/**
 * Ingress binary arithmetic (GW-2): platform mapping, download-URL
 * construction and install-path computation for the two binaries the
 * gateway wizard manages — Caddy (custom build with the Cloudflare DNS
 * module, for DNS-01 certificates) and cloudflared (the tunnel client).
 *
 * Pure by contract: URL strings, path strings and platform facts only —
 * every touch of the filesystem or the network lives in binary-io.ts, and
 * the routes layer reads both. `node:path`/`node:os` here are arithmetic,
 * not I/O: the same discipline as virtual-id.ts's zero-dependency rule,
 * relaxed one notch because path building is this module's whole job.
 *
 * Platform coverage mirrors what both upstream distribution points actually
 * ship: darwin/linux/windows × amd64/arm64. macOS arm64's cloudflared asset
 * is a `.tgz` (the only archive shape in the set) — binary-io unpacks it.
 */
/** The two binaries the wizard downloads and runs. */
export type IngressBinary = 'caddy' | 'cloudflared';
/**
 * The platform shapes both distribution points understand. Windows is
 * deliberately amd64-only: that is all Caddy's build API and cloudflared's
 * Releases publish a gateway-wizard-usable image for (a windows-arm64 host
 * has no supported download either way, so pretending otherwise would only
 * move the failure somewhere less explicable).
 */
export type BinaryPlatform = {
    os: 'darwin';
    arch: 'amd64' | 'arm64';
} | {
    os: 'linux';
    arch: 'amd64' | 'arm64';
} | {
    os: 'windows';
    arch: 'amd64';
};
/**
 * The wrapper an asset arrives in: `tgz` gzipped tar (needs unpacking),
 * `zip` (no reader in this codebase yet — refused before download), `exe`
 * Windows' own format, `none` a bare executable.
 */
export type BinaryArchive = 'tgz' | 'zip' | 'exe' | 'none';
/** This process's platform, mapped into the download points' naming. */
export declare function currentPlatform(): BinaryPlatform;
/** Caddy's custom-build API, pinned to the Cloudflare DNS module the
 * DNS-01 challenge needs (plain Caddy cannot write the TXT record). */
export declare function caddyDownloadUrl(platform: BinaryPlatform): string;
/**
 * The Caddy asset the build API answers with, PLUS its archive shape —
 * `caddyserver.com/api/download` returns a bare Mach-O/ELF binary on unix
 * (`Content-Disposition: attachment; filename="caddy_<os>_<arch>_custom"`,
 * `Content-Type: application/octet-stream`) and a bare `.exe` on Windows.
 */
export declare function caddyDownload(platform: BinaryPlatform): {
    url: string;
    archive: BinaryArchive;
};
/** cloudflared's GitHub Releases asset for one platform, plus the archive
 * shape the I/O half must unwrap (darwin assets are `.tgz`, windows ships
 * a bare `.exe`, linux a bare binary). */
export declare function cloudflaredDownload(platform: BinaryPlatform): {
    url: string;
    archive: BinaryArchive;
};
/** Both download URLs for one platform WITH their archive shapes, defaults
 * to the running process's. The archive metadata — not a URL suffix — is
 * what tells the I/O half how to unpack. */
export declare function binaryUrls(platform?: BinaryPlatform): {
    caddy: string;
    caddyArchive: BinaryArchive;
    cloudflared: string;
    cloudflaredArchive: BinaryArchive;
};
/** Official manual-install pages, surfaced by the UI when a download fails. */
export declare const MANUAL_INSTALL_LINKS: Readonly<Record<IngressBinary, string>>;
/** Everything ingress lives under this one directory of DSH_HOME. */
export declare const INGRESS_DIR_NAME = "zen-remote-ingress";
/** `<DSH_HOME>` as the rest of the plugin resolves it (config.ts's convention). */
export declare function dshHomeDefault(env?: NodeJS.ProcessEnv): string;
/** `<DSH_HOME>/zen-remote-ingress` — Caddyfile, data dir and bin/ sit here. */
export declare function ingressDir(dshHome: string): string;
/** `<DSH_HOME>/zen-remote-ingress/bin` — both binaries install here. */
export declare function binDir(dshHome: string): string;
/** `<DSH_HOME>/zen-remote-ingress/Caddyfile` — generated, validated, then
 * handed to `caddy run --config`. */
export declare function caddyfilePath(dshHome: string): string;
/** `<DSH_HOME>/zen-remote-ingress/caddy-data` — certificates and the ACME
 * account live here, kept out of the default Caddy home. */
export declare function caddyDataDir(dshHome: string): string;
/** The installed file name. Windows cannot spawn an extension-less image,
 * so the `.exe` suffix is part of the install name there. */
export declare function binaryFileName(tool: IngressBinary, platform?: BinaryPlatform): string;
/** The absolute install path for one binary (where downloadBinary puts it). */
export declare function binaryInstallPath(dshHome: string, tool: IngressBinary, platform?: BinaryPlatform): string;
/** Prebuilt Caddy + `github.com/caddy-dns/cloudflare` release assets hosted
 * on this repository's `caddy-cloudflare` GitHub Release (built by
 * `.github/workflows/caddy-assets.yml`). Unlike `caddyserver.com/api/download`
 * — which compiles on the fly and throttles downloads to ~13 KB/s — these
 * static GitHub Release assets download in seconds and work with mainland
 * China GitHub acceleration mirrors (`gh-proxy.com` / `ghfast.top`). */
export declare function caddyPrebuiltDownload(platform: BinaryPlatform): {
    url: string;
    archive: BinaryArchive;
};
/** Mainland China GitHub release acceleration mirrors, tried first when the
 * host environment is detected as mainland China (or tried as fallbacks if
 * direct GitHub times out). */
export declare const GITHUB_MIRROR_PREFIXES: readonly ["https://gh-proxy.com/", "https://ghfast.top/"];
/** Ordered candidate downloads for one binary and platform:
 * - When `preferCnMirror` is true, GitHub Release URLs through mainland
 *   mirrors come first, followed by direct GitHub Release URL, and finally
 *   (for Caddy) the upstream `caddyserver.com/api/download` fallback.
 * - When `preferCnMirror` is false, direct GitHub Release comes first, then
 *   mainland mirrors, then the upstream build API fallback. */
export declare function binaryDownloadCandidates(tool: IngressBinary, platform?: BinaryPlatform, preferCnMirror?: boolean): Array<{
    url: string;
    archive: BinaryArchive;
}>;
//# sourceMappingURL=binary.d.ts.map