnownErrors and smart-wrapped 4xx
   * responses are never retried on another host (application-level errors).
   *
   * Single-URL lists skip the ring and use 5-retry behavior directly.
   */
  protected _withFallback<T>(cb: (apiUrl: string, retryOptions: {
    maxAttempts: number;
    skipDiagnostics: boolean;
  }) => Promise<T>): Promise<T>;
  /**
   * Returns true when the error is an application-level response that should
   * not hop to another host. Outages (network TypeError, 5xx, non-smart 4xx)
   * return false so the ring walk continues.
   */
  private _shouldSkipFallback;
  private _isSmartWrappedResponse;
  private _getApiResponseFromError;
  getAnalyticsApiUrl(): string;
  runNetworkDiagnostics(session?: InternalSession | null, requestType?: "client" | "server" | "admin"): Promise<{
    "navigator?.onLine": any;
    cfTrace: string;
    baseUrlBackend: string;
    prodDashboard: string;
    prodBackend: string;
  }>;
  private _runNetworkDiagnosticsInner;
  protected _createNetworkError(cause: Error, session?: InternalSession | null, requestType?: "client" | "server" | "admin"): Promise<Error>;
  protected _networkRetry<T>(cb: () => Promise<Result<T, any>>, session?: InternalSession | null, requestType?: "client" | "server" | "admin", options?: {
    maxAttempts?: number;
    skipDiagnostics?: boolean;
  }): Promise<T>;
  protected _networkRetryException<T>(cb: () => Promise<T>, session?: InternalSession | null, requestType?: "client" | "server" | "admin", options?: {
    maxAttempts?: number;
    skipDiagnostics?: boolean;
  }): Promise<T>;
  fetchNewAccessToken(refreshToken: RefreshToken): Promise<AccessToken | null>;
  private _fetchNewAccessTokenInner;
  sendClientRequest(path: string, requestOptions: RequestInit, session: InternalSession | null, requestType?: "client" | "server" | "admin", apiUrlOverride?: string, retryOptions?: {
    maxAttempts?: number;
    skipDiagnostics?: boolean;
  }): Promise<Response & {
    usedTokens: {
      accessToken: AccessToken;
      refreshToken: RefreshToken | null;
    } | null;
  }>;
  createSession(options: Omit<ConstructorParameters<typeof InternalSession>[0], "refreshAccessTokenCallback">): InternalSession;
  sendSessionReplayBatch(body: string, session: InternalSession | null, options: {
    keepalive: boolean;
  }): Promise<Result<Response, Error>>;
  sendAnalyticsEventBatch(body: string, session: InternalSession | null, options: {
    keepalive: boolean;
  }): Promise<Result<Response, Error>>;
  protected sendClientRequestAndCatchKnownError<E extends typeof KnownErrors[keyof KnownErrors]>(path: string, requestOptions: RequestInit, tokenStoreOrNull: InternalSession | null, errorsToCatch: readonly E[]): Promise<Result<Response & {
    usedTokens: {
      accessToken: AccessToken;
      refreshToken: RefreshToken | null;
    } | null;
  }, InstanceType<E>>>;
  private sendClientRequestInner;
  private _preprocessResponse;
  private _processResponse;
  checkFeatureSupport(options: {
    featureName?: string;
  } & ReadonlyJson): Promise<never>;
  consumeBrowserAction(actionId: string, session?: InternalSession | null): Promise<{
    javascript: string;
  }>;
  sendForgotPasswordEmail(email: string, callbackUrl: string): Promise<Result<undefined, KnownErrors["UserNotFound"]>>;
  sendVerificationEmail(email: string, callbackUrl: string, session: InternalSession): Promise<KnownErrors["EmailAlreadyVerified"] | undefined>;
  sendMagicLinkEmail(email: string, callbackUrl: string, botChallenge?: BotChallengeInput): Promise<Result<{
    nonce: string;
  }, KnownErrors["RedirectUrlNotWhitelisted"] | KnownErrors["BotChallengeRequired"] | KnownErrors["BotChallengeFailed"]>>;
  resetPassword(options: {
    code: string;
  } & ({
    password: string;
  } | {
    onlyVerifyCode: true;
  })): Promise<Result<undefined, KnownErrors["VerificationCodeError"]>>;
  updatePassword(options: {
    oldPassword: string;
    newPassword: string;
  }, session: InternalSession): Promise<KnownErrors["PasswordConfirmationMismatch"] | KnownErrors["PasswordRequirementsNotMet"] | undefined>;
  setPassword(options: {
    password: string;
  }, session: InternalSession): Promise<KnownErrors["PasswordRequirementsNotMet"] | undefined>;
  verifyPasswordResetCode(code: string): Promise<Result<undefined, KnownErrors["VerificationCodeError"]>>;
  verifyEmail(code: string): Promise<Result<undefined, KnownErrors["VerificationCodeError"]>>;
  initiatePasskeyRegistration(options: {}, session: InternalSession): Promise<Result<{
    options_json: PublicKeyCredentialCreationOptionsJSON;
    code: string;
  }, KnownErrors[]>>;
  registerPasskey(options: {
    credential: RegistrationResponseJSON;
    code: string;
  }, session: InternalSession): Promise<Result<undefined, KnownErrors["PasskeyRegistrationFailed"]>>;
  initiatePasskeyAuthentication(options: {}, session: InternalSession): Promise<Result<{
    options_json: PublicKeyCredentialRequestOptionsJSON;
    code: string;
  }, KnownErrors[]>>;
  sendTeamInvitation(options: {
    email: string;
    teamId: string;
    callbackUrl: string;
    session: InternalSession;
  }): Promise<void>;
  acceptTeamInvitation<T extends 'use' | 'details' | 'check'>(options: {
    code: string;
    session: InternalSession;
    type: T;
  }): Promise<Result<T extends 'details' ? {
    team_display_name: string;
  } : undefined, KnownErrors["VerificationCodeError"] | KnownErrors["TeamInvitationEmailMismatch"]>>;
  totpMfa(attemptCode: string, totp: string, session: InternalSession): Promise<{
    accessToken: any;
    refreshToken: any;
    newUser: any;
  }>;
  signInWithCredential(email: string, password: string, session: InternalSession): Promise<Result<{
    accessToken: string;
    refreshToken: string;
  }, KnownErrors["EmailPasswordMismatch"]>>;
  signUpWithCredential(email: string, password: string, emailVerificationRedirectUrl: string | undefined, session: InternalSession, botChallenge?: BotChallengeInput): Promise<Result<{
    accessToken: string;
    refreshToken: string;
  }, KnownErrors["UserWithEmailAlreadyExists"] | KnownErrors["ContactChannelAlreadyUsedForAuthBySomeoneElse"] | KnownErrors["PasswordRequirementsNotMet"] | KnownErrors["BotChallengeRequired"] | KnownErrors["BotChallengeFailed"]>>;
  signUpAnonymously(session: InternalSession): Promise<Result<{
    accessToken: string;
    refreshToken: string;
  }, never>>;
  signInWithMagicLink(code: string, session: InternalSession): Promise<Result<{
    newUser: boolean;
    accessToken: string;
    refreshToken: string;
  }, KnownErrors["VerificationCodeError"]>>;
  signInWithMfa(totp: string, code: string, session: InternalSession): Promise<Result<{
    newUser: boolean;
    accessToken: string;
    refreshToken: string;
  }, KnownErrors["VerificationCodeError"]>>;
  signInWithPasskey(body: {
    authentication_response: AuthenticationResponseJSON;
    code: string;
  }, session: InternalSession): Promise<Result<{
    accessToken: string;
    refreshToken: string;
  }, KnownErrors["PasskeyAuthenticationFailed"]>>;
  getOAuthUrl(options: {
    provider: string;
    redirectUrl: string;
    errorRedirectUrl: string;
    afterCallbackRedirectUrl?: string;
    codeChallenge: string;
    state: string;
    type: "authenticate" | "link";
    providerScope?: string;
    botChallenge?: BotChallengeInput;
    session: InternalSession;
  }): Promise<string>;
  authorizeOAuth(options: {
    provider: string;
    redirectUrl: string;
    errorRedirectUrl: string;
    afterCallbackRedirectUrl?: string;
    codeChallenge: string;
    state: string;
    type: "authenticate" | "link";
    providerScope?: string;
    botChallenge?: BotChallengeInput;
    session: InternalSession;
  }): Promise<Result<string, KnownErrors["BotChallengeRequired"] | KnownErrors["BotChallengeFailed"]>>;
  callOAuthCallback(options: {
    oauthParams: URLSearchParams;
    redirectUri: string;
    codeVerifier: string;
    state: string;
  }): Promise<{
    newUser: boolean;
    afterCallbackRedirectUrl?: string;
    accessToken: string;
    refreshToken: string;
  }>;
  private _callOAuthCallbackInner;
  signOut(session: InternalSession): Promise<void>;
  getClientUserByToken(session: InternalSession): Promise<CurrentUserCrud["Client"]["Read"] | null>;
  listTeamInvitations(options: {
    teamId: string;
  }, session: InternalSession): Promise<TeamInvitationCrud['Client']['Read'][]>;
  listCurrentUserTeamInvitations(session: InternalSession): Promise<TeamInvitationCrud['Client']['Read'][]>;
  acceptTeamInvitationById(invitationId: string, session: InternalSession): Promise<void>;
  revokeTeamInvitation(invitationId: string, teamId: string, session: InternalSession): Promise<void>;
  listTeamMemberProfiles(options: {
    teamId?: string;
    userId?: string;
  }, session: InternalSession): Promise<TeamMemberProfilesCrud['Client']['Read'][]>;
  getTeamMemberProfile(options: {
    teamId: string;
    userId: string;
  }, session: InternalSession): Promise<TeamMemberProfilesCrud['Client']['Read']>;
  leaveTeam(teamId: string, session: InternalSession): Promise<void>;
  removeUserFromTeam(teamId: string, userId: string, session: InternalSession): Promise<void>;
  updateTeamMemberProfile(options: {
    teamId: string;
    userId: string;
    profile: TeamMemberProfilesCrud['Client']['Update'];
  }, session: InternalSession): Promise<void>;
  updateTeam(options: {
    teamId: string;
    data: TeamsCrud['Client']['Update'];
  }, session: InternalSession): Promise<void>;
  listCurrentUserTeamPermissions(options: {
    teamId: string;
    recursive: boolean;
  }, session: InternalSession): Promise<TeamPermissionsCrud['Client']['Read'][]>;
  listCurrentUserProjectPermissions(options: {
    recursive: boolean;
  }, session: InternalSession): Promise<ProjectPermissionsCrud['Client']['Read'][]>;
  listCurrentUserTeams(session: InternalSession): Promise<TeamsCrud["Client"]["Read"][]>;
  getClientProject(): Promise<Result<ClientProjectsCrud['Client']['Read'], KnownErrors["ProjectNotFound"]>>;
  updateClientUser(update: CurrentUserCrud["Client"]["Update"], session: InternalSession): Promise<void>;
  listProjects(session: InternalSession): Promise<AdminUserProjectsCrud['Client']['Read'][]>;
  createProject(project: AdminUserProjectsCrud['Client']['Create'], session: InternalSession): Promise<AdminUserProjectsCrud['Client']['Read']>;
  createProviderAccessToken(provider: string, scope: string, session: InternalSession): Promise<ConnectedAccountAccessTokenCrud['Client']['Read']>;
  /**
   * Get access token for a specific connected account by provider ID and provider account ID.
   * This is the preferred method when dealing with multiple accounts of the same provider.
   */
  createProviderAccessTokenByAccount(providerId: string, providerAccountId: string, scope: string, session: InternalSession): Promise<ConnectedAccountAccessTokenCrud['Client']['Read']>;
  /**
   * List all connected accounts for the current user.
   */
  listConnectedAccounts(session: InternalSession): Promise<ConnectedAccountCrud['Client']['List']>;
  createClientTeam(data: TeamsCrud['Client']['Create'], session: InternalSession): Promise<TeamsCrud['Client']['Read']>;
  deleteTeam(teamId: string, session: InternalSession): Promise<void>;
  deleteCurrentUser(session: InternalSession): Promise<void>;
  createClientContactChannel(data: ContactChannelsCrud['Client']['Create'], session: InternalSession): Promise<ContactChannelsCrud['Client']['Read']>;
  updateClientContactChannel(id: string, data: ContactChannelsCrud['Client']['Update'], session: InternalSession): Promise<ContactChannelsCrud['Client']['Read']>;
  deleteClientContactChannel(id: string, session: InternalSession): Promise<void>;
  deleteSession(sessionId: string, session: InternalSession): Promise<void>;
  listSessions(session: InternalSession): Promise<SessionsCrud['Client']['List']>;
  listClientContactChannels(session: InternalSession): Promise<ContactChannelsCrud['Client']['Read'][]>;
  sendCurrentUserContactChannelVerificationEmail(contactChannelId: string, callbackUrl: string, session: InternalSession): Promise<Result<undefined, KnownErrors["EmailAlreadyVerified"]>>;
  cliLogin(loginCode: string, refreshToken: string, session: InternalSession): Promise<Result<undefined, KnownErrors["SchemaError"]>>;
  private _getApiKeyRequestInfo;
  listProjectApiKeys(options: {
    user_id: string;
  }, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<UserApiKeysCrud['Client']['Read'][]>;
  listProjectApiKeys(options: {
    team_id: string;
  }, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<TeamApiKeysCrud['Client']['Read'][]>;
  listProjectApiKeys(options: {
    user_id: string;
  } | {
    team_id: string;
  }, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<(UserApiKeysCrud['Client']['Read'] | TeamApiKeysCrud['Client']['Read'])[]>;
  createProjectApiKey(data: yup$1.InferType<typeof userApiKeysCreateInputSchema>, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<yup$1.InferType<typeof userApiKeysCreateOutputSchema>>;
  createProjectApiKey(data: yup$1.InferType<typeof teamApiKeysCreateInputSchema>, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<yup$1.InferType<typeof teamApiKeysCreateOutputSchema>>;
  createProjectApiKey(data: yup$1.InferType<typeof userApiKeysCreateInputSchema> | yup$1.InferType<typeof teamApiKeysCreateInputSchema>, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<yup$1.InferType<typeof userApiKeysCreateOutputSchema> | yup$1.InferType<typeof teamApiKeysCreateOutputSchema>>;
  getProjectApiKey(options: {
    user_id: string | null;
  }, keyId: string, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<UserApiKeysCrud['Client']['Read']>;
  getProjectApiKey(options: {
    team_id: string;
  }, keyId: string, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<TeamApiKeysCrud['Client']['Read']>;
  getProjectApiKey(options: {
    user_id: string | null;
  } | {
    team_id: string;
  }, keyId: string, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<UserApiKeysCrud['Client']['Read'] | TeamApiKeysCrud['Client']['Read']>;
  updateProjectApiKey(options: {
    user_id: string;
  }, keyId: string, data: UserApiKeysCrud['Client']['Update'], session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<UserApiKeysCrud['Client']['Read']>;
  updateProjectApiKey(options: {
    team_id: string;
  }, keyId: string, data: TeamApiKeysCrud['Client']['Update'], session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<TeamApiKeysCrud['Client']['Read']>;
  updateProjectApiKey(options: {
    user_id: string;
  } | {
    team_id: string;
  }, keyId: string, data: UserApiKeysCrud['Client']['Update'] | TeamApiKeysCrud['Client']['Update'], session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<UserApiKeysCrud['Client']['Read'] | TeamApiKeysCrud['Client']['Read']>;
  checkProjectApiKey(type: "user", apiKey: string, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<UserApiKeysCrud['Client']['Read'] | null>;
  checkProjectApiKey(type: "team", apiKey: string, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<TeamApiKeysCrud['Client']['Read'] | null>;
  checkProjectApiKey(type: "user" | "team", apiKey: string, session: InternalSession | null, requestType: "client" | "server" | "admin"): Promise<UserApiKeysCrud['Client']['Read'] | TeamApiKeysCrud['Client']['Read'] | null>;
  listNotificationCategories(session: InternalSession): Promise<NotificationPreferenceCrud['Client']['Read'][]>;
  setNotificationsEnabled(notificationCategoryId: string, enabled: boolean, session: InternalSession): Promise<void>;
  getOAuthProvider(userId: string, providerId: string, session: InternalSession): Promise<OAuthProviderCrud['Client']['Read']>;
  updateOAuthProvider(userId: string, providerId: string, data: OAuthProviderCrud['Client']['Update'], session: InternalSession): Promise<OAuthProviderCrud['Client']['Read']>;
  listOAuthProviders(options: {
    user_id?: string;
  } | undefined, session: InternalSession): Promise<OAuthProviderCrud['Client']['Read'][]>;
  deleteOAuthProvider(userId: string, providerId: string, session: InternalSession): Promise<void>;
  getItem(options: ({
    itemId: string;
    userId: string;
  } | {
    itemId: string;
    teamId: string;
  } | {
    itemId: string;
    customCustomerId: string;
  }), session: InternalSession | null, requestType?: "client" | "server" | "admin"): Promise<ItemCrud['Client']['Read']>;
  listProducts(options: ListCustomerProductsOptions, session: InternalSession | null, requestType?: "client" | "server" | "admin"): Promise<CustomerProductsListResponse>;
  listInvoices(options: ListCustomerInvoicesOptions, session: InternalSession | null): Promise<CustomerInvoicesListResponse>;
  cancelSubscription(options: {
    customer_type: "user" | "team" | "custom";
    customer_id: string;
    product_id: string;
    subscription_id?: string;
  }, session: InternalSession | null): Promise<void>;
  switchSubscription(options: {
    customer_type: "user" | "team";
    customer_id: string;
    from_product_id: string;
    to_product_id: string;
    price_id?: string;
    quantity?: number;
  }, session: InternalSession | null): Promise<void>;
  createCheckoutUrl(customer_type: "user" | "team" | "custom", customer_id: string, productIdOrInline: string | yup$1.InferType<typeof inlineProductSchema>, session: InternalSession | null, returnUrl?: string, requestType?: "client" | "server" | "admin"): Promise<string>;
  getCustomerBilling(customerType: "user" | "team", customerId: string, session: InternalSession | null): Promise<{
    has_customer: boolean;
    default_payment_method: {
      id: string;
      brand: string | null;
      last4: string | null;
      exp_month: number | null;
      exp_year: number | null;
    } | null;
  }>;
  createCustomerPaymentMethodSetupIntent(customerType: "user" | "team", customerId: string, session: InternalSession | null): Promise<{
    client_secret: string;
    stripe_account_id: string;
  }>;
  setDefaultCustomerPaymentMethodFromSetupIntent(customerType: "user" | "team", customerId: string, setupIntentId: string, session: InternalSession | null): Promise<{
    default_payment_method: {
      id: string;
      brand: string | null;
      last4: string | null;
      exp_month: number | null;
      exp_year: number | null;
    };
  }>;
  transferProject(internalProjectSession: InternalSession, projectIdToTransfer: string, newTeamId: string): Promise<void>;
}
//#endregion
export { ApiUrlFailure, ApiUrlsFailedError, ClientInterfaceOptions, HexclaveClientInterface, RequestListener, RequestLogEntry };
//# sourceMappingURL=client-interface.d.ts.map