/**
 * Gateway fuel: the env overlay that makes Claude Code (any rung that reads
 * ANTHROPIC_BASE_URL / ANTHROPIC_AUTH_TOKEN / ANTHROPIC_CUSTOM_HEADERS — the
 * PATH `claude` binary today, the npx-fetched engine package tomorrow)
 * speak to the Vendo Cloud model gateway instead of Anthropic directly, when
 * the dev has no Anthropic credential of their own but does have
 * VENDO_API_KEY. Own credential always wins — this module never overrides
 * it, and callers must never call it when one is available.
 *
 * INVARIANT: a non-blank ANTHROPIC_AUTH_TOKEN, CLAUDE_CODE_OAUTH_TOKEN, or
 * ANTHROPIC_BASE_URL in the passed env IS an own credential (the corporate-
 * gateway / custom-endpoint path Claude Code also supports, none of which
 * show up in a `claude auth status` login probe) and always wins, even if a
 * caller mistakenly passes `ownCredentialAvailable: false`. Overwriting a
 * dev's already-configured BYO endpoint would silently redirect their
 * inference through Vendo's gateway and bill their org's meter — this
 * module checks it directly rather than trusting callers to remember.
 *
 * That invariant is about the DEVELOPER's own endpoint, and for
 * ANTHROPIC_BASE_URL (see AGENT_ENDPOINT_ENV_VAR) it holds only because a
 * project file can no longer supply one: `readEnvFiles` in sync-flow.ts
 * drops the key from `.env`/`.env.local`, at the one point where file-vs-
 * shell provenance is still known. By the time any env reaches this module
 * the key can only have come from the developer's shell or a programmatic
 * caller, so "is it set" and "did the developer choose it" are the same
 * question again — which is why a flat env map is enough to answer it here.
 *
 * The gateway must be able to refuse this traffic for free-plan orgs
 * (spec's free-plan policy), so every request gets tagged with the
 * INIT_PURPOSE_HEADER — a plain "name: value" line via Claude Code's
 * ANTHROPIC_CUSTOM_HEADERS mechanism. The constant is the single source of
 * truth; the console mirrors the literal in its own tests (plan Task 7).
 */
export declare const INIT_PURPOSE_HEADER_NAME = "x-vendo-purpose";
export declare const INIT_PURPOSE_HEADER_VALUE = "init";
/**
 * The gateway model id every Claude-Code-shaped rung must send when running on
 * the Vendo Cloud gateway (#617). The gateway serves ONLY its curated vendo-*
 * family ids and 400s anything else — including the `claude-*` id Claude Code
 * sends by default. Claude Code passes a custom model id through verbatim once
 * ANTHROPIC_BASE_URL points at a non-Anthropic endpoint (verified against
 * claude 2.1.220), so pinning ANTHROPIC_MODEL to the gateway's own extraction
 * id lands every rung on a valid gateway id — no gateway contract change. This
 * is the extraction role of the gateway's model family (vendo-extract, see
 * vendo-web console lib/api/model-aliases.ts VENDO_MODEL_FAMILY); a dev's
 * explicit VENDO_MODEL_EXTRACT pin still wins via the harness's --model flag.
 */
export declare const EXTRACTION_MODEL_ID = "vendo-extract";
/**
 * The one env var that REDIRECTS a coding agent's source-bearing prompts to a
 * different endpoint, rather than merely paying for them. A project file may
 * never choose it: `.env` ships with the repo, so honoring one would let a
 * freshly cloned repo pick where its own source code gets sent whenever the
 * developer has no Anthropic credential of their own. Only the developer's
 * shell (or a programmatic caller passing an explicit env) may set it —
 * enforced in sync-flow.ts's `readEnvFiles`, the CLI's one dotenv reader.
 */
export declare const AGENT_ENDPOINT_ENV_VAR = "ANTHROPIC_BASE_URL";
/** Env vars that Claude Code itself accepts as an own credential besides
 *  ANTHROPIC_API_KEY and a CLI login: a corporate-gateway auth token, a
 *  device-flow OAuth token, or a custom base URL with no token at all
 *  (mTLS/proxy auth). None of these are visible to a `claude auth status`
 *  probe, so any caller folding "own credential" into its own predicate
 *  (claude-cli-harness.ts's availability()/run()) must check these three
 *  directly rather than relying solely on the login probe. Exported so
 *  every harness checks the identical set. The base URL counts only when it
 *  is the developer's own — see AGENT_ENDPOINT_ENV_VAR. */
export declare const OWN_CREDENTIAL_ENV_VARS: readonly ["ANTHROPIC_AUTH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN", "ANTHROPIC_BASE_URL"];
/** True when the env alone (no async probe needed) already carries one of
 *  Claude Code's own-credential env vars (see OWN_CREDENTIAL_ENV_VARS). */
export declare function hasOwnAnthropicEnvOverride(env: Record<string, string | undefined>): boolean;
export interface GatewayFuelOverlay {
    ANTHROPIC_BASE_URL: string;
    ANTHROPIC_AUTH_TOKEN: string;
    ANTHROPIC_CUSTOM_HEADERS: string;
    /** Pins the model to a gateway-served id — Claude Code's own default is a
     *  claude-* id the gateway 400s (#617). See EXTRACTION_MODEL_ID. */
    ANTHROPIC_MODEL: string;
}
export interface GatewayFuelOptions {
    /** The CHILD'S real env — i.e. the same merged {...process.env,
     *  ...input.env} the harness is about to spawn with, never the caller's
     *  partial input env alone. The INVARIANT above is only worth anything if
     *  it is checked against the env the subprocess will actually read: an
     *  ambient (process.env) ANTHROPIC_AUTH_TOKEN/ANTHROPIC_BASE_URL is a
     *  live BYO endpoint that an overlay composed from input.env alone would
     *  silently clobber. */
    env: Record<string, string | undefined>;
    /** True when the rung already has a working credential of its own (its
     *  own ANTHROPIC_API_KEY, a satisfied Claude Code login, ...). Each
     *  harness computes this itself — an env check, an async login probe,
     *  whatever its rung needs — and passes the verdict in, so this module
     *  stays a pure, harness-agnostic composition step reusable by every
     *  Claude-Code-shaped rung (claude-cli-harness.ts today; the future
     *  npx-engine harness reuses the same function). This module additionally
     *  checks OWN_CREDENTIAL_ENV_VARS itself regardless of this flag — see
     *  the module-level INVARIANT note. */
    ownCredentialAvailable: boolean;
}
/** Compose the gateway-fuel env overlay for a Claude-Code-shaped rung, or
 *  null when gateway fuel does not apply: own credential wins (either the
 *  caller's verdict or a directly-detected env override), or there is no
 *  VENDO_API_KEY to fuel with. */
export declare function composeGatewayFuel(options: GatewayFuelOptions): GatewayFuelOverlay | null;