import type { ParsedCliArgs } from "./cli-args.js";
import type { CliEnvironment } from "./first-run-readiness.js";
import type { InitMonoAgentFolderResult } from "./init.js";
import type { CodexLoginMode, ProviderCredentialState, ProviderSetupPlan, ProviderSetupResult } from "./provider-setup.js";
import type { SecretChecklistItem } from "./wizard/answers.js";
export interface RunInitEnvironmentContext {
    readonly shellEnv: CliEnvironment;
    readonly dotenvEnv: CliEnvironment;
    readonly dotenvPath: string;
}
export declare function runInit(args: ParsedCliArgs, environment: RunInitEnvironmentContext): Promise<number>;
export declare function shouldRunInitWizard(args: ParsedCliArgs, stdinIsTty: boolean, stdoutIsTty: boolean): boolean;
export type InitProviderSetupStatus = "ok" | "failed" | "skipped" | "interrupted" | "fatal";
export interface RunProviderSetupBeforeInitOptions {
    readonly modelRefs: readonly string[];
    readonly cwd: string;
    readonly auth: boolean;
    readonly dryRun: boolean;
    readonly piAuthPath?: string;
    readonly apiKeys?: Readonly<Record<string, string | undefined>>;
    readonly codexAuthMode?: CodexLoginMode;
    readonly forceAuthentication?: boolean;
    readonly credentialStates?: Readonly<Record<string, ProviderCredentialState | undefined>>;
    /** Values parsed from the destination `.env`; ambient shell credentials are intentionally excluded. */
    readonly persistedEnv?: Readonly<Record<string, string | undefined>>;
    readonly piApiKeyPersistenceByProvider?: Readonly<Record<string, "secure-store" | "environment" | undefined>>;
    readonly abortSignal?: AbortSignal;
    readonly execute?: (plan: ProviderSetupPlan) => Promise<readonly ProviderSetupResult[]>;
}
export declare function runProviderSetupBeforeInit(options: RunProviderSetupBeforeInitOptions): Promise<InitProviderSetupStatus>;
export declare function runAuth(args: ParsedCliArgs): Promise<number>;
/**
 * Read one explicitly redirected API key without consulting ambient provider
 * environment variables. A single trailing line ending from `echo` is accepted;
 * embedded newlines, NUL bytes, empty input, and unbounded input fail closed.
 */
export declare function readApiKeyFromStdin(input: NodeJS.ReadableStream): Promise<string>;
export declare function resolvePiAuthPathForLogin(options: {
    readonly piAuthPath?: string;
    readonly envPath?: string;
    readonly configPath: string;
    readonly cwd?: string;
}): Promise<string>;
export interface InitChangeDisplayRow {
    readonly label: "created" | "updated" | "kept" | "would create" | "would update";
    readonly path: string;
    readonly unchanged: boolean;
}
/** Safe reporting rows: paths and outcomes only, never secret contents. */
export declare function initChangeDisplayRows(result: InitMonoAgentFolderResult): readonly InitChangeDisplayRow[];
/** Human-readable, value-free proof of where the wizard Role did (or did not) land. */
export declare function identityRoleDisplayLine(identityRole: InitMonoAgentFolderResult["identityRole"]): string;
export interface SecretChecklistDisplayRow {
    readonly envVar: string;
    readonly label: string;
    readonly description: string;
    readonly status: "configured" | "missing" | "optional";
}
export declare function secretChecklistDisplayRows(secrets: readonly SecretChecklistItem[], configured: ReadonlySet<string>): readonly SecretChecklistDisplayRow[];
//# sourceMappingURL=cli-init-command.d.ts.map