import type { Request, Response } from 'express';
import type { IdpOwoxConfig } from '../../config/index.js';
import type { OwoxTokenFacade } from '../../facades/owox-token-facade.js';
import { type AuthFlowParams } from '../../utils/request-utils.js';
import type { BetterAuthSessionService } from './better-auth-session-service.js';
import type { UserContextService } from '../core/user-context-service.js';
import { PlatformAuthFlowClient } from './platform-auth-flow-client.js';
/**
 * Orchestrates PKCE completion for Platform using core tokens or social login.
 */
export declare class PkceFlowOrchestrator {
    private readonly idpOwoxConfig;
    private readonly tokenFacade;
    private readonly userContextService;
    private readonly platformAuthFlowClient;
    private readonly betterAuthSessionService;
    private readonly logger;
    constructor(idpOwoxConfig: IdpOwoxConfig, tokenFacade: OwoxTokenFacade, userContextService: UserContextService, platformAuthFlowClient: PlatformAuthFlowClient, betterAuthSessionService: BetterAuthSessionService);
    /**
     * Revokes refresh token and clears auth cookies before redirecting to sign-in.
     */
    private revokeRefreshTokenAndClearCookies;
    /**
     * Completes auth flow using Identity refresh token (platform fast-path).
     */
    completeWithIdentityRefreshToken(refreshToken: string, params: AuthFlowParams, req: Request, res: Response): Promise<URL | null>;
    /**
     * Completes auth flow using Better Auth session token received from handler response.
     */
    completeWithSocialSessionToken(sessionToken: string, params: AuthFlowParams, req: Request, res: Response, callbackProviderId?: string): Promise<URL | null>;
}
//# sourceMappingURL=pkce-flow-orchestrator.d.ts.map