import type { DatabaseConnection } from '@pondoknusa/database';
import type { Authenticatable } from './types.js';
import type { CreateTokenOptions, NewAccessToken } from './types.js';
export interface ResolvedAccessToken {
    id: number;
    user: Authenticatable;
    abilities: string[];
}
export interface TokenLookupContext {
    ip?: string;
}
export declare class PersonalAccessTokenRepository {
    private readonly connection;
    private readonly table;
    private readonly tokenableType;
    private readonly prefix;
    private readonly prefixDisplayLength;
    constructor(connection: DatabaseConnection, table: string, tokenableType?: string, options?: {
        prefix?: string;
        prefixLength?: number;
    });
    createToken(user: Authenticatable, name: string, abilities?: string[], options?: CreateTokenOptions): Promise<NewAccessToken>;
    findUserIdByBearerToken(bearer: string, lookupUser: (id: number) => Promise<Authenticatable | null>, context?: TokenLookupContext): Promise<ResolvedAccessToken | null>;
    revokeToken(tokenId: number, userId: number): Promise<boolean>;
    revokeTokensForUser(userId: number): Promise<number>;
    private normalizeBearerSecret;
    private ipAllowed;
    private hashToken;
}
//# sourceMappingURL=personal-access-token-repository.d.ts.map