import { SqliteConnection } from "./connection.js";
import { AuthTokenRecord, AuthTokenStore } from "@graphorin/core/contracts";

//#region src/auth-token-store.d.ts

/**
 * Default `AuthTokenStore` implementation. Persists HMAC-SHA256 hashes
 * of issued server tokens (DEC-122 / ADR-027). Raw tokens are never
 * persisted - the runtime carries them via `SecretValue`.
 *
 * @stable
 */
declare class SqliteAuthTokenStore implements AuthTokenStore {
  #private;
  constructor(conn: SqliteConnection);
  put(record: AuthTokenRecord): Promise<void>;
  get(id: string): Promise<AuthTokenRecord | null>;
  getByHash(hashHex: string): Promise<AuthTokenRecord | null>;
  list(): Promise<ReadonlyArray<AuthTokenRecord>>;
  revoke(id: string, revokedAt: string): Promise<void>;
  recordUse(id: string, usedAt: string): Promise<void>;
}
//#endregion
export { SqliteAuthTokenStore };
//# sourceMappingURL=auth-token-store.d.ts.map