import { type StoredKey } from './keys.js';
/** `htu`: the request URL without query or fragment (RFC 9449 4.2). */
export declare function htuOf(url: string | URL): string;
/**
 * A DPoP key (RFC 9449). The agent keeps one per User per Company (4.3); it is never published.
 */
export declare class DpopKey {
    readonly stored: StoredKey;
    constructor(stored: StoredKey);
    static generate(): Promise<DpopKey>;
    /** A fresh proof for one request. `accessToken` adds `ath`; token-endpoint proofs have none. */
    proof(input: {
        htm: string;
        htu: string | URL;
        accessToken?: string | undefined;
        nonce?: string | undefined;
    }): Promise<string>;
}
//# sourceMappingURL=dpop.d.ts.map