import { BaseCommand } from '@salesforce/b2c-tooling-sdk/cli';
/**
 * Authenticate an API client (client_credentials or password grant) and persist the session.
 *
 * Grant type is auto-detected based on credentials provided:
 *   - client_credentials: when only --client-id + --client-secret are given
 *   - password: when --user + --user-password are also provided
 *
 * Only the access token is persisted — the client secret is NEVER stored.
 * When the access token expires, re-run this command with the same credentials
 * to obtain a new one. There is no automatic refresh.
 */
export default class AuthClient extends BaseCommand<typeof AuthClient> {
    static description: string;
    static examples: string[];
    static flags: {
        'client-id': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
        'client-secret': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
        'account-manager-host': import("@oclif/core/interfaces").OptionFlag<string, import("@oclif/core/interfaces").CustomOptions>;
        'auth-scope': import("@oclif/core/interfaces").OptionFlag<string[] | undefined, import("@oclif/core/interfaces").CustomOptions>;
        'grant-type': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
        user: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
        'user-password': import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
    };
    static hiddenAliases: string[];
    protected loadConfiguration(): Promise<import("@salesforce/b2c-tooling-sdk").ResolvedB2CConfig>;
    run(): Promise<void>;
    private extractUser;
    private parseErrorMessage;
    private resolveGrantType;
}