/**
 * IdentityClient for AgentCore Identity operations
 */
import type { OAuth2TokenRequest, ApiKeyRequest } from './types.js';
/**
 * Client for interacting with Amazon Bedrock AgentCore Identity service.
 * Provides methods for managing workload identities, credential providers,
 * and retrieving OAuth2 tokens and API keys.
 */
export declare class IdentityClient {
    private readonly dataPlaneClient;
    /**
     * Creates a new IdentityClient instance
     * @param region - AWS region (defaults to AWS_REGION env var)
     * @throws Error if region cannot be determined
     */
    constructor(region?: string);
    /**
     * Retrieves an OAuth2 access token from AgentCore Identity.
     * Handles both M2M (immediate), ON_BEHALF_OF_TOKEN_EXCHANGE (immediate) and USER_FEDERATION (polling) flows.
     *
     * @param request - OAuth2 token request parameters
     * @returns OAuth2 access token
     * @throws Error if token retrieval fails or times out
     */
    getOAuth2Token(request: OAuth2TokenRequest): Promise<string>;
    /**
     * Polls for OAuth2 token until available or timeout
     */
    private pollForToken;
    /**
     * Retrieves an API key from AgentCore Identity token vault.
     *
     * @param request - API key request parameters
     * @returns API key string
     * @throws Error if API key retrieval fails
     */
    getApiKey(request: ApiKeyRequest): Promise<string>;
}
//# sourceMappingURL=client.d.ts.map