import { z } from "zod";
import type { OAuthConfig as ProtoOAuthConfig, OAuthStepDisplay as ProtoOAuthStepDisplay, OAuthStepLocalizedText as ProtoOAuthStepLocalizedText, OAuthFlowStep as ProtoOAuthFlowStep, OAuthCredentialValidationInput as ProtoCredentialValidationInput, OAuthCredentialValidationResult as ProtoCredentialValidationResult, OAuthProvider as ProtoOAuthProvider, OAuthProviderLocalizedText as ProtoOAuthProviderLocalizedText, OAuthTokenRequestMapping as ProtoTokenRequestMapping, OAuthTokenResponseMapping as ProtoTokenResponseMapping } from "../gen/channel/app/sdk/v1/extension.js";
type ProtoBacked<T, Proto> = T & Proto;
/**
 * OAuth standard parameter naming convention.
 *
 * - `"snake"` (default): RFC 6749 standard (`client_id`, `redirect_uri`, `response_type`, `grant_type`, `refresh_token`).
 *   Used by Google, Slack, GitHub, and most OAuth 2.0 providers.
 * - `"camel"`: camelCase (`clientId`, `redirectUri`, `responseType`, `grantType`, `refreshToken`).
 *   Required by some tenant-aware providers such as Imweb. Applies to both authorize URL and token endpoint.
 */
export declare const ParameterCaseSchema: z.ZodEnum<["snake", "camel"]>;
export type ParameterCase = z.infer<typeof ParameterCaseSchema>;
export declare const TokenRequestContentTypeSchema: z.ZodEnum<["form", "json"]>;
export type TokenRequestContentType = z.infer<typeof TokenRequestContentTypeSchema>;
export declare const AuthorizationOpenModeSchema: z.ZodEnum<["popup", "currentTab"]>;
export type AuthorizationOpenMode = z.infer<typeof AuthorizationOpenModeSchema>;
/**
 * OAuth credential ownership and Function hydration policy.
 *
 * - channel: always use the shared channel credential
 * - manager: only a manager caller can use that manager's credential
 * - caller: use the manager credential for manager callers and the channel
 *   credential for every other caller
 */
export declare const OAuthAuthScopeSchema: z.ZodEnum<["channel", "manager", "caller"]>;
export type OAuthAuthScope = z.infer<typeof OAuthAuthScopeSchema>;
export declare const OAuthProviderSupportedLocaleSchema: z.ZodEnum<["ko", "ja", "en"]>;
export type OAuthProviderSupportedLocale = z.infer<typeof OAuthProviderSupportedLocaleSchema>;
/** Built-in semantic icons rendered by App Store. No URLs or SVGs. */
export declare const OAuthStepIconSchema: z.ZodEnum<["installation", "account", "organization", "permission", "settings"]>;
export type OAuthStepIcon = z.infer<typeof OAuthStepIconSchema>;
export declare const OAuthStepLocalizedTextSchema: z.ZodObject<{
    title: z.ZodOptional<z.ZodString>;
    description: z.ZodOptional<z.ZodString>;
}, "strict", z.ZodTypeAny, {
    description?: string | undefined;
    title?: string | undefined;
}, {
    description?: string | undefined;
    title?: string | undefined;
}>;
export type OAuthStepLocalizedText = ProtoBacked<z.infer<typeof OAuthStepLocalizedTextSchema>, ProtoOAuthStepLocalizedText>;
export declare const OAuthStepDisplaySchema: z.ZodObject<{
    title: z.ZodString;
    description: z.ZodOptional<z.ZodString>;
    icon: z.ZodOptional<z.ZodEnum<["installation", "account", "organization", "permission", "settings"]>>;
    i18nMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
        title: z.ZodOptional<z.ZodString>;
        description: z.ZodOptional<z.ZodString>;
    }, "strict", z.ZodTypeAny, {
        description?: string | undefined;
        title?: string | undefined;
    }, {
        description?: string | undefined;
        title?: string | undefined;
    }>>>;
}, "strict", z.ZodTypeAny, {
    title: string;
    description?: string | undefined;
    icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
    i18nMap?: Record<string, {
        description?: string | undefined;
        title?: string | undefined;
    }> | undefined;
}, {
    title: string;
    description?: string | undefined;
    icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
    i18nMap?: Record<string, {
        description?: string | undefined;
        title?: string | undefined;
    }> | undefined;
}>;
export type OAuthStepDisplay = ProtoBacked<z.infer<typeof OAuthStepDisplaySchema>, ProtoOAuthStepDisplay>;
export declare const OAuthFlowStepSchema: z.ZodObject<{
    id: z.ZodEnum<["before", "oauth", "after"]>;
    title: z.ZodString;
    description: z.ZodOptional<z.ZodString>;
    icon: z.ZodEnum<["installation", "account", "organization", "permission", "settings"]>;
    status: z.ZodEnum<["pending", "in_progress", "completed", "failed", "unknown"]>;
    detail: z.ZodOptional<z.ZodString>;
}, "strict", z.ZodTypeAny, {
    status: "completed" | "unknown" | "pending" | "in_progress" | "failed";
    id: "oauth" | "before" | "after";
    title: string;
    icon: "installation" | "account" | "organization" | "permission" | "settings";
    description?: string | undefined;
    detail?: string | undefined;
}, {
    status: "completed" | "unknown" | "pending" | "in_progress" | "failed";
    id: "oauth" | "before" | "after";
    title: string;
    icon: "installation" | "account" | "organization" | "permission" | "settings";
    description?: string | undefined;
    detail?: string | undefined;
}>;
export type OAuthFlowStep = ProtoBacked<z.infer<typeof OAuthFlowStepSchema>, ProtoOAuthFlowStep>;
export declare const OAuthProviderLocalizedTextSchema: z.ZodObject<{
    providerName: z.ZodOptional<z.ZodString>;
    providerDescription: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    providerName?: string | undefined;
    providerDescription?: string | undefined;
}, {
    providerName?: string | undefined;
    providerDescription?: string | undefined;
}>;
export type OAuthProviderLocalizedText = ProtoBacked<z.infer<typeof OAuthProviderLocalizedTextSchema>, ProtoOAuthProviderLocalizedText>;
export declare const OAuthProviderI18nMapSchema: z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodObject<{
    providerName: z.ZodOptional<z.ZodString>;
    providerDescription: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    providerName?: string | undefined;
    providerDescription?: string | undefined;
}, {
    providerName?: string | undefined;
    providerDescription?: string | undefined;
}>>, Record<string, {
    providerName?: string | undefined;
    providerDescription?: string | undefined;
}>, Record<string, {
    providerName?: string | undefined;
    providerDescription?: string | undefined;
}>>;
export type OAuthProviderI18nMap = z.infer<typeof OAuthProviderI18nMapSchema>;
/** Provider-specific field names used by the outbound token request. */
export declare const OAuthTokenRequestMappingSchema: z.ZodObject<{
    /** Defaults to `"code"` when omitted. */
    authorizationCodeParamName: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    authorizationCodeParamName?: string | undefined;
}, {
    authorizationCodeParamName?: string | undefined;
}>;
export type OAuthTokenRequestMapping = ProtoBacked<z.infer<typeof OAuthTokenRequestMappingSchema>, ProtoTokenRequestMapping>;
/** JSON object paths used to read a provider token response. */
export declare const OAuthTokenResponseMappingSchema: z.ZodObject<{
    /** Defaults to `"access_token"` when omitted. */
    accessTokenPath: z.ZodOptional<z.ZodString>;
    /** Defaults to `"refresh_token"` when omitted. */
    refreshTokenPath: z.ZodOptional<z.ZodString>;
    /** Defaults to `"expires_in"` when omitted. */
    expiresInPath: z.ZodOptional<z.ZodString>;
    /** Defaults to `"token_type"` when omitted. */
    tokenTypePath: z.ZodOptional<z.ZodString>;
    /** Opt-in path for providers that return a refresh-token lifetime. */
    refreshTokenExpiresInPath: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    accessTokenPath?: string | undefined;
    refreshTokenPath?: string | undefined;
    expiresInPath?: string | undefined;
    tokenTypePath?: string | undefined;
    refreshTokenExpiresInPath?: string | undefined;
}, {
    accessTokenPath?: string | undefined;
    refreshTokenPath?: string | undefined;
    expiresInPath?: string | undefined;
    tokenTypePath?: string | undefined;
    refreshTokenExpiresInPath?: string | undefined;
}>;
export type OAuthTokenResponseMapping = ProtoBacked<z.infer<typeof OAuthTokenResponseMappingSchema>, ProtoTokenResponseMapping>;
/**
 * OAuth 2.0 provider metadata returned from metadata.getAuthConfig.
 *
 * Client credentials are intentionally excluded. AppStore stores and manages
 * provider client ID/secret separately through Desk APIs/UI.
 */
export declare const OAuthProviderSchema: z.ZodObject<{
    authorizationDisplay: z.ZodOptional<z.ZodObject<{
        title: z.ZodString;
        description: z.ZodOptional<z.ZodString>;
        icon: z.ZodOptional<z.ZodEnum<["installation", "account", "organization", "permission", "settings"]>>;
        i18nMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
            title: z.ZodOptional<z.ZodString>;
            description: z.ZodOptional<z.ZodString>;
        }, "strict", z.ZodTypeAny, {
            description?: string | undefined;
            title?: string | undefined;
        }, {
            description?: string | undefined;
            title?: string | undefined;
        }>>>;
    }, "strict", z.ZodTypeAny, {
        title: string;
        description?: string | undefined;
        icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
        i18nMap?: Record<string, {
            description?: string | undefined;
            title?: string | undefined;
        }> | undefined;
    }, {
        title: string;
        description?: string | undefined;
        icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
        i18nMap?: Record<string, {
            description?: string | undefined;
            title?: string | undefined;
        }> | undefined;
    }>>;
    provider: z.ZodString;
    authorizationUrl: z.ZodString;
    tokenUrl: z.ZodString;
    refreshTokenUrl: z.ZodOptional<z.ZodString>;
    scopes: z.ZodArray<z.ZodString, "many">;
    providerName: z.ZodString;
    providerDescription: z.ZodOptional<z.ZodString>;
    i18nMap: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodObject<{
        providerName: z.ZodOptional<z.ZodString>;
        providerDescription: z.ZodOptional<z.ZodString>;
    }, "strip", z.ZodTypeAny, {
        providerName?: string | undefined;
        providerDescription?: string | undefined;
    }, {
        providerName?: string | undefined;
        providerDescription?: string | undefined;
    }>>, Record<string, {
        providerName?: string | undefined;
        providerDescription?: string | undefined;
    }>, Record<string, {
        providerName?: string | undefined;
        providerDescription?: string | undefined;
    }>>>;
    providerIconUrl: z.ZodOptional<z.ZodString>;
    pkceRequired: z.ZodOptional<z.ZodBoolean>;
    additionalParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
    /**
     * OAuth standard parameter naming convention. Defaults to `"snake"` (RFC 6749).
     * Declare `"camel"` when the provider (e.g. Imweb) requires camelCase keys
     * on the authorize URL and token endpoint.
     */
    parameterCase: z.ZodOptional<z.ZodEnum<["snake", "camel"]>>;
    /**
     * Token endpoint request body format. Defaults to `"form"` for RFC 6749
     * providers, but some providers expect JSON bodies.
     */
    tokenRequestContentType: z.ZodOptional<z.ZodEnum<["form", "json"]>>;
    /**
     * OAuth callback query parameter name that contains the authorization code.
     * Defaults to `"code"`. Some providers, such as Amazon SP-API, use a
     * provider-specific name.
     */
    authorizationCodeParamName: z.ZodOptional<z.ZodString>;
    /**
     * Browser surface used to open the provider authorization URL. Defaults to
     * `"popup"`. Declare `"currentTab"` when the provider redirects to a full
     * Desk/AppStore URL and cannot complete the popup close contract reliably.
     */
    authorizationOpenMode: z.ZodOptional<z.ZodEnum<["popup", "currentTab"]>>;
    /**
     * Outbound token request mapping. This is intentionally separate from
     * authorizationCodeParamName, which controls callback query parsing.
     */
    tokenRequest: z.ZodOptional<z.ZodObject<{
        /** Defaults to `"code"` when omitted. */
        authorizationCodeParamName: z.ZodOptional<z.ZodString>;
    }, "strip", z.ZodTypeAny, {
        authorizationCodeParamName?: string | undefined;
    }, {
        authorizationCodeParamName?: string | undefined;
    }>>;
    /** Token endpoint response JSON object paths. */
    tokenResponse: z.ZodOptional<z.ZodObject<{
        /** Defaults to `"access_token"` when omitted. */
        accessTokenPath: z.ZodOptional<z.ZodString>;
        /** Defaults to `"refresh_token"` when omitted. */
        refreshTokenPath: z.ZodOptional<z.ZodString>;
        /** Defaults to `"expires_in"` when omitted. */
        expiresInPath: z.ZodOptional<z.ZodString>;
        /** Defaults to `"token_type"` when omitted. */
        tokenTypePath: z.ZodOptional<z.ZodString>;
        /** Opt-in path for providers that return a refresh-token lifetime. */
        refreshTokenExpiresInPath: z.ZodOptional<z.ZodString>;
    }, "strip", z.ZodTypeAny, {
        accessTokenPath?: string | undefined;
        refreshTokenPath?: string | undefined;
        expiresInPath?: string | undefined;
        tokenTypePath?: string | undefined;
        refreshTokenExpiresInPath?: string | undefined;
    }, {
        accessTokenPath?: string | undefined;
        refreshTokenPath?: string | undefined;
        expiresInPath?: string | undefined;
        tokenTypePath?: string | undefined;
        refreshTokenExpiresInPath?: string | undefined;
    }>>;
}, "strip", z.ZodTypeAny, {
    providerName: string;
    provider: string;
    authorizationUrl: string;
    tokenUrl: string;
    scopes: string[];
    i18nMap?: Record<string, {
        providerName?: string | undefined;
        providerDescription?: string | undefined;
    }> | undefined;
    providerDescription?: string | undefined;
    authorizationCodeParamName?: string | undefined;
    authorizationDisplay?: {
        title: string;
        description?: string | undefined;
        icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
        i18nMap?: Record<string, {
            description?: string | undefined;
            title?: string | undefined;
        }> | undefined;
    } | undefined;
    refreshTokenUrl?: string | undefined;
    providerIconUrl?: string | undefined;
    pkceRequired?: boolean | undefined;
    additionalParams?: Record<string, string> | undefined;
    parameterCase?: "snake" | "camel" | undefined;
    tokenRequestContentType?: "form" | "json" | undefined;
    authorizationOpenMode?: "popup" | "currentTab" | undefined;
    tokenRequest?: {
        authorizationCodeParamName?: string | undefined;
    } | undefined;
    tokenResponse?: {
        accessTokenPath?: string | undefined;
        refreshTokenPath?: string | undefined;
        expiresInPath?: string | undefined;
        tokenTypePath?: string | undefined;
        refreshTokenExpiresInPath?: string | undefined;
    } | undefined;
}, {
    providerName: string;
    provider: string;
    authorizationUrl: string;
    tokenUrl: string;
    scopes: string[];
    i18nMap?: Record<string, {
        providerName?: string | undefined;
        providerDescription?: string | undefined;
    }> | undefined;
    providerDescription?: string | undefined;
    authorizationCodeParamName?: string | undefined;
    authorizationDisplay?: {
        title: string;
        description?: string | undefined;
        icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
        i18nMap?: Record<string, {
            description?: string | undefined;
            title?: string | undefined;
        }> | undefined;
    } | undefined;
    refreshTokenUrl?: string | undefined;
    providerIconUrl?: string | undefined;
    pkceRequired?: boolean | undefined;
    additionalParams?: Record<string, string> | undefined;
    parameterCase?: "snake" | "camel" | undefined;
    tokenRequestContentType?: "form" | "json" | undefined;
    authorizationOpenMode?: "popup" | "currentTab" | undefined;
    tokenRequest?: {
        authorizationCodeParamName?: string | undefined;
    } | undefined;
    tokenResponse?: {
        accessTokenPath?: string | undefined;
        refreshTokenPath?: string | undefined;
        expiresInPath?: string | undefined;
        tokenTypePath?: string | undefined;
        refreshTokenExpiresInPath?: string | undefined;
    } | undefined;
}>;
export type OAuthProvider = ProtoBacked<z.infer<typeof OAuthProviderSchema>, ProtoOAuthProvider>;
/**
 * Output schema for extension.oauth.metadata.getAuthConfig.
 */
export declare const OAuthConfigSchema: z.ZodObject<{
    authType: z.ZodLiteral<"oauth">;
    authScope: z.ZodEnum<["channel", "manager", "caller"]>;
    oauthProvider: z.ZodObject<{
        authorizationDisplay: z.ZodOptional<z.ZodObject<{
            title: z.ZodString;
            description: z.ZodOptional<z.ZodString>;
            icon: z.ZodOptional<z.ZodEnum<["installation", "account", "organization", "permission", "settings"]>>;
            i18nMap: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
                title: z.ZodOptional<z.ZodString>;
                description: z.ZodOptional<z.ZodString>;
            }, "strict", z.ZodTypeAny, {
                description?: string | undefined;
                title?: string | undefined;
            }, {
                description?: string | undefined;
                title?: string | undefined;
            }>>>;
        }, "strict", z.ZodTypeAny, {
            title: string;
            description?: string | undefined;
            icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
            i18nMap?: Record<string, {
                description?: string | undefined;
                title?: string | undefined;
            }> | undefined;
        }, {
            title: string;
            description?: string | undefined;
            icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
            i18nMap?: Record<string, {
                description?: string | undefined;
                title?: string | undefined;
            }> | undefined;
        }>>;
        provider: z.ZodString;
        authorizationUrl: z.ZodString;
        tokenUrl: z.ZodString;
        refreshTokenUrl: z.ZodOptional<z.ZodString>;
        scopes: z.ZodArray<z.ZodString, "many">;
        providerName: z.ZodString;
        providerDescription: z.ZodOptional<z.ZodString>;
        i18nMap: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodObject<{
            providerName: z.ZodOptional<z.ZodString>;
            providerDescription: z.ZodOptional<z.ZodString>;
        }, "strip", z.ZodTypeAny, {
            providerName?: string | undefined;
            providerDescription?: string | undefined;
        }, {
            providerName?: string | undefined;
            providerDescription?: string | undefined;
        }>>, Record<string, {
            providerName?: string | undefined;
            providerDescription?: string | undefined;
        }>, Record<string, {
            providerName?: string | undefined;
            providerDescription?: string | undefined;
        }>>>;
        providerIconUrl: z.ZodOptional<z.ZodString>;
        pkceRequired: z.ZodOptional<z.ZodBoolean>;
        additionalParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        /**
         * OAuth standard parameter naming convention. Defaults to `"snake"` (RFC 6749).
         * Declare `"camel"` when the provider (e.g. Imweb) requires camelCase keys
         * on the authorize URL and token endpoint.
         */
        parameterCase: z.ZodOptional<z.ZodEnum<["snake", "camel"]>>;
        /**
         * Token endpoint request body format. Defaults to `"form"` for RFC 6749
         * providers, but some providers expect JSON bodies.
         */
        tokenRequestContentType: z.ZodOptional<z.ZodEnum<["form", "json"]>>;
        /**
         * OAuth callback query parameter name that contains the authorization code.
         * Defaults to `"code"`. Some providers, such as Amazon SP-API, use a
         * provider-specific name.
         */
        authorizationCodeParamName: z.ZodOptional<z.ZodString>;
        /**
         * Browser surface used to open the provider authorization URL. Defaults to
         * `"popup"`. Declare `"currentTab"` when the provider redirects to a full
         * Desk/AppStore URL and cannot complete the popup close contract reliably.
         */
        authorizationOpenMode: z.ZodOptional<z.ZodEnum<["popup", "currentTab"]>>;
        /**
         * Outbound token request mapping. This is intentionally separate from
         * authorizationCodeParamName, which controls callback query parsing.
         */
        tokenRequest: z.ZodOptional<z.ZodObject<{
            /** Defaults to `"code"` when omitted. */
            authorizationCodeParamName: z.ZodOptional<z.ZodString>;
        }, "strip", z.ZodTypeAny, {
            authorizationCodeParamName?: string | undefined;
        }, {
            authorizationCodeParamName?: string | undefined;
        }>>;
        /** Token endpoint response JSON object paths. */
        tokenResponse: z.ZodOptional<z.ZodObject<{
            /** Defaults to `"access_token"` when omitted. */
            accessTokenPath: z.ZodOptional<z.ZodString>;
            /** Defaults to `"refresh_token"` when omitted. */
            refreshTokenPath: z.ZodOptional<z.ZodString>;
            /** Defaults to `"expires_in"` when omitted. */
            expiresInPath: z.ZodOptional<z.ZodString>;
            /** Defaults to `"token_type"` when omitted. */
            tokenTypePath: z.ZodOptional<z.ZodString>;
            /** Opt-in path for providers that return a refresh-token lifetime. */
            refreshTokenExpiresInPath: z.ZodOptional<z.ZodString>;
        }, "strip", z.ZodTypeAny, {
            accessTokenPath?: string | undefined;
            refreshTokenPath?: string | undefined;
            expiresInPath?: string | undefined;
            tokenTypePath?: string | undefined;
            refreshTokenExpiresInPath?: string | undefined;
        }, {
            accessTokenPath?: string | undefined;
            refreshTokenPath?: string | undefined;
            expiresInPath?: string | undefined;
            tokenTypePath?: string | undefined;
            refreshTokenExpiresInPath?: string | undefined;
        }>>;
    }, "strip", z.ZodTypeAny, {
        providerName: string;
        provider: string;
        authorizationUrl: string;
        tokenUrl: string;
        scopes: string[];
        i18nMap?: Record<string, {
            providerName?: string | undefined;
            providerDescription?: string | undefined;
        }> | undefined;
        providerDescription?: string | undefined;
        authorizationCodeParamName?: string | undefined;
        authorizationDisplay?: {
            title: string;
            description?: string | undefined;
            icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
            i18nMap?: Record<string, {
                description?: string | undefined;
                title?: string | undefined;
            }> | undefined;
        } | undefined;
        refreshTokenUrl?: string | undefined;
        providerIconUrl?: string | undefined;
        pkceRequired?: boolean | undefined;
        additionalParams?: Record<string, string> | undefined;
        parameterCase?: "snake" | "camel" | undefined;
        tokenRequestContentType?: "form" | "json" | undefined;
        authorizationOpenMode?: "popup" | "currentTab" | undefined;
        tokenRequest?: {
            authorizationCodeParamName?: string | undefined;
        } | undefined;
        tokenResponse?: {
            accessTokenPath?: string | undefined;
            refreshTokenPath?: string | undefined;
            expiresInPath?: string | undefined;
            tokenTypePath?: string | undefined;
            refreshTokenExpiresInPath?: string | undefined;
        } | undefined;
    }, {
        providerName: string;
        provider: string;
        authorizationUrl: string;
        tokenUrl: string;
        scopes: string[];
        i18nMap?: Record<string, {
            providerName?: string | undefined;
            providerDescription?: string | undefined;
        }> | undefined;
        providerDescription?: string | undefined;
        authorizationCodeParamName?: string | undefined;
        authorizationDisplay?: {
            title: string;
            description?: string | undefined;
            icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
            i18nMap?: Record<string, {
                description?: string | undefined;
                title?: string | undefined;
            }> | undefined;
        } | undefined;
        refreshTokenUrl?: string | undefined;
        providerIconUrl?: string | undefined;
        pkceRequired?: boolean | undefined;
        additionalParams?: Record<string, string> | undefined;
        parameterCase?: "snake" | "camel" | undefined;
        tokenRequestContentType?: "form" | "json" | undefined;
        authorizationOpenMode?: "popup" | "currentTab" | undefined;
        tokenRequest?: {
            authorizationCodeParamName?: string | undefined;
        } | undefined;
        tokenResponse?: {
            accessTokenPath?: string | undefined;
            refreshTokenPath?: string | undefined;
            expiresInPath?: string | undefined;
            tokenTypePath?: string | undefined;
            refreshTokenExpiresInPath?: string | undefined;
        } | undefined;
    }>;
}, "strip", z.ZodTypeAny, {
    authScope: "manager" | "channel" | "caller";
    authType: "oauth";
    oauthProvider: {
        providerName: string;
        provider: string;
        authorizationUrl: string;
        tokenUrl: string;
        scopes: string[];
        i18nMap?: Record<string, {
            providerName?: string | undefined;
            providerDescription?: string | undefined;
        }> | undefined;
        providerDescription?: string | undefined;
        authorizationCodeParamName?: string | undefined;
        authorizationDisplay?: {
            title: string;
            description?: string | undefined;
            icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
            i18nMap?: Record<string, {
                description?: string | undefined;
                title?: string | undefined;
            }> | undefined;
        } | undefined;
        refreshTokenUrl?: string | undefined;
        providerIconUrl?: string | undefined;
        pkceRequired?: boolean | undefined;
        additionalParams?: Record<string, string> | undefined;
        parameterCase?: "snake" | "camel" | undefined;
        tokenRequestContentType?: "form" | "json" | undefined;
        authorizationOpenMode?: "popup" | "currentTab" | undefined;
        tokenRequest?: {
            authorizationCodeParamName?: string | undefined;
        } | undefined;
        tokenResponse?: {
            accessTokenPath?: string | undefined;
            refreshTokenPath?: string | undefined;
            expiresInPath?: string | undefined;
            tokenTypePath?: string | undefined;
            refreshTokenExpiresInPath?: string | undefined;
        } | undefined;
    };
}, {
    authScope: "manager" | "channel" | "caller";
    authType: "oauth";
    oauthProvider: {
        providerName: string;
        provider: string;
        authorizationUrl: string;
        tokenUrl: string;
        scopes: string[];
        i18nMap?: Record<string, {
            providerName?: string | undefined;
            providerDescription?: string | undefined;
        }> | undefined;
        providerDescription?: string | undefined;
        authorizationCodeParamName?: string | undefined;
        authorizationDisplay?: {
            title: string;
            description?: string | undefined;
            icon?: "installation" | "account" | "organization" | "permission" | "settings" | undefined;
            i18nMap?: Record<string, {
                description?: string | undefined;
                title?: string | undefined;
            }> | undefined;
        } | undefined;
        refreshTokenUrl?: string | undefined;
        providerIconUrl?: string | undefined;
        pkceRequired?: boolean | undefined;
        additionalParams?: Record<string, string> | undefined;
        parameterCase?: "snake" | "camel" | undefined;
        tokenRequestContentType?: "form" | "json" | undefined;
        authorizationOpenMode?: "popup" | "currentTab" | undefined;
        tokenRequest?: {
            authorizationCodeParamName?: string | undefined;
        } | undefined;
        tokenResponse?: {
            accessTokenPath?: string | undefined;
            refreshTokenPath?: string | undefined;
            expiresInPath?: string | undefined;
            tokenTypePath?: string | undefined;
            refreshTokenExpiresInPath?: string | undefined;
        } | undefined;
    };
}>;
export type OAuthConfig = ProtoBacked<z.infer<typeof OAuthConfigSchema>, ProtoOAuthConfig>;
/**
 * Input schema for extension.oauth.validation.validateCredentials.
 *
 * AppStore calls this with an empty params object after token exchange and
 * injects the decrypted access token into context.authToken. accessToken is
 * kept optional for local test harnesses and older examples.
 */
export declare const CredentialValidationInputSchema: z.ZodObject<{
    accessToken: z.ZodOptional<z.ZodString>;
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
    accessToken: z.ZodOptional<z.ZodString>;
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
    accessToken: z.ZodOptional<z.ZodString>;
}, z.ZodTypeAny, "passthrough">>;
export type CredentialValidationInput = ProtoBacked<z.infer<typeof CredentialValidationInputSchema>, ProtoCredentialValidationInput>;
/**
 * Credential validation result schema
 */
export declare const CredentialValidationResultSchema: z.ZodObject<{
    valid: z.ZodBoolean;
    expiresAt: z.ZodOptional<z.ZodString>;
    error: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    valid: boolean;
    error?: string | undefined;
    expiresAt?: string | undefined;
}, {
    valid: boolean;
    error?: string | undefined;
    expiresAt?: string | undefined;
}>;
export type CredentialValidationResult = ProtoBacked<z.infer<typeof CredentialValidationResultSchema>, ProtoCredentialValidationResult>;
export {};
//# sourceMappingURL=oauth.d.ts.map