/**
 * OAuthClient, OAuth flows for **daemon authentication**.
 *
 * Wraps the pure PKCE/OAuth 2.0 functions in `oauth-core.ts` behind a class
 * boundary so callers can inject config once and call methods, rather than
 * threading `OAuthProviderConfig` through every call.
 *
 * This client handles authentication between the SDK and the goodvibes daemon.
 * For OAuth flows that subscribe to external AI providers (OpenAI, Anthropic,
 * etc.), see {@link SubscriptionManager} in
 * `../config/subscriptions.ts`.
 *
 * @see SubscriptionManager, OAuth flows for provider subscriptions.
 */
import type { OAuthProviderConfig } from '../../config/subscriptions.js';
export type { OAuthStartState, OAuthTokenPayload } from '../../../client-auth/oauth-types.js';
import type { OAuthStartState, OAuthTokenPayload } from '../../../client-auth/oauth-types.js';
export declare class OAuthClient {
    #private;
    constructor(config: OAuthProviderConfig);
    /**
     * Build the authorization URL and PKCE state needed to start an OAuth flow.
     * Redirect the user's browser to `result.authorizationUrl`.
     */
    beginAuthorization(input?: {
        readonly state?: string | undefined;
        readonly verifier?: string | undefined;
        readonly redirectUri?: string | undefined;
    }): Promise<OAuthStartState>;
    /**
     * Exchange an authorization code (returned via the redirect) for tokens.
     * Use the `state` and `verifier` from the matching `beginAuthorization` call.
     */
    exchangeCode(input: {
        readonly code: string;
        readonly verifier: string;
        readonly redirectUri: string;
        readonly state?: string | undefined;
    }): Promise<OAuthTokenPayload>;
    /**
     * Use a refresh token to obtain a new access token without user interaction.
     */
    refreshToken(refreshToken: string): Promise<OAuthTokenPayload>;
    /**
     * Decode a JWT access token's payload without verification.
     * Returns null when the token is malformed.
     */
    decodeJwtPayload(token: string): Record<string, unknown> | null;
    /** Expose the provider config this client was built from. */
    get config(): OAuthProviderConfig;
}
//# sourceMappingURL=oauth-client.d.ts.map