/**
 * `ruflo auth` — Cognitum identity (ADR-306).
 *
 * `login` obtains OAuth tokens via the loopback PKCE flow (default,
 * interactive desktop), the OOB manual-paste flow (`--no-browser`, or
 * auto-detected headless environments), or `--token-stdin` (CI/enterprise
 * automation — refuses interactively otherwise, per ADR-306). The refresh
 * token goes to the OS keychain when reachable, or nowhere (session-only —
 * a deliberate usability cost, not a bug) when it isn't. The access token
 * itself is NEVER written to disk; see src/auth/session.ts.
 */
import type { Command } from '../types.js';
export declare const authCommand: Command;
export default authCommand;
//# sourceMappingURL=auth.d.ts.map