import type { CodexInstallOwner } from "@velum-labs/routekit-tool-registry";
import type { CloudAgent } from "./agent-protocol.js";
export declare function cloudAgentKeyName(agent: CloudAgent): string;
export declare function cloudAgentConfigPath(agent: CloudAgent, home?: string): string;
/** Fail before minting a key when the default Claude settings already belong to another gateway. */
export declare function claudeCloudInstallConflict(configPath: string): boolean;
declare const CLAUDE_AUTH_ENV_NAMES: readonly ["ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY"];
type ClaudeAuthVariable = (typeof CLAUDE_AUTH_ENV_NAMES)[number];
/**
 * Claude Code prioritizes inherited provider credentials over apiKeyHelper.
 * Return only variable names; credential values must never enter diagnostics.
 */
export declare function claudeCloudInheritedAuthVariables(environment?: Readonly<Record<string, string | undefined>>): readonly ClaudeAuthVariable[];
export declare function claudeCloudSettingsAuthVariables(settings: Readonly<Record<string, unknown>>): readonly ClaudeAuthVariable[];
/** Inspect only the names of auth overrides persisted in Claude settings. */
export declare function claudeCloudConfiguredAuthVariables(configPath: string): readonly ClaudeAuthVariable[];
export type CloudIntegrationFileSnapshot = Readonly<{
    path: string;
    content?: Buffer;
    mode?: number;
}>;
export declare function snapshotCloudIntegration(agent: CloudAgent, configPath: string): readonly CloudIntegrationFileSnapshot[];
/** Never roll back a managed file that differs from the preimage and known installed target. */
export declare function restoreCloudIntegration(before: readonly CloudIntegrationFileSnapshot[], installed?: readonly CloudIntegrationFileSnapshot[]): void;
/**
 * A state record alone does not prove that an agent still selects Cloud.
 * Inspect only the files and values owned by this installation, leaving user
 * settings outside the managed surface free to change.
 */
export declare function cloudAgentConfigStatus(agent: CloudAgent, configPath: string, input: {
    origin: string;
    routekitHome: string;
    codexOwner: CodexInstallOwner;
    repositoryConnectionId?: string;
}): boolean;
export {};