/**
 * OpenAI Codex (ChatGPT OAuth) flow — browser and device-code flows.
 */
import type { OAuthController, OAuthCredentials } from "./types";
export declare function decodeJwt<T = Record<string, unknown>>(token: string): T | null;
/** Formats OpenAI Codex OAuth token endpoint errors for login and refresh failures. */
export declare function formatOpenAICodexTokenEndpointError(status: number, bodyText: string): string;
/** Builds the Codex browser OAuth URL used by browser login; exported for auth regression tests. */
export declare function createOpenAICodexAuthorizationUrl(args: {
    state: string;
    redirectUri: string;
    challenge: string;
    originator?: string;
}): string;
/**
 * Login with OpenAI Codex OAuth
 */
export type OpenAICodexLoginOptions = OAuthController & {
    /** Optional originator value for OpenAI Codex OAuth. Default matches OMP Codex request headers. */
    originator?: string;
};
export declare function loginOpenAICodex(options: OpenAICodexLoginOptions): Promise<OAuthCredentials>;
/**
 * Login with OpenAI Codex using the device-code (headless) flow.
 *
 * Avoids a local callback server entirely — useful when port 1455 is unavailable
 * or when the browser callback flow fails with 403 (e.g. network/proxy issues).
 */
export declare function loginOpenAICodexDevice(ctrl: OAuthController): Promise<OAuthCredentials>;
/**
 * Refresh OpenAI Codex OAuth token
 */
export declare function refreshOpenAICodexToken(refreshToken: string): Promise<OAuthCredentials>;