/**
 * DPoP (Demonstration of Proof-of-Possession) manager.
 * Generates and manages an ephemeral keypair, produces DPoP proof JWTs per RFC 9449.
 */
export declare class DPoPManager {
    private keyPair;
    private publicJwk;
    private thumbprint;
    /**
     * Initialize the DPoP manager by generating an ephemeral P-256 keypair.
     * Call this once during client construction.
     */
    init(): Promise<void>;
    /** Get the public JWK for sending to the server during token exchange. */
    getPublicJwk(): JsonWebKey;
    /** Get the JWK SHA-256 thumbprint (base64url). */
    getThumbprint(): string;
    /** Generate a DPoP proof JWT for the given HTTP method and URL. */
    generateProof(method: string, url: string): Promise<string>;
    private computeThumbprint;
    private stripQuery;
    private base64url;
    private base64urlFromBuffer;
}
//# sourceMappingURL=dpop.d.ts.map