import { Command } from 'commander';
import { CommandContext } from '../types/index.js';
export declare const CLI_KEY_CAPABILITIES: {
    resources: string[];
    actions: string[];
}[];
export declare function createLoginCommand(context: CommandContext): Command;
interface ShellSession {
    orgId: string;
    userId: string;
    sessionToken: string;
    sessionExpiresAt: number;
    refreshToken: string;
    refreshTokenExpiresAt: number;
    email?: string;
}
/**
 * Read and normalize the desktop shell's `~/.kablewy/session.yaml` (the
 * SessionFile written by kablewy-shell/src-tauri/src/auth.rs). Returns null if
 * absent, unparseable, or missing required fields. Exported for testing.
 */
export declare function loadShellSession(path?: string): ShellSession | null;
/** Parse a TTL like "15m", "12h", "30d", or bare seconds. Returns 0 on invalid input. */
export declare function parseTtl(value: string): number;
/** Build the POST /api-keys body for a least-privilege CLI key. */
export declare function buildKeyRequest(userId: string, name: string, expiresAt: string): {
    userId: string;
    name: string;
    capabilities: {
        resources: string[];
        actions: string[];
    }[];
    expiresAt: string;
};
export declare function defaultKeyName(now: Date): string;
export declare function mfaFallbackMessage(): string;
export declare function resolveMagicLinkOrgId(callbackOrgId?: string, requestOrgId?: string): string;
/** Turn a server error envelope ({error:{message}} | {message} | {detail}) into a readable line. */
export declare function describeHttp(action: string, res: {
    status: number;
    body: unknown;
}): string;
export declare function makeCodeVerifier(): string;
export declare function codeChallengeForVerifier(verifier: string): string;
export declare function buildOAuthAuthorizeUrl(base: string, args: {
    redirectUri: string;
    state: string;
    codeChallenge: string;
}): string;
export {};