import { Express, Response } from 'express';
import { InstantAdminDatabase, InstaQLEntity, InstaQLResult } from '@instantdb/admin';
import { AppSchema } from './db/instant.schema.ts';
import { AuthorizationParams, OAuthServerProvider } from '@modelcontextprotocol/sdk/server/auth/provider.js';
import { OAuthRegisteredClientsStore } from '@modelcontextprotocol/sdk/server/auth/clients.js';
import { OAuthClientInformationFull, OAuthTokenRevocationRequest, OAuthTokens } from '@modelcontextprotocol/sdk/shared/auth.js';
import { KeyConfig } from './crypto.ts';
import { AuthInfo } from '@modelcontextprotocol/sdk/server/auth/types.js';
import { PlatformApiAuth } from '../../platform/dist/esm/api.js';
export type OAuthConfig = {
    clientId: string;
    clientSecret: string;
    serverOrigin: string;
};
export declare function tokensOfBearerToken(db: InstantAdminDatabase<AppSchema>, token: string): Promise<{
    mcpToken: InstaQLResult<AppSchema, {
        mcpTokens: {
            client: {};
            instantToken: {};
        };
    }>['mcpTokens'][number];
    instantToken: InstaQLEntity<AppSchema, 'instantTokens'>;
}>;
export declare function makeApiAuth(oauthConfig: OAuthConfig, key: KeyConfig, db: InstantAdminDatabase<AppSchema>, instantTokenEnt: InstaQLEntity<AppSchema, 'instantTokens'>): PlatformApiAuth;
export declare class ServiceProvider implements OAuthServerProvider {
    #private;
    constructor(db: InstantAdminDatabase<AppSchema>, oauthConfig: OAuthConfig, keyConfig: KeyConfig);
    get clientsStore(): OAuthRegisteredClientsStore;
    authorize(client: OAuthClientInformationFull, params: AuthorizationParams, res: Response): Promise<void>;
    challengeForAuthorizationCode(_client: OAuthClientInformationFull, authorizationCode: string): Promise<string>;
    exchangeAuthorizationCode(client: OAuthClientInformationFull, authorizationCode: string, _codeVerifier?: string, redirectUri?: string): Promise<OAuthTokens>;
    exchangeRefreshToken(client: OAuthClientInformationFull, refreshToken: string, _scopes?: string[]): Promise<OAuthTokens>;
    verifyAccessToken(token: string): Promise<AuthInfo>;
    revokeToken(_client: OAuthClientInformationFull, request: OAuthTokenRevocationRequest): Promise<void>;
}
export declare function addOAuthRoutes(app: Express, db: InstantAdminDatabase<AppSchema>, oauthConfig: OAuthConfig): void;
//# sourceMappingURL=oauth-service-provider.d.ts.map