/**
 * @file `@skylab-kulubu/inscribed-auth/signin` — signin route handler factory.
 *
 * Server-only App Router route handler that auto-submits the user to NextAuth's
 * provider sign-in flow, skipping the "Sign in with X" confirm page that
 * NextAuth shows when its sign-in URL is hit with GET. The route returns
 * a tiny HTML document that fetches the CSRF token and POSTs the sign-in
 * form via JavaScript - the same dance `next-auth/react`'s `signIn()`
 * helper does, just done from a server route so the consumer can link to
 * `/api/signin` from anywhere (server components, plain anchors, server
 * actions) without bundling client-side helpers.
 *
 * Usage (consumer side):
 *
 *   // app/api/signin/route.js
 *   export { GET } from "@skylab-kulubu/inscribed-auth/signin";
 *
 * Or with explicit provider id / forced callback URL:
 *
 *   import { createSignInRoute } from "@skylab-kulubu/inscribed-auth/signin";
 *   export const GET = createSignInRoute({ provider: "keycloak" });
 *
 * The `callbackUrl` query parameter is forwarded to NextAuth so the user
 * lands back where they came from after signing in. Defaults to "/".
 *
 * `<noscript>` users get a link to NextAuth's standard provider page
 * (the one with the "Sign in with X" button) so sign-in still works
 * without JavaScript - it just can't skip the extra click.
 */
/**
 * @typedef {Object} CreateSignInRouteOptions
 * @property {string} [provider]
 *   Provider id NextAuth registered. Default `"keycloak"`. Set to `null`
 *   (or `""`) to land on NextAuth's provider-picker page instead.
 * @property {string} [defaultCallbackUrl]
 *   Where to send the user when no `?callbackUrl=` query is present. Default `"/"`.
 * @property {string} [signInPath]
 *   Override the NextAuth sign-in mount path. Default `/api/auth/signin`.
 * @property {string} [csrfPath]
 *   Override the NextAuth CSRF endpoint. Default `/api/auth/csrf`.
 * @property {string} [background]
 *   CSS background for the sign-in splash. Defaults to `light-dark(Canvas,
 *   #1c1815)` — light mode follows the system canvas, dark mode uses a warm
 *   near-black. Pass your app's background as a concrete value (hex, `rgb()`,
 *   gradient, or your own `light-dark(...)`) to match its theme. This is a
 *   separate document, so app-defined custom properties (`var(--...)`) aren't
 *   available here — pass the resolved value or wire it from the same
 *   source/env the app uses.
 * @property {string} [color]
 *   CSS foreground color for the logo + text. Defaults to `CanvasText`. The
 *   loader is drawn in `currentColor`, so this is what tints it.
 */
/**
 * @param {CreateSignInRouteOptions} [options]
 */
declare function createSignInRoute(options?: CreateSignInRouteOptions): (request: Request) => Response;
declare function GET(request: Request): Response;
type CreateSignInRouteOptions = {
    /**
     * Provider id NextAuth registered. Default `"keycloak"`. Set to `null`
     * (or `""`) to land on NextAuth's provider-picker page instead.
     */
    provider?: string | undefined;
    /**
     * Where to send the user when no `?callbackUrl=` query is present. Default `"/"`.
     */
    defaultCallbackUrl?: string | undefined;
    /**
     * Override the NextAuth sign-in mount path. Default `/api/auth/signin`.
     */
    signInPath?: string | undefined;
    /**
     * Override the NextAuth CSRF endpoint. Default `/api/auth/csrf`.
     */
    csrfPath?: string | undefined;
    /**
     * CSS background for the sign-in splash. Defaults to `light-dark(Canvas,
     * #1c1815)` — light mode follows the system canvas, dark mode uses a warm
     * near-black. Pass your app's background as a concrete value (hex, `rgb()`,
     * gradient, or your own `light-dark(...)`) to match its theme. This is a
     * separate document, so app-defined custom properties (`var(--...)`) aren't
     * available here — pass the resolved value or wire it from the same
     * source/env the app uses.
     */
    background?: string | undefined;
    /**
     * CSS foreground color for the logo + text. Defaults to `CanvasText`. The
     * loader is drawn in `currentColor`, so this is what tints it.
     */
    color?: string | undefined;
};

export { type CreateSignInRouteOptions, GET, createSignInRoute };