import type { OAuthCredentials, OAuthLoginCallbacks } from "@earendil-works/pi-ai";
export declare const SSO_OIDC_ENDPOINT = "https://oidc.us-east-1.amazonaws.com";
export declare const BUILDER_ID_START_URL = "https://view.awsapps.com/start";
export declare const KIRO_DESKTOP_REFRESH_URL = "https://prod.{region}.auth.desktop.kiro.dev/refreshToken";
export declare const SSO_SCOPES: string[];
export type KiroAuthMethod = "idc" | "desktop";
export type KiroLoginMethod = "auto" | "builder-id" | "google" | "github";
export interface KiroCredentials extends OAuthCredentials {
    clientId: string;
    clientSecret: string;
    region: string;
    authMethod: KiroAuthMethod;
    /** Required for Google/GitHub social profiles; ListAvailableProfiles may return empty for these tokens. */
    profileArn?: string;
}
/**
 * Login to Kiro using the specified method.
 *
 * - "auto": Use existing kiro-cli credentials if available (any method)
 * - "builder-id": AWS Builder ID via device code flow
 * - "google" | "github": Social login via kiro-cli (requires kiro-cli installed)
 */
export declare function loginKiro(callbacks: OAuthLoginCallbacks, preferredMethod?: KiroLoginMethod): Promise<OAuthCredentials>;
/**
 * Backward-compatible alias for loginKiro with Builder ID.
 * @deprecated Use loginKiro instead.
 */
export declare function loginKiroBuilderID(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
export declare function refreshKiroToken(credentials: OAuthCredentials): Promise<OAuthCredentials>;
//# sourceMappingURL=oauth.d.ts.map