import type { HostAuthPreset, HostAuthPresetOptions } from "./shared.js";
/**
 * 09-vendo §2.1 — the Auth.js host-identity preset. Zero-argument in the
 * standard case: the secret is AUTH_SECRET, the secure-cookie posture follows
 * VENDO_BASE_URL (https → `__Secure-` names), and the principal's display
 * derives from the session token's name/email claims. An optional subject→user
 * resolver overrides claims-derived identity for BOTH the principal display and
 * the actAs session claims; its null means "subject unknown to host" (the
 * session is treated as absent, actAs declines, the door's lookup returns null).
 *
 * The actAs half IS the shipped `@vendoai/vendo/actions/presets` authJsPreset — one
 * minting story (04 §2.1), configured from these same options.
 */
export declare function authJs(options?: HostAuthPresetOptions): HostAuthPreset;