import type { DaemonRemoteManagementRouteHandlers } from './context.js';
import { type JsonRecord } from './route-helpers.js';
/**
 * The auth object the remote route handlers carry through untouched.
 *
 * Exported because a host composing these handlers has to name the type in its
 * own signatures, and a declaration it cannot import is a declaration it copies:
 * the daemon product mirrored this alias and the 17-method service interface
 * below by hand, verbatim, purely because neither carried the keyword.
 */
export type RemotePeerAuth = unknown;
/** The service surface the remote management routes call into. See {@link RemotePeerAuth}. */
export interface DistributedRuntimeRouteService {
    listPairRequests(): unknown;
    approvePairRequest(requestId: string, input: Record<string, unknown>): Promise<unknown | null>;
    rejectPairRequest(requestId: string, input: Record<string, unknown>): Promise<unknown | null>;
    listPeers(): unknown;
    rotatePeerToken(peerId: string, input: Record<string, unknown>): Promise<unknown | null>;
    revokePeerToken(peerId: string, input: Record<string, unknown>): Promise<unknown | null>;
    disconnectPeer(peerId: string, input: Record<string, unknown>): Promise<unknown | null>;
    listWork(): unknown;
    invokePeer(input: Record<string, unknown>): Promise<unknown>;
    cancelWork(workId: string, input: Record<string, unknown>): Promise<unknown | null>;
    getNodeHostContract(): unknown;
    requestPairing(input: Record<string, unknown>): Promise<unknown>;
    verifyPairRequest(requestId: string, challenge: string, input: Record<string, unknown>): Promise<unknown | null>;
    heartbeatPeer(auth: RemotePeerAuth, input: Record<string, unknown>): Promise<unknown>;
    claimWork(auth: RemotePeerAuth, input: Record<string, unknown>): Promise<unknown>;
    completeWork(auth: RemotePeerAuth, workId: string, input: Record<string, unknown>): Promise<unknown | null>;
}
interface SessionUserLike {
    readonly username: string;
}
interface DaemonRemoteRouteContext {
    readonly authToken?: string | null | undefined;
    readonly parseJsonBody: (req: Request) => Promise<JsonRecord | Response>;
    readonly requireAdmin: (req: Request) => Response | null;
    readonly requireRemotePeer: (req: Request, scope?: string) => Promise<RemotePeerAuth | Response>;
    readonly requireAuthenticatedSession: (req: Request) => SessionUserLike | null;
    readonly distributedRuntime: DistributedRuntimeRouteService;
}
export declare function createDaemonRemoteRouteHandlers(context: DaemonRemoteRouteContext): DaemonRemoteManagementRouteHandlers;
export declare function handleRemotePairRequest(context: Pick<DaemonRemoteRouteContext, 'parseJsonBody' | 'distributedRuntime'>, req: Request): Promise<Response>;
export declare function handleRemotePairVerify(context: Pick<DaemonRemoteRouteContext, 'parseJsonBody' | 'distributedRuntime'>, req: Request): Promise<Response>;
export declare function handleRemotePeerHeartbeat(context: Pick<DaemonRemoteRouteContext, 'parseJsonBody' | 'requireRemotePeer' | 'distributedRuntime'>, req: Request): Promise<Response>;
export declare function handleRemotePeerWorkPull(context: Pick<DaemonRemoteRouteContext, 'parseJsonBody' | 'requireRemotePeer' | 'distributedRuntime'>, req: Request): Promise<Response>;
export declare function handleRemotePeerWorkComplete(context: Pick<DaemonRemoteRouteContext, 'parseJsonBody' | 'requireRemotePeer' | 'distributedRuntime'>, workId: string, req: Request): Promise<Response>;
export declare function estimateJsonByteLengthWithinLimit(value: unknown, maxBytes: number): {
    readonly kind: 'ok';
    readonly byteLength: number;
} | {
    readonly kind: 'invalid';
};
export {};
//# sourceMappingURL=remote-routes.d.ts.map