import type { HttpClient } from "../core/http.js";
import type { OAuthProviderListResponse, OAuthConnectionListResponse, ConnectOAuthRequest, ConnectOAuthResponse, OAuthAppCredentialListResponse, OAuthAppCredentialResponse, SaveOAuthAppCredentialsRequest, OneclawResponse } from "../types.js";
/**
 * OAuth Connected Accounts — manage OAuth connections for AI agents.
 * Lets agents access external services (Google, GitHub, Slack, etc.)
 * via human-approved OAuth flows.
 */
export declare class OAuthConnectResource {
    private readonly http;
    constructor(http: HttpClient);
    /**
     * List all available OAuth providers from the registry.
     * Public endpoint — no authentication required.
     */
    listProviders(): Promise<OneclawResponse<OAuthProviderListResponse>>;
    /**
     * List connected OAuth accounts for a specific agent.
     */
    listConnections(agentId: string): Promise<OneclawResponse<OAuthConnectionListResponse>>;
    /**
     * Initiate an OAuth connection flow for an agent.
     * Returns an authorization URL to redirect the user to.
     * Human-only — agents cannot initiate their own OAuth flows.
     */
    connect(agentId: string, options: ConnectOAuthRequest): Promise<OneclawResponse<ConnectOAuthResponse>>;
    /**
     * Disconnect an OAuth account from an agent.
     * Revokes tokens and removes the binding.
     * Human-only.
     */
    disconnect(agentId: string, bindingId: string): Promise<OneclawResponse<void>>;
    /**
     * Save OAuth app credentials (client ID/secret) for a provider.
     * Per-org — each organization registers their own OAuth app.
     * Human-only. Client secrets are encrypted at rest.
     */
    saveAppCredentials(agentId: string, options: SaveOAuthAppCredentialsRequest): Promise<OneclawResponse<OAuthAppCredentialResponse>>;
    /**
     * List app credentials for the calling org (secrets redacted).
     */
    listAppCredentials(agentId: string): Promise<OneclawResponse<OAuthAppCredentialListResponse>>;
    /**
     * Delete app credentials for a provider.
     */
    deleteAppCredentials(agentId: string, providerSlug: string): Promise<OneclawResponse<void>>;
}
//# sourceMappingURL=oauth-connect.d.ts.map