import { Command } from 'commander';
import * as http from 'http';
import { CliActionableError } from '../../runtime/actionable-error';
export declare const NEXUSCLAW_DX_OAUTH_SCOPE: string;
export declare function generatePkcePair(): {
    verifier: string;
    challenge: string;
    method: string;
};
export declare function isLoopbackInstanceUrl(instanceUrl: string): boolean;
export declare function isPlainHttpInstanceUrl(instanceUrl: string): boolean;
export declare function parseAuthTimeoutSeconds(value: string): number;
export declare function buildOAuthCallbackTimeoutMessage(input: {
    timeoutSeconds: number;
    instanceUrl: string;
    clientId: string;
    redirectUri: string;
}): string;
export declare function buildOAuthCallbackTimeoutError(input: {
    timeoutSeconds: number;
    instanceUrl: string;
    clientId: string;
    redirectUri: string;
}): CliActionableError;
export declare function buildOAuthBrowserLaunchFailureError(input: {
    launcher: 'system' | 'configured';
    error: unknown;
}): CliActionableError;
export type OAuthCallbackDisposition = 'process' | 'ignore-non-callback' | 'reject-missing-state' | 'reject-state-mismatch' | 'reject-empty-callback';
export declare function classifyOAuthCallbackRequest(input: {
    pathname: string;
    callbackState: string | null;
    expectedState: string;
    hasAuthorizationResponse: boolean;
}): OAuthCallbackDisposition;
export declare function finalizeLoopbackListener(server: http.Server): void;
export declare const loginWebCommand: Command;