/**
 * Generate a cryptographically random PKCE code verifier (43-128 chars, URL-safe).
 * Uses base64url encoding without padding.
 */
export declare function generateCodeVerifier(): string;
/**
 * Derive a PKCE code challenge from a verifier using SHA-256 + base64url.
 * This is the S256 method required by RFC 7636.
 */
export declare function generateCodeChallenge(verifier: string): string;
//# sourceMappingURL=pkce.d.ts.map