/**
 * @dotdo/oauth - Storage interface for OAuth 2.1 server
 *
 * This defines the abstract storage interface that must be implemented
 * by concrete storage backends (e.g., DO SQLite, KV, D1, etc.)
 */
import type { OAuthUser, OAuthOrganization, OAuthClient, OAuthAuthorizationCode, OAuthAccessToken, OAuthRefreshToken, OAuthGrant } from './types.js';
/**
 * Storage interface for OAuth 2.1 server
 *
 * Implementations of this interface provide persistence for:
 * - Users and organizations
 * - OAuth clients (registered applications)
 * - Authorization codes, tokens, and grants
 *
 * @example Implementing with DO SQLite
 * ```typescript
 * import type { OAuthStorage } from '@dotdo/oauth'
 * import { DigitalObject } from '@dotdo/do'
 *
 * export class DOAuthStorage implements OAuthStorage {
 *   constructor(private do: DigitalObject) {}
 *
 *   async getUser(id: string) {
 *     return this.do.state.get(`user:${id}`)
 *   }
 *   // ... implement other methods
 * }
 * ```
 */
export interface OAuthStorage {
    /**
     * Get a user by ID
     */
    getUser(id: string): Promise<OAuthUser | null>;
    /**
     * Get a user by email
     */
    getUserByEmail(email: string): Promise<OAuthUser | null>;
    /**
     * Get a user by upstream provider identity
     */
    getUserByProvider(provider: string, providerId: string): Promise<OAuthUser | null>;
    /**
     * Save a user (create or update)
     */
    saveUser(user: OAuthUser): Promise<void>;
    /**
     * Delete a user
     */
    deleteUser(id: string): Promise<void>;
    /**
     * List users (with optional pagination)
     */
    listUsers(options?: ListOptions): Promise<OAuthUser[]>;
    /**
     * Get an organization by ID
     */
    getOrganization(id: string): Promise<OAuthOrganization | null>;
    /**
     * Get an organization by slug
     */
    getOrganizationBySlug(slug: string): Promise<OAuthOrganization | null>;
    /**
     * Get an organization by verified domain
     */
    getOrganizationByDomain(domain: string): Promise<OAuthOrganization | null>;
    /**
     * Save an organization (create or update)
     */
    saveOrganization(org: OAuthOrganization): Promise<void>;
    /**
     * Delete an organization
     */
    deleteOrganization(id: string): Promise<void>;
    /**
     * List organizations (with optional pagination)
     */
    listOrganizations(options?: ListOptions): Promise<OAuthOrganization[]>;
    /**
     * Get a client by client ID
     */
    getClient(clientId: string): Promise<OAuthClient | null>;
    /**
     * Save a client (create or update)
     */
    saveClient(client: OAuthClient): Promise<void>;
    /**
     * Delete a client
     */
    deleteClient(clientId: string): Promise<void>;
    /**
     * List clients (with optional pagination)
     */
    listClients(options?: ListOptions): Promise<OAuthClient[]>;
    /**
     * Save an authorization code
     */
    saveAuthorizationCode(code: OAuthAuthorizationCode): Promise<void>;
    /**
     * Get and consume an authorization code (one-time use)
     * Returns null if code doesn't exist or has already been used
     */
    consumeAuthorizationCode(code: string): Promise<OAuthAuthorizationCode | null>;
    /**
     * Save an access token
     */
    saveAccessToken(token: OAuthAccessToken): Promise<void>;
    /**
     * Get an access token
     */
    getAccessToken(token: string): Promise<OAuthAccessToken | null>;
    /**
     * Revoke an access token
     */
    revokeAccessToken(token: string): Promise<void>;
    /**
     * Save a refresh token
     */
    saveRefreshToken(token: OAuthRefreshToken): Promise<void>;
    /**
     * Get a refresh token
     */
    getRefreshToken(token: string): Promise<OAuthRefreshToken | null>;
    /**
     * Revoke a refresh token
     */
    revokeRefreshToken(token: string): Promise<void>;
    /**
     * Revoke all tokens for a user
     */
    revokeAllUserTokens(userId: string): Promise<void>;
    /**
     * Revoke all tokens for a client
     */
    revokeAllClientTokens(clientId: string): Promise<void>;
    /**
     * Get a grant by user and client
     */
    getGrant(userId: string, clientId: string): Promise<OAuthGrant | null>;
    /**
     * Save a grant (create or update)
     */
    saveGrant(grant: OAuthGrant): Promise<void>;
    /**
     * Revoke a grant
     */
    revokeGrant(userId: string, clientId: string): Promise<void>;
    /**
     * List grants for a user
     */
    listUserGrants(userId: string): Promise<OAuthGrant[]>;
}
/**
 * Options for list operations
 */
export interface ListOptions {
    /** Maximum number of results to return */
    limit?: number;
    /** Cursor for pagination */
    cursor?: string;
    /** Filter by organization */
    organizationId?: string;
}
/**
 * In-memory storage implementation for testing
 */
export declare class MemoryOAuthStorage implements OAuthStorage {
    private users;
    private usersByEmail;
    private usersByProvider;
    private organizations;
    private organizationsBySlug;
    private organizationsByDomain;
    private clients;
    private authCodes;
    private accessTokens;
    private refreshTokens;
    private grants;
    getUser(id: string): Promise<OAuthUser | null>;
    getUserByEmail(email: string): Promise<OAuthUser | null>;
    getUserByProvider(provider: string, providerId: string): Promise<OAuthUser | null>;
    saveUser(user: OAuthUser): Promise<void>;
    deleteUser(id: string): Promise<void>;
    listUsers(options?: ListOptions): Promise<OAuthUser[]>;
    getOrganization(id: string): Promise<OAuthOrganization | null>;
    getOrganizationBySlug(slug: string): Promise<OAuthOrganization | null>;
    getOrganizationByDomain(domain: string): Promise<OAuthOrganization | null>;
    saveOrganization(org: OAuthOrganization): Promise<void>;
    deleteOrganization(id: string): Promise<void>;
    listOrganizations(options?: ListOptions): Promise<OAuthOrganization[]>;
    getClient(clientId: string): Promise<OAuthClient | null>;
    saveClient(client: OAuthClient): Promise<void>;
    deleteClient(clientId: string): Promise<void>;
    listClients(options?: ListOptions): Promise<OAuthClient[]>;
    saveAuthorizationCode(code: OAuthAuthorizationCode): Promise<void>;
    consumeAuthorizationCode(code: string): Promise<OAuthAuthorizationCode | null>;
    saveAccessToken(token: OAuthAccessToken): Promise<void>;
    getAccessToken(token: string): Promise<OAuthAccessToken | null>;
    revokeAccessToken(token: string): Promise<void>;
    saveRefreshToken(token: OAuthRefreshToken): Promise<void>;
    getRefreshToken(token: string): Promise<OAuthRefreshToken | null>;
    revokeRefreshToken(token: string): Promise<void>;
    revokeAllUserTokens(userId: string): Promise<void>;
    revokeAllClientTokens(clientId: string): Promise<void>;
    private grantKey;
    getGrant(userId: string, clientId: string): Promise<OAuthGrant | null>;
    saveGrant(grant: OAuthGrant): Promise<void>;
    revokeGrant(userId: string, clientId: string): Promise<void>;
    listUserGrants(userId: string): Promise<OAuthGrant[]>;
    /**
     * Clear all data (for testing)
     */
    clear(): void;
}
//# sourceMappingURL=storage.d.ts.map