import { z } from 'zod';
/**
 * Transport-neutral auth input extracted at the HTTP boundary.
 */
export declare const McpAuthInputSchema: z.ZodObject<{
    bearerToken: z.ZodOptional<z.ZodString>;
    apiKey: z.ZodOptional<z.ZodString>;
    telegramHandle: z.ZodOptional<z.ZodString>;
    telegramUsername: z.ZodOptional<z.ZodString>;
}, "strict", z.ZodTypeAny, {
    apiKey?: string | undefined;
    bearerToken?: string | undefined;
    telegramHandle?: string | undefined;
    telegramUsername?: string | undefined;
}, {
    apiKey?: string | undefined;
    bearerToken?: string | undefined;
    telegramHandle?: string | undefined;
    telegramUsername?: string | undefined;
}>;
export type McpAuthInput = z.infer<typeof McpAuthInputSchema>;
/**
 * Trusted API-key metadata used by the host auth composition.
 *
 * Enrollment and delivery flags are explicit opt-ins. Unknown metadata is
 * ignored so unrelated Better Auth metadata remains forward-compatible.
 */
export declare const McpApiKeyMetadataSchema: z.ZodObject<{
    agentId: z.ZodOptional<z.ZodString>;
    enrollmentCapable: z.ZodOptional<z.ZodBoolean>;
    isDeliveryAgent: z.ZodOptional<z.ZodBoolean>;
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
    agentId: z.ZodOptional<z.ZodString>;
    enrollmentCapable: z.ZodOptional<z.ZodBoolean>;
    isDeliveryAgent: z.ZodOptional<z.ZodBoolean>;
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
    agentId: z.ZodOptional<z.ZodString>;
    enrollmentCapable: z.ZodOptional<z.ZodBoolean>;
    isDeliveryAgent: z.ZodOptional<z.ZodBoolean>;
}, z.ZodTypeAny, "passthrough">>;
export type McpApiKeyMetadata = z.infer<typeof McpApiKeyMetadataSchema>;
/**
 * Protocol-owned result boundary for host authentication.
 */
export declare const McpResolvedIdentitySchema: z.ZodEffects<z.ZodObject<{
    userId: z.ZodString;
    agentId: z.ZodOptional<z.ZodString>;
    isSessionAuth: z.ZodOptional<z.ZodBoolean>;
    enrollmentCapable: z.ZodOptional<z.ZodBoolean>;
    isDeliveryAgent: z.ZodOptional<z.ZodBoolean>;
    /** Host-authenticated marker for the dedicated full standalone Hermes audience. */
    isHermesAgent: z.ZodOptional<z.ZodBoolean>;
    networkScopeId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
}, "strict", z.ZodTypeAny, {
    userId: string;
    agentId?: string | undefined;
    networkScopeId?: string | null | undefined;
    enrollmentCapable?: boolean | undefined;
    isDeliveryAgent?: boolean | undefined;
    isSessionAuth?: boolean | undefined;
    isHermesAgent?: boolean | undefined;
}, {
    userId: string;
    agentId?: string | undefined;
    networkScopeId?: string | null | undefined;
    enrollmentCapable?: boolean | undefined;
    isDeliveryAgent?: boolean | undefined;
    isSessionAuth?: boolean | undefined;
    isHermesAgent?: boolean | undefined;
}>, {
    userId: string;
    agentId?: string | undefined;
    networkScopeId?: string | null | undefined;
    enrollmentCapable?: boolean | undefined;
    isDeliveryAgent?: boolean | undefined;
    isSessionAuth?: boolean | undefined;
    isHermesAgent?: boolean | undefined;
}, {
    userId: string;
    agentId?: string | undefined;
    networkScopeId?: string | null | undefined;
    enrollmentCapable?: boolean | undefined;
    isDeliveryAgent?: boolean | undefined;
    isSessionAuth?: boolean | undefined;
    isHermesAgent?: boolean | undefined;
}>;
export type McpResolvedIdentity = z.infer<typeof McpResolvedIdentitySchema>;