import { AuthAndPublicApiTransports } from "../../shared/transports.js";
import { PolyesterMutationOptions, PolyesterRequestOptions } from "../../shared/request-options.js";
import { PolyesterRealtime } from "../../realtime/types.js";
import "../../realtime/index.js";
import { ProfileService } from "./profile/profile.js";
import * as v from "valibot";
//#region src/services/auth/auth.d.ts
declare const CreateWalletChallengeInputSchema: v.StrictObjectSchema<{
  readonly smartAccountAddress: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "Invalid wallet address.">]>;
  readonly signerAddress: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "Invalid wallet address.">]>;
  readonly uri: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2048, undefined>, v.CheckAction<string, "Wallet challenge URI must be an HTTP(S) origin without a path, query, fragment, or user information.">]>;
}, undefined>;
type CreateWalletChallengeInput = v.InferInput<typeof CreateWalletChallengeInputSchema>;
declare const LoginWithWalletInputSchema: v.StrictObjectSchema<{
  readonly smartAccountAddress: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "Invalid wallet address.">]>;
  readonly message: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.CheckAction<string, "Wallet challenge message exceeds 4096 UTF-8 bytes.">]>;
  readonly signature: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.RegexAction<string, "Login signature must be a 65-byte hexadecimal EOA signature.">]>;
  readonly userAgent: v.OptionalSchema<v.StringSchema<undefined>, "">;
  readonly ip: v.OptionalSchema<v.StringSchema<undefined>, "">;
  readonly walletProvider: v.OptionalSchema<v.StringSchema<undefined>, "">;
}, undefined>;
type LoginWithWalletInput = v.InferInput<typeof LoginWithWalletInputSchema>;
declare const MeSchema: v.ObjectSchema<{
  readonly accountId: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<bigint, string>]>;
  readonly apiKeyId: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
  readonly username: v.StringSchema<undefined>;
  readonly session: v.OptionalSchema<v.SchemaWithPipe<readonly [v.ObjectSchema<{
    readonly sessionId: v.StringSchema<undefined>;
    readonly sessionLevel: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.TransformAction<number, "unspecified" | "primaryAuthenticated" | "mfaElevated" | "freshStepUp">]>;
    readonly authenticationMethods: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, readonly []>;
    readonly authTime: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
      readonly seconds: v.BigintSchema<undefined>;
      readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
    }, undefined>, undefined>, v.TransformAction<{
      seconds: bigint;
      nanos: number;
    } | undefined, number | undefined>]>;
  }, undefined>, v.TransformAction<{
    sessionId: string;
    sessionLevel: "unspecified" | "primaryAuthenticated" | "mfaElevated" | "freshStepUp";
    authenticationMethods: string[];
    authTime?: number | undefined;
  }, {
    sessionId: string;
    sessionLevel: "unspecified" | "primaryAuthenticated" | "mfaElevated" | "freshStepUp";
    authenticationMethods: string[];
    authTimeMs: number | undefined;
  }>]>, undefined>;
}, undefined>;
type Me = v.InferOutput<typeof MeSchema>;
declare const LoginWithWalletResponseSchema: v.ObjectSchema<{
  readonly accessToken: v.StringSchema<undefined>;
  readonly expiresAt: v.OptionalSchema<v.ObjectSchema<{
    readonly seconds: v.BigintSchema<undefined>;
    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
  }, undefined>, undefined>;
  readonly accountId: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<bigint, string>]>;
  readonly username: v.StringSchema<undefined>;
}, undefined>;
type LoginWithWalletResponse = v.InferOutput<typeof LoginWithWalletResponseSchema>;
declare const WalletChallengeSchema: v.ObjectSchema<{
  readonly message: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.CheckAction<string, "Wallet challenge message exceeds 4096 UTF-8 bytes.">]>;
  readonly expiresAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
    readonly seconds: v.BigintSchema<undefined>;
    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
  }, undefined>, undefined>, v.TransformAction<{
    seconds: bigint;
    nanos: number;
  } | undefined, number | undefined>]>;
}, undefined>;
type WalletChallenge = v.InferOutput<typeof WalletChallengeSchema>;
/**
 * Handles wallet-based authentication, caller introspection, and authenticated profile operations.
 */
declare class AuthService {
  #private;
  profile: ProfileService;
  constructor(transports: AuthAndPublicApiTransports, realtime: PolyesterRealtime);
  /**
   * Returns the authenticated caller's account context, including account ID, optional API key ID, username, and session assurance details from the presented token or API key.
   */
  me(options?: PolyesterRequestOptions): Promise<Me>;
  /**
   * Records explicit consent to the current terms for the caller's root account.
   * Call only after the user consents. Requires an interactive JWT session;
   * API keys are not allowed. Repeated acceptance succeeds without changing
   * the first acceptance time. No MFA is required.
   */
  acceptTerms(options?: PolyesterMutationOptions): Promise<void>;
  /**
   * Requests a server-issued SIWE login message. Sign its exact UTF-8 bytes with
   * personal_sign; do not hash or reconstruct it. Expiry is epoch milliseconds.
   * The backend sets SIWE Chain ID to Ethereum mainnet (1) and binds the
   * Polyester chain in Resources. Do not send a chain ID or rewrite either binding.
   * Wallet adapters must select Ethereum mainnet before signing if required by the wallet.
   * Subaccount creation uses `subaccounts.createChallenge` instead.
   */
  createWalletChallenge(input: CreateWalletChallengeInput, options?: PolyesterRequestOptions): Promise<WalletChallenge>;
  /**
   * Exchanges a signed SIWE message for an authenticated session token and account identity returned by the auth API.
   */
  protected loginWithWallet(input: LoginWithWalletInput, options?: PolyesterMutationOptions): Promise<LoginWithWalletResponse>;
}
//#endregion
export { AuthService, CreateWalletChallengeInput, CreateWalletChallengeInputSchema, LoginWithWalletInput, LoginWithWalletInputSchema, LoginWithWalletResponse, Me, WalletChallenge };
//# sourceMappingURL=auth.d.ts.map