import { z } from 'zod';
/**
 * BlueskyConfig
 * Configuration for AT Protocol OAuth client
 * Requires private_key_jwt for confidential client security
 */
export declare const blueskyConfigGuard: z.ZodEffects<z.ZodObject<{
    clientMetadataUri: z.ZodString;
    clientId: z.ZodOptional<z.ZodString>;
    jwksUri: z.ZodString;
    scope: z.ZodDefault<z.ZodString>;
    tokenEndpointAuthMethod: z.ZodLiteral<"private_key_jwt">;
}, "strip", z.ZodTypeAny, {
    clientMetadataUri: string;
    jwksUri: string;
    scope: string;
    tokenEndpointAuthMethod: "private_key_jwt";
    clientId?: string | undefined;
}, {
    clientMetadataUri: string;
    jwksUri: string;
    tokenEndpointAuthMethod: "private_key_jwt";
    clientId?: string | undefined;
    scope?: string | undefined;
}>, {
    clientMetadataUri: string;
    jwksUri: string;
    scope: string;
    tokenEndpointAuthMethod: "private_key_jwt";
    clientId?: string | undefined;
}, {
    clientMetadataUri: string;
    jwksUri: string;
    tokenEndpointAuthMethod: "private_key_jwt";
    clientId?: string | undefined;
    scope?: string | undefined;
}>;
export type BlueskyConfig = z.infer<typeof blueskyConfigGuard>;
/**
 * authResponseGuard
 * Validates query parameters from AT Protocol authorization callback
 */
export declare const authResponseGuard: z.ZodObject<{
    code: z.ZodOptional<z.ZodString>;
    state: z.ZodOptional<z.ZodString>;
    iss: z.ZodOptional<z.ZodString>;
    error: z.ZodOptional<z.ZodString>;
    error_description: z.ZodOptional<z.ZodString>;
}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
    code: z.ZodOptional<z.ZodString>;
    state: z.ZodOptional<z.ZodString>;
    iss: z.ZodOptional<z.ZodString>;
    error: z.ZodOptional<z.ZodString>;
    error_description: z.ZodOptional<z.ZodString>;
}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
    code: z.ZodOptional<z.ZodString>;
    state: z.ZodOptional<z.ZodString>;
    iss: z.ZodOptional<z.ZodString>;
    error: z.ZodOptional<z.ZodString>;
    error_description: z.ZodOptional<z.ZodString>;
}, z.ZodTypeAny, "passthrough">>;
export type AuthResponse = z.infer<typeof authResponseGuard>;
/**
 * PARResponse
 * Response from Pushed Authorization Request
 */
export declare const parResponseGuard: z.ZodObject<{
    request_uri: z.ZodString;
    expires_in: z.ZodOptional<z.ZodNumber>;
}, "strip", z.ZodTypeAny, {
    request_uri: string;
    expires_in?: number | undefined;
}, {
    request_uri: string;
    expires_in?: number | undefined;
}>;
export type PARResponse = z.infer<typeof parResponseGuard>;
/**
 * TokenResponse
 * AT Protocol OAuth token response
 */
export declare const tokenResponseGuard: z.ZodObject<{
    access_token: z.ZodString;
    refresh_token: z.ZodOptional<z.ZodString>;
    token_type: z.ZodLiteral<"Bearer">;
    expires_in: z.ZodNumber;
    scope: z.ZodString;
    sub: z.ZodString;
    did: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    scope: string;
    expires_in: number;
    access_token: string;
    token_type: "Bearer";
    sub: string;
    refresh_token?: string | undefined;
    did?: string | undefined;
}, {
    scope: string;
    expires_in: number;
    access_token: string;
    token_type: "Bearer";
    sub: string;
    refresh_token?: string | undefined;
    did?: string | undefined;
}>;
export type TokenResponse = z.infer<typeof tokenResponseGuard>;
/**
 * ProfileResponse
 * AT Protocol profile response from PDS
 */
export declare const profileResponseGuard: z.ZodObject<{
    did: z.ZodString;
    handle: z.ZodString;
    displayName: z.ZodOptional<z.ZodString>;
    avatar: z.ZodOptional<z.ZodString>;
    email: z.ZodOptional<z.ZodString>;
    description: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    did: string;
    handle: string;
    displayName?: string | undefined;
    avatar?: string | undefined;
    email?: string | undefined;
    description?: string | undefined;
}, {
    did: string;
    handle: string;
    displayName?: string | undefined;
    avatar?: string | undefined;
    email?: string | undefined;
    description?: string | undefined;
}>;
export type ProfileResponse = z.infer<typeof profileResponseGuard>;
/**
 * AuthorizationServerMetadata
 * OAuth authorization server metadata
 */
export declare const authorizationServerMetadataGuard: z.ZodObject<{
    issuer: z.ZodString;
    pushed_authorization_request_endpoint: z.ZodString;
    authorization_endpoint: z.ZodString;
    token_endpoint: z.ZodString;
    scopes_supported: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
}, "strip", z.ZodTypeAny, {
    issuer: string;
    pushed_authorization_request_endpoint: string;
    authorization_endpoint: string;
    token_endpoint: string;
    scopes_supported: string | string[];
}, {
    issuer: string;
    pushed_authorization_request_endpoint: string;
    authorization_endpoint: string;
    token_endpoint: string;
    scopes_supported: string | string[];
}>;
export type AuthorizationServerMetadata = z.infer<typeof authorizationServerMetadataGuard>;
/**
 * ResourceServerMetadata
 * OAuth protected resource metadata
 */
export declare const resourceServerMetadataGuard: z.ZodObject<{
    authorization_servers: z.ZodArray<z.ZodString, "many">;
}, "strip", z.ZodTypeAny, {
    authorization_servers: string[];
}, {
    authorization_servers: string[];
}>;
export type ResourceServerMetadata = z.infer<typeof resourceServerMetadataGuard>;
/**
 * DIDDocument
 * AT Protocol DID document structure
 */
export declare const didDocumentGuard: z.ZodObject<{
    id: z.ZodString;
    service: z.ZodOptional<z.ZodArray<z.ZodObject<{
        type: z.ZodString;
        serviceEndpoint: z.ZodString;
    }, "strip", z.ZodTypeAny, {
        type: string;
        serviceEndpoint: string;
    }, {
        type: string;
        serviceEndpoint: string;
    }>, "many">>;
}, "strip", z.ZodTypeAny, {
    id: string;
    service?: {
        type: string;
        serviceEndpoint: string;
    }[] | undefined;
}, {
    id: string;
    service?: {
        type: string;
        serviceEndpoint: string;
    }[] | undefined;
}>;
export type DIDDocument = z.infer<typeof didDocumentGuard>;
/**
 * PKCE Code Verifier and Challenge
 */
export interface PKCECodePair {
    codeVerifier: string;
    codeChallenge: string;
    codeChallengeMethod: 'S256';
}
/**
 * DPoP Key Pair and Nonce
 */
export interface DPoPKeyPair {
    publicKey: CryptoKey;
    privateKey: CryptoKey;
}
export interface DPoPNonce {
    value: string;
    server: string;
    timestamp: number;
}
//# sourceMappingURL=types.d.ts.map