import type { OidcAuthConfig } from "../http/middleware/types.js";
import { type JwksCache } from "./jwks-cache.js";
import { type OidcMetadataCache } from "./oidc-metadata.js";
import type { ApplicationIdentity } from "./types.js";
export interface ApplicationAuthEnvironmentReader {
    get(name: string): string | undefined;
}
export interface OidcApplicationAuthRuntimeOptions {
    readonly config: OidcAuthConfig;
    readonly env: ApplicationAuthEnvironmentReader;
    /** Browser-visible origin already resolved at the trusted request boundary. */
    readonly trustedRequestOrigin?: string | null;
    readonly now?: () => number;
    readonly randomBytes?: (length: number) => Uint8Array;
    readonly metadataCache?: OidcMetadataCache;
    readonly jwksCache?: JwksCache;
}
export interface OidcApplicationAuthRuntime {
    handleAuthRoute(request: Request): Promise<Response | null>;
    admitRequest(request: Request): Promise<ApplicationIdentity | Response>;
}
export declare function markApplicationAuthAdmittedRequest(request: Request): void;
export declare function isApplicationAuthAdmittedRequest(request: Request): boolean;
export declare function createOidcApplicationAuthRuntime(options: OidcApplicationAuthRuntimeOptions): OidcApplicationAuthRuntime;
//# sourceMappingURL=oidc-runtime.d.ts.map