/**
 * Authentication overview for the root landing page.
 *
 * This lives at the top level of `/` so agents and humans can see every
 * credential path Neotoma accepts in one place, instead of burying auth
 * guidance inside the MCP panel. MCP and HTTP share the same tiers; CLI adds
 * a local/offline default.
 */
import type { LandingMode } from "./harness_snippets.js";
export type AuthTierId = "oauth" | "bearer" | "aauth" | "public";
export interface AuthTier {
    id: AuthTierId;
    label: string;
    /** One-line description shown in the tier card. */
    summary: string;
    /** When the agent / integrator should choose this tier. */
    whenToUse: string;
    /**
     * Canonical verification invocation for this tier (used in the "Verify"
     * block). Command is the literal shell snippet the user can copy.
     */
    verify?: {
        format: "bash" | "http";
        command: string;
    };
    /** Plain-language notes or caveats rendered below the verify block. */
    note?: string;
    /**
     * Optional capability bullets surfaced inside the accordion body. Used to
     * elaborate on tiers whose summary cannot fit everything an integrator
     * needs to know up front (e.g. AAuth's trust badges, surfaces, preflight).
     */
    details?: string[];
}
export interface AuthOverviewLink {
    label: string;
    href: string;
}
export interface AuthOverviewContent {
    title: string;
    intro: string;
    /**
     * Short line that appears before the tier list. Mode-aware because
     * sandbox explicitly allows anonymous reads while personal/prod do not.
     */
    modeCaveat: string;
    tiers: AuthTier[];
    /** Endpoints every caller can hit to introspect their current identity. */
    introspection: {
        heading: string;
        endpoints: Array<{
            method: "GET";
            path: string;
            description: string;
        }>;
    };
    links: AuthOverviewLink[];
}
export declare function buildAuthOverviewForMode(mode: LandingMode): AuthOverviewContent;
//# sourceMappingURL=auth_overview.d.ts.map