import type { SlasTokenConfig, SlasTokenResponse, SlasRegisteredLoginConfig } from './types.js';
/**
 * Retrieves a guest shopper access token from SLAS.
 *
 * - **Private client** (slasClientSecret set): Uses `client_credentials` grant.
 * - **Public client** (no secret): Uses PKCE authorization code flow with `hint=guest`.
 *
 * @param config - SLAS token configuration
 * @returns The token response including access_token and refresh_token
 */
export declare function getGuestToken(config: SlasTokenConfig): Promise<SlasTokenResponse>;
/**
 * Retrieves a registered customer access token from SLAS.
 *
 * Uses the `/oauth2/login` endpoint with shopper credentials, then exchanges
 * the authorization code for an access token.
 *
 * The registered-customer flow is PKCE-protected for **both** public and
 * private clients: a `code_challenge` is always presented at the
 * `/oauth2/login` step, so the matching `code_verifier` must always be sent at
 * the token exchange with the `authorization_code_pkce` grant.
 *
 * - **Public client**: PKCE token exchange (no client secret).
 * - **Private client**: PKCE token exchange, plus HTTP Basic authentication
 *   using the client secret. The client must NOT drop PKCE, or SLAS rejects the
 *   exchange with `400 code_verifier is required`.
 *
 * @param config - SLAS token configuration including shopper credentials
 * @returns The token response including access_token and refresh_token
 */
export declare function getRegisteredToken(config: SlasRegisteredLoginConfig): Promise<SlasTokenResponse>;