import { type FetchLike } from '../api/client.js';
export interface AuthDeps {
    env?: Record<string, string | undefined>;
    fetchImpl?: FetchLike;
    /** Override the credential-store file path (tests). */
    credentialsFile?: string;
    /** Override the interactive secret prompt (tests). */
    promptSecret?: (question: string) => Promise<string>;
    /** Override instruction output (tests). Default: console.log. */
    log?: (message: string) => void;
}
export interface AuthStatusRow {
    apiUrl: string;
    keyPrefix: string;
    valid: boolean;
}
/** Read a secret from the terminal (masked) or from piped stdin (first line). */
export declare function promptSecret(question: string): Promise<string>;
export declare function runLogin(opts: {
    apiUrl?: string;
}, cwd: string, deps?: AuthDeps): Promise<{
    ok: true;
    apiUrl: string;
} | {
    ok: false;
    error: string;
}>;
export declare function runLogout(opts: {
    apiUrl?: string;
}, cwd: string, deps?: AuthDeps): {
    ok: true;
    apiUrl: string;
    removed: boolean;
} | {
    ok: false;
    error: string;
};
export declare function runAuthStatus(deps?: AuthDeps): Promise<AuthStatusRow[]>;
export declare function runAuthToken(opts: {
    apiUrl?: string;
}, cwd: string, deps?: AuthDeps): {
    ok: true;
    token: string;
} | {
    ok: false;
    error: string;
};