import type { CredentialStore } from '@earendil-works/pi-ai';
import type { GitHubCopilotOAuthCredential } from './copilot-grant.ts';
import type { AccountModelSourceDependencies } from './account-model-source.ts';
/** Native getAuth renews within five minutes; reserve another thirty seconds for metadata preparation. */
export declare const ACCOUNT_MODEL_AUTH_MIN_VALIDITY_MS: number;
/** An opaque, process-local account key. Never a substitute for request credentials. */
export declare function copilotAccountKey(grant: GitHubCopilotOAuthCredential): string;
/** Compare normalized permission snapshots without retaining model credentials. */
export declare function copilotEntitlementKey(grant: Pick<GitHubCopilotOAuthCredential, 'availableModelIds'>): string;
/**
 * Bind model discovery to the existing native OAuth lifecycle. No model catalog,
 * login, environment fallback or separate credential record is introduced here.
 */
export declare function createAccountModelAuth(credentials: CredentialStore | (() => CredentialStore), renewRejectedCredential?: (grant: GitHubCopilotOAuthCredential) => boolean): Pick<AccountModelSourceDependencies, 'resolveAuth' | 'assertAuthCurrent'>;
//# sourceMappingURL=account-model-auth.d.ts.map