import { NextRequest, NextResponse } from 'next/server';
/** Internal AuthKit headers - forwarded to downstream requests but never sent to browser. */
export declare const AUTHKIT_REQUEST_HEADERS: readonly ["x-workos-middleware", "x-url", "x-redirect-uri", "x-sign-up-paths", "x-workos-session"];
export type AuthkitRequestHeader = (typeof AUTHKIT_REQUEST_HEADERS)[number];
export declare function isAuthkitRequestHeader(name: string): boolean;
export interface AuthkitHeadersResult {
    requestHeaders: Headers;
    responseHeaders: Headers;
}
/**
 * Partitions AuthKit headers into request headers (for withAuth) and response headers (for browser).
 */
export declare function partitionAuthkitHeaders(request: NextRequest, authkitHeaders: Headers): AuthkitHeadersResult;
export declare function applyResponseHeaders(response: NextResponse, responseHeaders: Headers): NextResponse;
export type AuthkitRedirectStatus = 302 | 303 | 307 | 308;
export interface HandleAuthkitHeadersOptions {
    /** URL to redirect to (relative or absolute). */
    redirect?: string | URL;
    /** Redirect status code. @default 307 for GET/HEAD, 303 for POST/PUT/DELETE */
    redirectStatus?: AuthkitRedirectStatus;
}
/**
 * Creates a NextResponse with properly merged AuthKit headers.
 */
export declare function handleAuthkitProxy(request: NextRequest, authkitHeaders: Headers, options?: HandleAuthkitHeadersOptions): NextResponse;
/** @deprecated Use `handleAuthkitProxy` instead. */
export declare const handleAuthkitHeaders: typeof handleAuthkitProxy;