export type AuthServiceOptions = {
    baseUrl: string;
    clientId: string;
    apiKey?: string;
};
export declare class AuthService {
    readonly baseUrl: string;
    readonly clientId: string;
    private readonly apiKey?;
    private activeGetAccessTokenPromise?;
    constructor(options: AuthServiceOptions);
    /**
     * True when a pre-created Kaneo API key is used instead of the interactive
     * device flow. Callers use this to avoid clearing/retrying auth on a 401.
     */
    get usingApiKey(): boolean;
    clearToken(): Promise<void>;
    private validateAccessToken;
    private log;
    /**
     * Returns a valid access token, running the device authorization flow if needed.
     */
    getAccessToken(): Promise<string>;
}