import type { ReclaimClient } from '@reclaimprotocol/client/api';
import { type RegisteredTool } from '../../server.ts';
export declare function authenticateTool(client: ReclaimClient, name?: 'reclaim_authenticate' | 'authenticate_builder'): RegisteredTool;
/**
 * Standard OAuth 2.0 Authorization Code + PKCE, native-app style (RFC 8252):
 * dynamically register a public client (RFC 7591 — Better Auth's
 * `oauth-provider` plugin issues no secret for it), send the user to the
 * browser, and catch the redirect on a loopback server. `openid-client`
 * handles PKCE, `state` CSRF protection, and authorization-response
 * validation (including a denied/failed login surfacing as
 * `AuthorizationResponseError`) — this function only wires those calls
 * together and owns the loopback server (no library spins that up for you).
 */
export declare function runOAuthLoopback(client: ReclaimClient, openBrowserFn?: (url: string) => void): Promise<unknown>;