import type { InferSchema } from "../../extensions/schema/index.js";
import { type OAuthStateMetadata } from "../state-metadata.js";
export declare const getOAuthProviderConfigSchema: () => import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    providerId: import("../../internal-agents/schema.js").Schema<string>;
    displayName: import("../../internal-agents/schema.js").Schema<string>;
    authorizationUrl: import("../../internal-agents/schema.js").Schema<string>;
    tokenUrl: import("../../internal-agents/schema.js").Schema<string>;
    userInfoUrl: import("../../internal-agents/schema.js").Schema<string | undefined>;
    revocationUrl: import("../../internal-agents/schema.js").Schema<string | undefined>;
    clientIdEnvVar: import("../../internal-agents/schema.js").Schema<string>;
    clientSecretEnvVar: import("../../internal-agents/schema.js").Schema<string>;
    additionalAuthParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    additionalTokenParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    useBasicAuth: import("../../internal-agents/schema.js").Schema<boolean | undefined>;
    pkceMode: import("../../internal-agents/schema.js").Schema<"required" | "unsupported" | "supported" | undefined>;
    runtimeSupport: import("../../internal-agents/schema.js").Schema<"generic" | "provider-adapter-required" | undefined>;
    tokenRequestFormat: import("../../internal-agents/schema.js").Schema<"json" | "form" | undefined>;
    tokenRequestHeaders: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    apiHeaders: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    scopeSeparator: import("../../internal-agents/schema.js").Schema<" " | "," | undefined>;
    requestTimeoutMs: import("../../internal-agents/schema.js").Schema<number | undefined>;
    maxTokenResponseBytes: import("../../internal-agents/schema.js").Schema<number | undefined>;
    maxApiResponseBytes: import("../../internal-agents/schema.js").Schema<number | undefined>;
    tokenResponseMapping: import("../../internal-agents/schema.js").Schema<Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
        accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        expiresIn: import("../../internal-agents/schema.js").Schema<string | undefined>;
        tokenType: import("../../internal-agents/schema.js").Schema<string | undefined>;
        scope: import("../../internal-agents/schema.js").Schema<string | undefined>;
    }>> | undefined>;
}>>;
export declare const getOAuthServiceConfigSchema: () => import("../../internal-agents/schema.js").Schema<{
    providerId: string;
    displayName: string;
    authorizationUrl: string;
    tokenUrl: string;
    clientIdEnvVar: string;
    clientSecretEnvVar: string;
} & {
    userInfoUrl?: string | undefined;
    revocationUrl?: string | undefined;
    additionalAuthParams?: Record<string, string> | undefined;
    additionalTokenParams?: Record<string, string> | undefined;
    useBasicAuth?: boolean | undefined;
    pkceMode?: "required" | "unsupported" | "supported" | undefined;
    runtimeSupport?: "generic" | "provider-adapter-required" | undefined;
    tokenRequestFormat?: "json" | "form" | undefined;
    tokenRequestHeaders?: Record<string, string> | undefined;
    apiHeaders?: Record<string, string> | undefined;
    scopeSeparator?: " " | "," | undefined;
    requestTimeoutMs?: number | undefined;
    maxTokenResponseBytes?: number | undefined;
    maxApiResponseBytes?: number | undefined;
    tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
        accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        expiresIn: import("../../internal-agents/schema.js").Schema<string | undefined>;
        tokenType: import("../../internal-agents/schema.js").Schema<string | undefined>;
        scope: import("../../internal-agents/schema.js").Schema<string | undefined>;
    }>> | undefined;
} & {
    serviceId: string;
    defaultScopes: string[];
    apiBaseUrl: string;
}>;
export declare const getOAuthTokensSchema: () => import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    accessToken: import("../../internal-agents/schema.js").Schema<string>;
    refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
    expiresAt: import("../../internal-agents/schema.js").Schema<number | undefined>;
    tokenType: import("../../internal-agents/schema.js").Schema<string | undefined>;
    scope: import("../../internal-agents/schema.js").Schema<string | undefined>;
    scopeSource: import("../../internal-agents/schema.js").Schema<"default" | "explicit" | undefined>;
    requestedScope: import("../../internal-agents/schema.js").Schema<string | undefined>;
    idToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
}>>;
/** State for CSRF protection and PKCE */
export declare const getOAuthStateSchema: () => import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    state: import("../../internal-agents/schema.js").Schema<string>;
    codeVerifier: import("../../internal-agents/schema.js").Schema<string | undefined>;
    redirectUri: import("../../internal-agents/schema.js").Schema<string>;
    scopes: import("../../internal-agents/schema.js").Schema<string[]>;
    scopeSource: import("../../internal-agents/schema.js").Schema<"default" | "explicit" | undefined>;
    createdAt: import("../../internal-agents/schema.js").Schema<number>;
    metadata: import("../../internal-agents/schema.js").Schema<OAuthStateMetadata | undefined>;
}>>;
export declare const getTokenExchangeResultSchema: () => import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    success: import("../../internal-agents/schema.js").Schema<boolean>;
    tokens: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
        accessToken: import("../../internal-agents/schema.js").Schema<string>;
        refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        expiresAt: import("../../internal-agents/schema.js").Schema<number | undefined>;
        tokenType: import("../../internal-agents/schema.js").Schema<string | undefined>;
        scope: import("../../internal-agents/schema.js").Schema<string | undefined>;
        scopeSource: import("../../internal-agents/schema.js").Schema<"default" | "explicit" | undefined>;
        requestedScope: import("../../internal-agents/schema.js").Schema<string | undefined>;
        idToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
    }> | undefined>;
    error: import("../../internal-agents/schema.js").Schema<string | undefined>;
    errorDescription: import("../../internal-agents/schema.js").Schema<string | undefined>;
}>>;
export declare const getAuthorizationUrlOptionsSchema: () => import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    scopes: import("../../internal-agents/schema.js").Schema<string[] | undefined>;
    state: import("../../internal-agents/schema.js").Schema<string | undefined>;
    usePkce: import("../../internal-agents/schema.js").Schema<boolean | undefined>;
    additionalParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    redirectUri: import("../../internal-agents/schema.js").Schema<string | undefined>;
}>>;
export declare const getTokenExchangeOptionsSchema: () => import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    code: import("../../internal-agents/schema.js").Schema<string>;
    redirectUri: import("../../internal-agents/schema.js").Schema<string>;
    codeVerifier: import("../../internal-agents/schema.js").Schema<string | undefined>;
}>>;
/** Configuration used by oauth provider. */
export type OAuthProviderConfig = InferSchema<ReturnType<typeof getOAuthProviderConfigSchema>>;
/** Configuration used by oauth service. */
export type OAuthServiceConfig = InferSchema<ReturnType<typeof getOAuthServiceConfigSchema>>;
/** Public API contract for oauth tokens. */
export type OAuthTokens = InferSchema<ReturnType<typeof getOAuthTokensSchema>>;
/** State for oauth. */
export type OAuthState = InferSchema<ReturnType<typeof getOAuthStateSchema>>;
/** Result returned from token exchange. */
export type TokenExchangeResult = InferSchema<ReturnType<typeof getTokenExchangeResultSchema>>;
/** Options accepted by authorization URL. */
export type AuthorizationUrlOptions = InferSchema<ReturnType<typeof getAuthorizationUrlOptionsSchema>>;
/** Options accepted by token exchange. */
export type TokenExchangeOptions = InferSchema<ReturnType<typeof getTokenExchangeOptionsSchema>>;
export declare const OAuthProviderConfigSchema: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    providerId: import("../../internal-agents/schema.js").Schema<string>;
    displayName: import("../../internal-agents/schema.js").Schema<string>;
    authorizationUrl: import("../../internal-agents/schema.js").Schema<string>;
    tokenUrl: import("../../internal-agents/schema.js").Schema<string>;
    userInfoUrl: import("../../internal-agents/schema.js").Schema<string | undefined>;
    revocationUrl: import("../../internal-agents/schema.js").Schema<string | undefined>;
    clientIdEnvVar: import("../../internal-agents/schema.js").Schema<string>;
    clientSecretEnvVar: import("../../internal-agents/schema.js").Schema<string>;
    additionalAuthParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    additionalTokenParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    useBasicAuth: import("../../internal-agents/schema.js").Schema<boolean | undefined>;
    pkceMode: import("../../internal-agents/schema.js").Schema<"required" | "unsupported" | "supported" | undefined>;
    runtimeSupport: import("../../internal-agents/schema.js").Schema<"generic" | "provider-adapter-required" | undefined>;
    tokenRequestFormat: import("../../internal-agents/schema.js").Schema<"json" | "form" | undefined>;
    tokenRequestHeaders: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    apiHeaders: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    scopeSeparator: import("../../internal-agents/schema.js").Schema<" " | "," | undefined>;
    requestTimeoutMs: import("../../internal-agents/schema.js").Schema<number | undefined>;
    maxTokenResponseBytes: import("../../internal-agents/schema.js").Schema<number | undefined>;
    maxApiResponseBytes: import("../../internal-agents/schema.js").Schema<number | undefined>;
    tokenResponseMapping: import("../../internal-agents/schema.js").Schema<Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
        accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        expiresIn: import("../../internal-agents/schema.js").Schema<string | undefined>;
        tokenType: import("../../internal-agents/schema.js").Schema<string | undefined>;
        scope: import("../../internal-agents/schema.js").Schema<string | undefined>;
    }>> | undefined>;
}>>;
export declare const OAuthServiceConfigSchema: import("../../internal-agents/schema.js").Schema<{
    providerId: string;
    displayName: string;
    authorizationUrl: string;
    tokenUrl: string;
    clientIdEnvVar: string;
    clientSecretEnvVar: string;
} & {
    userInfoUrl?: string | undefined;
    revocationUrl?: string | undefined;
    additionalAuthParams?: Record<string, string> | undefined;
    additionalTokenParams?: Record<string, string> | undefined;
    useBasicAuth?: boolean | undefined;
    pkceMode?: "required" | "unsupported" | "supported" | undefined;
    runtimeSupport?: "generic" | "provider-adapter-required" | undefined;
    tokenRequestFormat?: "json" | "form" | undefined;
    tokenRequestHeaders?: Record<string, string> | undefined;
    apiHeaders?: Record<string, string> | undefined;
    scopeSeparator?: " " | "," | undefined;
    requestTimeoutMs?: number | undefined;
    maxTokenResponseBytes?: number | undefined;
    maxApiResponseBytes?: number | undefined;
    tokenResponseMapping?: Partial<import("../../extensions/schema/schema-validator.js").InferShape<{
        accessToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        expiresIn: import("../../internal-agents/schema.js").Schema<string | undefined>;
        tokenType: import("../../internal-agents/schema.js").Schema<string | undefined>;
        scope: import("../../internal-agents/schema.js").Schema<string | undefined>;
    }>> | undefined;
} & {
    serviceId: string;
    defaultScopes: string[];
    apiBaseUrl: string;
}>;
export declare const OAuthTokensSchema: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    accessToken: import("../../internal-agents/schema.js").Schema<string>;
    refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
    expiresAt: import("../../internal-agents/schema.js").Schema<number | undefined>;
    tokenType: import("../../internal-agents/schema.js").Schema<string | undefined>;
    scope: import("../../internal-agents/schema.js").Schema<string | undefined>;
    scopeSource: import("../../internal-agents/schema.js").Schema<"default" | "explicit" | undefined>;
    requestedScope: import("../../internal-agents/schema.js").Schema<string | undefined>;
    idToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
}>>;
export declare const OAuthStateSchema: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    state: import("../../internal-agents/schema.js").Schema<string>;
    codeVerifier: import("../../internal-agents/schema.js").Schema<string | undefined>;
    redirectUri: import("../../internal-agents/schema.js").Schema<string>;
    scopes: import("../../internal-agents/schema.js").Schema<string[]>;
    scopeSource: import("../../internal-agents/schema.js").Schema<"default" | "explicit" | undefined>;
    createdAt: import("../../internal-agents/schema.js").Schema<number>;
    metadata: import("../../internal-agents/schema.js").Schema<OAuthStateMetadata | undefined>;
}>>;
export declare const TokenExchangeResultSchema: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    success: import("../../internal-agents/schema.js").Schema<boolean>;
    tokens: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
        accessToken: import("../../internal-agents/schema.js").Schema<string>;
        refreshToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
        expiresAt: import("../../internal-agents/schema.js").Schema<number | undefined>;
        tokenType: import("../../internal-agents/schema.js").Schema<string | undefined>;
        scope: import("../../internal-agents/schema.js").Schema<string | undefined>;
        scopeSource: import("../../internal-agents/schema.js").Schema<"default" | "explicit" | undefined>;
        requestedScope: import("../../internal-agents/schema.js").Schema<string | undefined>;
        idToken: import("../../internal-agents/schema.js").Schema<string | undefined>;
    }> | undefined>;
    error: import("../../internal-agents/schema.js").Schema<string | undefined>;
    errorDescription: import("../../internal-agents/schema.js").Schema<string | undefined>;
}>>;
export declare const AuthorizationUrlOptionsSchema: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    scopes: import("../../internal-agents/schema.js").Schema<string[] | undefined>;
    state: import("../../internal-agents/schema.js").Schema<string | undefined>;
    usePkce: import("../../internal-agents/schema.js").Schema<boolean | undefined>;
    additionalParams: import("../../internal-agents/schema.js").Schema<Record<string, string> | undefined>;
    redirectUri: import("../../internal-agents/schema.js").Schema<string | undefined>;
}>>;
export declare const TokenExchangeOptionsSchema: import("../../internal-agents/schema.js").Schema<import("../../extensions/schema/schema-validator.js").InferShape<{
    code: import("../../internal-agents/schema.js").Schema<string>;
    redirectUri: import("../../internal-agents/schema.js").Schema<string>;
    codeVerifier: import("../../internal-agents/schema.js").Schema<string | undefined>;
}>>;
//# sourceMappingURL=oauth.schema.d.ts.map