/**
 * Collections-based OAuth Storage
 *
 * Uses @dotdo/collections for document storage instead of raw SQL.
 * This eliminates the need for schema migrations - collections handle
 * all schema management internally with a single _collections table.
 *
 * @module storage-collections
 */
import type { OAuthStorage } from './storage.js';
import type { OAuthUser, OAuthClient, OAuthAuthorizationCode, OAuthAccessToken, OAuthRefreshToken, OAuthGrant, OAuthOrganization } from './types.js';
/**
 * Collections-based OAuth storage implementation
 *
 * Uses document collections for flexible schema-less storage:
 * - users: User profiles from upstream auth
 * - clients: OAuth clients (apps)
 * - authCodes: Short-lived authorization codes
 * - accessTokens: Access token metadata (for opaque tokens)
 * - refreshTokens: Refresh tokens for token rotation
 * - grants: User consent grants
 *
 * @example
 * ```typescript
 * import { CollectionsOAuthStorage } from '@dotdo/oauth'
 *
 * export class OAuthDO extends DurableObject {
 *   private storage: CollectionsOAuthStorage
 *
 *   constructor(ctx: DurableObjectState, env: Env) {
 *     super(ctx, env)
 *     this.storage = new CollectionsOAuthStorage(ctx.storage.sql)
 *   }
 * }
 * ```
 */
export declare class CollectionsOAuthStorage implements OAuthStorage {
    private users;
    private clients;
    private authCodes;
    private accessTokens;
    private refreshTokens;
    private grants;
    private organizations;
    constructor(sql: SqlStorage);
    getUser(id: string): Promise<OAuthUser | null>;
    getUserByEmail(email: string): Promise<OAuthUser | null>;
    saveUser(user: OAuthUser): Promise<void>;
    getUserByProvider(provider: string, providerId: string): Promise<OAuthUser | null>;
    deleteUser(id: string): Promise<void>;
    listUsers(options?: {
        limit?: number;
        offset?: number;
    }): Promise<OAuthUser[]>;
    getOrganization(id: string): Promise<OAuthOrganization | null>;
    getOrganizationBySlug(slug: string): Promise<OAuthOrganization | null>;
    getOrganizationByDomain(domain: string): Promise<OAuthOrganization | null>;
    saveOrganization(org: OAuthOrganization): Promise<void>;
    deleteOrganization(id: string): Promise<void>;
    listOrganizations(options?: {
        limit?: number;
        offset?: number;
    }): Promise<OAuthOrganization[]>;
    getClient(clientId: string): Promise<OAuthClient | null>;
    saveClient(client: OAuthClient): Promise<void>;
    deleteClient(clientId: string): Promise<void>;
    listClients(options?: {
        limit?: number;
        offset?: number;
    }): Promise<OAuthClient[]>;
    saveAuthorizationCode(code: OAuthAuthorizationCode): Promise<void>;
    consumeAuthorizationCode(code: string): Promise<OAuthAuthorizationCode | null>;
    saveAccessToken(token: OAuthAccessToken): Promise<void>;
    getAccessToken(token: string): Promise<OAuthAccessToken | null>;
    revokeAccessToken(token: string): Promise<void>;
    saveRefreshToken(token: OAuthRefreshToken): Promise<void>;
    getRefreshToken(token: string): Promise<OAuthRefreshToken | null>;
    revokeRefreshToken(token: string): Promise<void>;
    revokeAllUserTokens(userId: string): Promise<void>;
    revokeAllClientTokens(clientId: string): Promise<void>;
    getGrant(userId: string, clientId: string): Promise<OAuthGrant | null>;
    saveGrant(grant: OAuthGrant): Promise<void>;
    revokeGrant(userId: string, clientId: string): Promise<void>;
    listUserGrants(userId: string): Promise<OAuthGrant[]>;
    /**
     * Clean up expired tokens and codes.
     * Call this periodically (e.g., via cron or alarm) to free storage.
     */
    cleanup(): Promise<{
        authCodes: number;
        accessTokens: number;
    }>;
}
//# sourceMappingURL=storage-collections.d.ts.map