import type { TokenStore } from "../auth/token-store.js";
export interface AccountRegisterArgs {
    accountId: string;
    clientId: string;
    tenantId: string;
    tokenStore: TokenStore;
}
export interface AccountRegisterResult {
    status: "registered";
    authUrl: string;
    graphUserId: string;
    scopes: string[];
    tokenExpSec: number;
}
/**
 * Run the PKCE register flow end-to-end:
 *   1. Bind a loopback callback server, build the auth URL, return URL to operator.
 *   2. Wait for the callback (5-min timeout).
 *   3. Exchange code → tokens; persist encrypted to per-account store.
 *   4. Fetch /me to record graphUserId for log lines.
 *
 * The MCP tool layer prints the auth URL prominently in the tool response so
 * the operator can paste it into the VNC browser.
 */
export declare function runAccountRegister(args: AccountRegisterArgs): Promise<AccountRegisterResult>;
//# sourceMappingURL=account-register.d.ts.map