import type { HttpClient } from './http-transport.js';
/**
 * Generate a random PKCE code verifier (43-128 chars, URL-safe)
 */
export declare function generateCodeVerifier(length?: number): string;
/**
 * Generate PKCE code challenge from verifier (S256)
 */
export declare function generateCodeChallenge(verifier: string): Promise<string>;
/**
 * Build OAuth authorization URL
 */
export declare function buildAuthorizationUrl(baseUrl: string, params: {
    clientId: string;
    redirectUri: string;
    scope?: string;
    state?: string;
    codeChallenge?: string;
}): string;
/**
 * Token storage interface — implement to persist tokens
 */
export interface TokenStorage {
    getAccessToken(): Promise<string | null>;
    getRefreshToken(): Promise<string | null>;
    setTokens(accessToken: string, refreshToken: string | null, expiresIn: number): Promise<void>;
    clearTokens(): Promise<void>;
}
/**
 * In-memory token storage (default, not persistent)
 */
export declare class InMemoryTokenStorage implements TokenStorage {
    private accessToken;
    private refreshToken;
    private expiresAt;
    getAccessToken(): Promise<string | null>;
    getRefreshToken(): Promise<string | null>;
    setTokens(accessToken: string, refreshToken: string | null, expiresIn: number): Promise<void>;
    clearTokens(): Promise<void>;
}
/**
 * OAuth client — handles token exchange and refresh
 */
export declare class OAuthClient {
    private http;
    private storage;
    private clientId;
    private clientSecret?;
    constructor(http: HttpClient, options: {
        clientId: string;
        clientSecret?: string;
        storage?: TokenStorage;
    });
    /**
     * Exchange authorization code for tokens
     */
    exchangeCode(code: string, redirectUri: string, codeVerifier?: string): Promise<import("./http-transport.js").SdkResponse<{
        access_token: string;
        token_type: string;
        expires_in: number;
        refresh_token?: string;
    }>>;
    /**
     * Refresh access token using refresh token
     */
    refreshAccessToken(): Promise<import("./http-transport.js").SdkResponse<{
        access_token: string;
        token_type: string;
        expires_in: number;
        refresh_token?: string;
    }> | null>;
    /**
     * Exchange API token for access token
     */
    exchangeApiToken(apiToken: string): Promise<import("./http-transport.js").SdkResponse<{
        access_token: string;
        token_type: string;
        expires_in: number;
    }>>;
    /**
     * Get a valid access token (refreshes if expired)
     */
    getValidToken(): Promise<string | null>;
    getStorage(): TokenStorage;
}
//# sourceMappingURL=oauth.d.ts.map