import { type StoredOAuthAuth, type TokenResponse } from "./tokens.js";
export type OAuthResolveResult = {
    accessToken: string;
    accountId?: string;
    refresh: string;
    expires: number;
};
export type OAuthAuthClient = {
    auth: {
        set: (input: {
            path: {
                id: string;
            };
            body: {
                type: "oauth";
                refresh: string;
                access: string;
                expires: number;
                accountId?: string;
            };
        }) => Promise<unknown>;
    };
};
export type CreateOAuthRefresherOptions = {
    providerId: string;
    client: OAuthAuthClient;
    /** Default 5 minutes — refresh ahead of true expiry. */
    skewMs?: number;
    now?: () => number;
    refreshFn?: (refreshToken: string) => Promise<TokenResponse>;
    reloadAuth?: () => Promise<StoredOAuthAuth | undefined>;
    lockDir?: string | false;
};
/**
 * OpenCode Codex-style OAuth resolver: singleflight refresh + always persist a
 * rotated refresh_token before handing out the new access token.
 *
 * Concurrent callers share one network refresh so a rotating RT is never spent twice.
 */
export declare function createOAuthRefresher(opts: CreateOAuthRefresherOptions): {
    resolve: (auth: StoredOAuthAuth, reloadAuth?: (() => Promise<StoredOAuthAuth | undefined>) | undefined) => Promise<OAuthResolveResult>;
};
//# sourceMappingURL=refresh.d.ts.map