import * as Context from "effect/Context";
import * as Effect from "effect/Effect";
import * as Layer from "effect/Layer";
import * as Schema from "effect/Schema";
/**
 * Canonical web host for OAuth provider-agnostic landing pages
 * (`/auth/success`, `/auth/error`). The CLI's loopback server 302s the
 * browser to one of these after handling the OAuth callback. Centralized
 * here so the redirect target lives in exactly one place across all
 * provider OAuth clients.
 */
export declare const AUTH_LANDING_HOST = "https://alchemy.run";
export declare const AUTH_SUCCESS_URL = "https://alchemy.run/auth/success";
export declare const AUTH_ERROR_URL = "https://alchemy.run/auth/error";
declare const AuthError_base: Schema.Class<AuthError, Schema.TaggedStruct<"AuthError", {
    readonly message: Schema.String;
    readonly cause: Schema.optional<Schema.Defect>;
}>, import("effect/Cause").YieldableError>;
export declare class AuthError extends AuthError_base {
}
declare const AuthProviders_base: Context.ServiceClass<AuthProviders, "AuthProviders", {
    [providerName: string]: AuthProvider<any, any>;
}>;
export declare class AuthProviders extends AuthProviders_base {
}
/**
 * Context passed to {@link AuthProviderImpl.configure}.
 */
export interface ConfigureContext {
    /**
     * `true` when running in a CI/CD environment (resolved from the `CI`
     * env/config). Providers MUST NOT prompt interactively when `ci` is true;
     * they should pick a non-interactive default (typically
     * `{ method: "env" }`) so unattended runs work.
     */
    readonly ci: boolean;
    /**
     * Optional human-readable explanation of WHY credentials are being
     * demanded right now — e.g. which resources in a dev plan require the
     * real cloud (see `Auth/Demand.ts`). Interactive `configure`
     * implementations should display it before their first prompt so the
     * user knows what triggered the flow.
     */
    readonly reason?: string;
}
export interface AuthProviderImpl<Config extends {
    method: string;
} = any, Credentials = any, ConfigureReq = any, LoginReq = any, LogoutReq = any, PrettyPrintReq = any, ReadReq = any> {
    configure(profileName: string, ctx: ConfigureContext): Effect.Effect<Config, AuthError, ConfigureReq>;
    login(profileName: string, config: Config): Effect.Effect<void, AuthError, LoginReq>;
    logout(profileName: string, config: Config): Effect.Effect<void, AuthError, LogoutReq>;
    prettyPrint(profileName: string, config: Config): Effect.Effect<void, AuthError, PrettyPrintReq>;
    read(profileName: string, config: Config): Effect.Effect<Credentials, AuthError, ReadReq>;
}
export interface AuthProvider<Config extends {
    method: string;
} = any, Credentials = any> extends AuthProviderImpl<Config, Credentials, never, never, never, never, never> {
    readonly kind: "AuthProvider";
    readonly name: string;
}
export declare const AuthProvider: <Config extends {
    method: string;
}, Credentials>() => <ImplReq = never, ConfigureReq = never, LoginReq = never, LogoutReq = never, PrettyPrintReq = never, ReadReq = never>(name: string, impl: AuthProviderImpl<Config, Credentials, ConfigureReq, LoginReq, LogoutReq, PrettyPrintReq, ReadReq> | Effect.Effect<AuthProviderImpl<Config, Credentials, ConfigureReq, LoginReq, LogoutReq, PrettyPrintReq, ReadReq>, never, ImplReq>) => Effect.Effect<AuthProvider<Config, Credentials>, never, ImplReq | AuthProviders>;
/**
 * Build a Layer that registers an AuthProvider into the {@link AuthProviders}
 * registry when its parent layer is built. Use this from a provider's
 * top-level `providers()` Layer so that `alchemy login` can discover the
 * provider via the registry without forcing credential resolution.
 */
export declare const AuthProviderLayer: <Config extends {
    method: string;
}, Credentials>() => <ImplReq = never, ConfigureReq = never, LoginReq = never, LogoutReq = never, PrettyPrintReq = never, ReadReq = never>(name: string, impl: AuthProviderImpl<Config, Credentials, ConfigureReq, LoginReq, LogoutReq, PrettyPrintReq, ReadReq> | Effect.Effect<AuthProviderImpl<Config, Credentials, ConfigureReq, LoginReq, LogoutReq, PrettyPrintReq, ReadReq>, never, ImplReq>) => Layer.Layer<never, never, AuthProviders | Exclude<ImplReq, import("effect/Scope").Scope>>;
/**
 * Look up a registered {@link AuthProvider} by name. Fails with
 * {@link AuthError} if the provider hasn't been registered (typically because
 * its layer hasn't been built).
 */
export declare const getAuthProvider: <Config extends {
    method: string;
} = any, Credentials = any>(name: string) => Effect.Effect<AuthProvider<Config, Credentials>, AuthError, AuthProviders>;
export {};
//# sourceMappingURL=AuthProvider.d.ts.map