import type { CreateBranchNeonAuthNewUserRequest, EnableNeonAuthIntegrationRequest, NeonAuthAddDomainToRedirectUriWhitelistRequest, NeonAuthAddOAuthProviderRequest, NeonAuthConfigResponse, NeonAuthConfigUpdate, NeonAuthCreateIntegrationResponse, NeonAuthCreateNewUserResponse, NeonAuthDeleteDomainFromRedirectUriWhitelistRequest, NeonAuthIntegration, NeonAuthOauthProvider, NeonAuthOauthProviderId, NeonAuthRedirectUriWhitelistDomain, NeonAuthUpdateOAuthProviderRequest, UpdateNeonAuthUserRoleResponse } from "../../client/types.gen.js";
import type { CallOptions, RequestContext } from "../context.js";
import type { Outcome } from "../result.js";
type BranchParams = {
    projectId: string;
    branchId: string;
};
export type AuthOauthProvidersListParams = BranchParams;
export type AuthOauthProvidersAddParams = BranchParams & NeonAuthAddOAuthProviderRequest;
export type AuthOauthProvidersUpdateParams = BranchParams & {
    providerId: NeonAuthOauthProviderId;
} & NeonAuthUpdateOAuthProviderRequest;
export type AuthOauthProvidersDeleteParams = BranchParams & {
    providerId: NeonAuthOauthProviderId;
};
export type AuthTrustedDomainsListParams = BranchParams;
export type AuthTrustedDomainsAddParams = BranchParams & NeonAuthAddDomainToRedirectUriWhitelistRequest;
export type AuthTrustedDomainsDeleteParams = BranchParams & NeonAuthDeleteDomainFromRedirectUriWhitelistRequest;
export type AuthUsersCreateParams = BranchParams & CreateBranchNeonAuthNewUserRequest;
export type AuthUsersDeleteParams = BranchParams & {
    authUserId: string;
};
export type AuthUsersUpdateRoleParams = BranchParams & {
    authUserId: string;
    roles: string[];
};
export type AuthGetParams = BranchParams;
export type AuthCreateParams = BranchParams & EnableNeonAuthIntegrationRequest;
export type AuthDisableParams = BranchParams & {
    deleteData?: boolean;
};
export type AuthUpdateConfigParams = BranchParams & NeonAuthConfigUpdate;
/** Branch-scoped Neon Auth OAuth providers (Google, GitHub, …). */
export declare class AuthOauthProviders<DThrow extends boolean> {
    #private;
    constructor(ctx: RequestContext);
    /** @apiCall GET /projects/{project_id}/branches/{branch_id}/auth/oauth_providers */
    list(params: AuthOauthProvidersListParams): Promise<Outcome<NeonAuthOauthProvider[], DThrow>>;
    list<Throw extends boolean = DThrow>(params: AuthOauthProvidersListParams, opts: CallOptions<Throw>): Promise<Outcome<NeonAuthOauthProvider[], Throw>>;
    /** @apiCall POST /projects/{project_id}/branches/{branch_id}/auth/oauth_providers */
    add(params: AuthOauthProvidersAddParams): Promise<Outcome<NeonAuthOauthProvider, DThrow>>;
    add<Throw extends boolean = DThrow>(params: AuthOauthProvidersAddParams, opts: CallOptions<Throw>): Promise<Outcome<NeonAuthOauthProvider, Throw>>;
    /** @apiCall PATCH …/auth/oauth_providers/{oauth_provider_id} */
    update(params: AuthOauthProvidersUpdateParams): Promise<Outcome<NeonAuthOauthProvider, DThrow>>;
    update<Throw extends boolean = DThrow>(params: AuthOauthProvidersUpdateParams, opts: CallOptions<Throw>): Promise<Outcome<NeonAuthOauthProvider, Throw>>;
    /** @apiCall DELETE …/auth/oauth_providers/{oauth_provider_id} */
    delete(params: AuthOauthProvidersDeleteParams): Promise<Outcome<void, DThrow>>;
    delete<Throw extends boolean = DThrow>(params: AuthOauthProvidersDeleteParams, opts: CallOptions<Throw>): Promise<Outcome<void, Throw>>;
}
/** Branch-scoped Neon Auth trusted domains (redirect URI whitelist). */
export declare class AuthTrustedDomains<DThrow extends boolean> {
    #private;
    constructor(ctx: RequestContext);
    /** @apiCall GET …/auth/trusted_domains */
    list(params: AuthTrustedDomainsListParams): Promise<Outcome<NeonAuthRedirectUriWhitelistDomain[], DThrow>>;
    list<Throw extends boolean = DThrow>(params: AuthTrustedDomainsListParams, opts: CallOptions<Throw>): Promise<Outcome<NeonAuthRedirectUriWhitelistDomain[], Throw>>;
    /** @apiCall POST …/auth/trusted_domains */
    add(params: AuthTrustedDomainsAddParams): Promise<Outcome<void, DThrow>>;
    add<Throw extends boolean = DThrow>(params: AuthTrustedDomainsAddParams, opts: CallOptions<Throw>): Promise<Outcome<void, Throw>>;
    /** @apiCall DELETE …/auth/trusted_domains */
    delete(params: AuthTrustedDomainsDeleteParams): Promise<Outcome<void, DThrow>>;
    delete<Throw extends boolean = DThrow>(params: AuthTrustedDomainsDeleteParams, opts: CallOptions<Throw>): Promise<Outcome<void, Throw>>;
}
/** Branch-scoped Neon Auth users. */
export declare class AuthUsers<DThrow extends boolean> {
    #private;
    constructor(ctx: RequestContext);
    /** @apiCall POST …/auth/users */
    create(params: AuthUsersCreateParams): Promise<Outcome<NeonAuthCreateNewUserResponse, DThrow>>;
    create<Throw extends boolean = DThrow>(params: AuthUsersCreateParams, opts: CallOptions<Throw>): Promise<Outcome<NeonAuthCreateNewUserResponse, Throw>>;
    /** @apiCall DELETE …/auth/users/{auth_user_id} */
    delete(params: AuthUsersDeleteParams): Promise<Outcome<void, DThrow>>;
    delete<Throw extends boolean = DThrow>(params: AuthUsersDeleteParams, opts: CallOptions<Throw>): Promise<Outcome<void, Throw>>;
    /** @apiCall PATCH …/auth/users/{auth_user_id}/role */
    updateRole(params: AuthUsersUpdateRoleParams): Promise<Outcome<UpdateNeonAuthUserRoleResponse, DThrow>>;
    updateRole<Throw extends boolean = DThrow>(params: AuthUsersUpdateRoleParams, opts: CallOptions<Throw>): Promise<Outcome<UpdateNeonAuthUserRoleResponse, Throw>>;
}
/**
 * Branch-scoped Neon Auth. Enable/disable the integration, tune its config, and manage
 * OAuth providers, trusted domains, and users. The legacy project-scoped auth endpoints are
 * deprecated and stay raw-only.
 */
export declare class Auth<DThrow extends boolean> {
    #private;
    readonly oauthProviders: AuthOauthProviders<DThrow>;
    readonly trustedDomains: AuthTrustedDomains<DThrow>;
    readonly users: AuthUsers<DThrow>;
    constructor(ctx: RequestContext);
    /** @apiCall GET /projects/{project_id}/branches/{branch_id}/auth */
    get(params: AuthGetParams): Promise<Outcome<NeonAuthIntegration, DThrow>>;
    get<Throw extends boolean = DThrow>(params: AuthGetParams, opts: CallOptions<Throw>): Promise<Outcome<NeonAuthIntegration, Throw>>;
    /** @apiCall POST /projects/{project_id}/branches/{branch_id}/auth */
    create(params: AuthCreateParams): Promise<Outcome<NeonAuthCreateIntegrationResponse, DThrow>>;
    create<Throw extends boolean = DThrow>(params: AuthCreateParams, opts: CallOptions<Throw>): Promise<Outcome<NeonAuthCreateIntegrationResponse, Throw>>;
    /** @apiCall DELETE /projects/{project_id}/branches/{branch_id}/auth */
    disable(params: AuthDisableParams): Promise<Outcome<void, DThrow>>;
    disable<Throw extends boolean = DThrow>(params: AuthDisableParams, opts: CallOptions<Throw>): Promise<Outcome<void, Throw>>;
    /** @apiCall PATCH /projects/{project_id}/branches/{branch_id}/auth/config */
    updateConfig(params: AuthUpdateConfigParams): Promise<Outcome<NeonAuthConfigResponse, DThrow>>;
    updateConfig<Throw extends boolean = DThrow>(params: AuthUpdateConfigParams, opts: CallOptions<Throw>): Promise<Outcome<NeonAuthConfigResponse, Throw>>;
}
export {};
//# sourceMappingURL=auth.d.ts.map