/**
 * `refresh { … }` engine: refresh-token grant against the declared token
 * endpoint. Unrotated refresh tokens are preserved; identity fields the
 * response omits are left for the caller to merge from the stored row.
 */
import type { CompiledAuthProvider } from "@oh-my-pi/pi-catalog/compat/types";
import type { OAuthCredentials } from "../oauth/types.js";
type Refresher = (credentials: OAuthCredentials, signal?: AbortSignal) => Promise<OAuthCredentials>;
/** The refresh function for a provider policy, or undefined when it never refreshes. */
export declare function createRefresh(policy: CompiledAuthProvider): Refresher | undefined;
export {};