import z from 'zod';
export declare const McpScopeEnum: z.ZodEnum<["mcp:read", "mcp:write"]>;
export type McpScope = z.infer<typeof McpScopeEnum>;
export declare const OAuthProtectedResourceMetadataSchema: z.ZodObject<{
    resource: z.ZodString;
    authorization_servers: z.ZodArray<z.ZodString, "many">;
    scopes_supported: z.ZodOptional<z.ZodArray<z.ZodEnum<["mcp:read", "mcp:write"]>, "many">>;
    resource_documentation: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    resource: string;
    authorization_servers: string[];
    scopes_supported?: ("mcp:read" | "mcp:write")[] | undefined;
    resource_documentation?: string | undefined;
}, {
    resource: string;
    authorization_servers: string[];
    scopes_supported?: ("mcp:read" | "mcp:write")[] | undefined;
    resource_documentation?: string | undefined;
}>;
export type OAuthProtectedResourceMetadata = z.infer<typeof OAuthProtectedResourceMetadataSchema>;
export declare const OAuthAuthorizationServerMetadataSchema: z.ZodObject<{
    issuer: z.ZodString;
    authorization_endpoint: z.ZodString;
    token_endpoint: z.ZodString;
    registration_endpoint: z.ZodOptional<z.ZodString>;
    jwks_uri: z.ZodOptional<z.ZodString>;
    response_types_supported: z.ZodArray<z.ZodLiteral<"code">, "many">;
    grant_types_supported: z.ZodArray<z.ZodEnum<["authorization_code", "refresh_token"]>, "many">;
    code_challenge_methods_supported: z.ZodArray<z.ZodLiteral<"S256">, "many">;
    scopes_supported: z.ZodArray<z.ZodEnum<["mcp:read", "mcp:write"]>, "many">;
    token_endpoint_auth_methods_supported: z.ZodArray<z.ZodLiteral<"none">, "many">;
}, "strip", z.ZodTypeAny, {
    scopes_supported: ("mcp:read" | "mcp:write")[];
    issuer: string;
    authorization_endpoint: string;
    token_endpoint: string;
    response_types_supported: "code"[];
    grant_types_supported: ("authorization_code" | "refresh_token")[];
    code_challenge_methods_supported: "S256"[];
    token_endpoint_auth_methods_supported: "none"[];
    registration_endpoint?: string | undefined;
    jwks_uri?: string | undefined;
}, {
    scopes_supported: ("mcp:read" | "mcp:write")[];
    issuer: string;
    authorization_endpoint: string;
    token_endpoint: string;
    response_types_supported: "code"[];
    grant_types_supported: ("authorization_code" | "refresh_token")[];
    code_challenge_methods_supported: "S256"[];
    token_endpoint_auth_methods_supported: "none"[];
    registration_endpoint?: string | undefined;
    jwks_uri?: string | undefined;
}>;
export type OAuthAuthorizationServerMetadata = z.infer<typeof OAuthAuthorizationServerMetadataSchema>;
export declare const McpOAuthProjectMemberContextSchema: z.ZodObject<{
    userId: z.ZodString;
    projectId: z.ZodString;
    email: z.ZodOptional<z.ZodString>;
    fullName: z.ZodOptional<z.ZodString>;
    avatar: z.ZodEffects<z.ZodOptional<z.ZodNullable<z.ZodString>>, string | undefined, string | null | undefined>;
    roles: z.ZodArray<z.ZodEnum<["admin", "editor", "viewer"]>, "many">;
}, "strip", z.ZodTypeAny, {
    userId: string;
    projectId: string;
    roles: ("admin" | "editor" | "viewer")[];
    email?: string | undefined;
    fullName?: string | undefined;
    avatar?: string | undefined;
}, {
    userId: string;
    projectId: string;
    roles: ("admin" | "editor" | "viewer")[];
    email?: string | undefined;
    fullName?: string | undefined;
    avatar?: string | null | undefined;
}>;
export type McpOAuthProjectMemberContext = z.infer<typeof McpOAuthProjectMemberContextSchema>;
export declare const McpTokenPayloadSchema: z.ZodObject<{
    userId: z.ZodString;
    projectId: z.ZodString;
    email: z.ZodOptional<z.ZodString>;
    fullName: z.ZodOptional<z.ZodString>;
    avatar: z.ZodEffects<z.ZodOptional<z.ZodNullable<z.ZodString>>, string | undefined, string | null | undefined>;
    roles: z.ZodArray<z.ZodEnum<["admin", "editor", "viewer"]>, "many">;
} & {
    clientId: z.ZodString;
    resource: z.ZodString;
    scopes: z.ZodArray<z.ZodEnum<["mcp:read", "mcp:write"]>, "many">;
    authFlow: z.ZodLiteral<"mcp">;
}, "strip", z.ZodTypeAny, {
    userId: string;
    projectId: string;
    roles: ("admin" | "editor" | "viewer")[];
    authFlow: "mcp";
    resource: string;
    clientId: string;
    scopes: ("mcp:read" | "mcp:write")[];
    email?: string | undefined;
    fullName?: string | undefined;
    avatar?: string | undefined;
}, {
    userId: string;
    projectId: string;
    roles: ("admin" | "editor" | "viewer")[];
    authFlow: "mcp";
    resource: string;
    clientId: string;
    scopes: ("mcp:read" | "mcp:write")[];
    email?: string | undefined;
    fullName?: string | undefined;
    avatar?: string | null | undefined;
}>;
export type McpTokenPayload = z.infer<typeof McpTokenPayloadSchema>;
export declare const OAuthAuthorizationRequestSchema: z.ZodObject<{
    clientId: z.ZodString;
    redirectUri: z.ZodString;
    resource: z.ZodString;
    scopes: z.ZodArray<z.ZodEnum<["mcp:read", "mcp:write"]>, "many">;
    state: z.ZodString;
    codeChallenge: z.ZodString;
    codeChallengeMethod: z.ZodLiteral<"S256">;
}, "strip", z.ZodTypeAny, {
    resource: string;
    clientId: string;
    scopes: ("mcp:read" | "mcp:write")[];
    redirectUri: string;
    state: string;
    codeChallenge: string;
    codeChallengeMethod: "S256";
}, {
    resource: string;
    clientId: string;
    scopes: ("mcp:read" | "mcp:write")[];
    redirectUri: string;
    state: string;
    codeChallenge: string;
    codeChallengeMethod: "S256";
}>;
export type OAuthAuthorizationRequest = z.infer<typeof OAuthAuthorizationRequestSchema>;
export declare const OAuthAuthorizationCodeSchema: z.ZodObject<{
    code: z.ZodString;
    clientId: z.ZodString;
    redirectUri: z.ZodString;
    resource: z.ZodString;
    scopes: z.ZodArray<z.ZodEnum<["mcp:read", "mcp:write"]>, "many">;
    expiresAt: z.ZodString;
}, "strip", z.ZodTypeAny, {
    code: string;
    resource: string;
    clientId: string;
    scopes: ("mcp:read" | "mcp:write")[];
    redirectUri: string;
    expiresAt: string;
}, {
    code: string;
    resource: string;
    clientId: string;
    scopes: ("mcp:read" | "mcp:write")[];
    redirectUri: string;
    expiresAt: string;
}>;
export type OAuthAuthorizationCode = z.infer<typeof OAuthAuthorizationCodeSchema>;
export declare const OAuthTokenExchangeRequestSchema: z.ZodObject<{
    grantType: z.ZodEnum<["authorization_code", "refresh_token"]>;
    code: z.ZodOptional<z.ZodString>;
    refreshToken: z.ZodOptional<z.ZodString>;
    clientId: z.ZodString;
    redirectUri: z.ZodOptional<z.ZodString>;
    resource: z.ZodString;
    codeVerifier: z.ZodOptional<z.ZodString>;
}, "strip", z.ZodTypeAny, {
    resource: string;
    clientId: string;
    grantType: "authorization_code" | "refresh_token";
    code?: string | undefined;
    redirectUri?: string | undefined;
    refreshToken?: string | undefined;
    codeVerifier?: string | undefined;
}, {
    resource: string;
    clientId: string;
    grantType: "authorization_code" | "refresh_token";
    code?: string | undefined;
    redirectUri?: string | undefined;
    refreshToken?: string | undefined;
    codeVerifier?: string | undefined;
}>;
export type OAuthTokenExchangeRequest = z.infer<typeof OAuthTokenExchangeRequestSchema>;
export declare const OAuthTokenExchangeResultSchema: z.ZodObject<{
    access_token: z.ZodString;
    refresh_token: z.ZodOptional<z.ZodString>;
    token_type: z.ZodEnum<["Bearer", "bearer"]>;
    expires_in: z.ZodNumber;
    scope: z.ZodString;
}, "strip", z.ZodTypeAny, {
    access_token: string;
    token_type: "Bearer" | "bearer";
    expires_in: number;
    scope: string;
    refresh_token?: string | undefined;
}, {
    access_token: string;
    token_type: "Bearer" | "bearer";
    expires_in: number;
    scope: string;
    refresh_token?: string | undefined;
}>;
export type OAuthTokenExchangeResult = z.infer<typeof OAuthTokenExchangeResultSchema>;
export declare const OAuthJwksResultSchema: z.ZodObject<{
    keys: z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">;
}, "strip", z.ZodTypeAny, {
    keys: Record<string, unknown>[];
}, {
    keys: Record<string, unknown>[];
}>;
export type OAuthJwksResult = z.infer<typeof OAuthJwksResultSchema>;
//# sourceMappingURL=oauth.d.ts.map