import type { DPoPKeyPair } from './types.js';
/**
 * Generate ES256 DPoP key pair
 * Uses Web Crypto API (Node.js crypto.webcrypto)
 */
export declare function generateDPoPKeyPair(): Promise<DPoPKeyPair>;
/**
 * Export public key as JWK for inclusion in DPoP proof header
 */
export declare function exportPublicKeyAsJWK(publicKey: CryptoKey): Promise<import('jose').JWK>;
/**
 * Create DPoP proof JWT for token endpoint requests
 */
export declare function createDPoPProofForToken(keyPair: DPoPKeyPair, httpMethod: string, tokenEndpointUrl: string, nonce?: string): Promise<string>;
/**
 * Create DPoP proof JWT for resource server (PDS) requests
 * Includes ath (access token hash) field
 */
export declare function createDPoPProofForResource(keyPair: DPoPKeyPair, httpMethod: string, resourceUrl: string, accessToken: string, nonce?: string): Promise<string>;
/**
 * Extract DPoP nonce from response headers
 */
export declare function extractDPoPNonce(headers: Headers | Record<string, string | string[] | undefined>): string | null;
//# sourceMappingURL=dpop.d.ts.map