import type { IncomingHttpHeaders } from 'node:http';
import type { FastifyInstance } from 'fastify';
import { type DashboardAuthService } from '../settings/dashboard-auth.service.js';
export declare function registerDashboardAuthRoutes(fastify: FastifyInstance, authService?: DashboardAuthService): void;
/**
 * Marker decorator, set at registration. Read by `registerReadOnlyGuard`, which must
 * run AFTER this guard so an unauthenticated caller still gets `401` rather than a
 * detailed read-only refusal. Same-type hooks run in registration order, so the
 * ordering is the whole contract — and a comment is not a contract.
 */
export declare const DASHBOARD_AUTH_GUARD_MARKER = "dashboardAuthGuardRegistered";
export declare function registerDashboardAuthGuard(fastify: FastifyInstance, authService?: DashboardAuthService): void;
export declare function dashboardStaticRedirectLocation(rawUrl: string | undefined, headers: IncomingHttpHeaders, authService?: DashboardAuthService): Promise<string | undefined>;
export declare function isPublicApiPath(path: string): boolean;
export declare function isPublicStaticPath(path: string): boolean;
export declare function isPublicStaticAssetPath(path: string): boolean;
//# sourceMappingURL=dashboard-auth.d.ts.map