import { CachedAccessToken, ConnectionMetadata, ITokenCacheStorage } from "../types";
export interface OAuthTokenResponse {
    access_token: string;
    refresh_token?: string;
    expires_in?: number;
    token_type?: string;
    scope?: string;
    [key: string]: unknown;
}
export interface OAuthInstallContext {
    user_id: string;
    account_id?: string;
    workspace_id?: string;
    provider?: string;
    scopes?: string[];
    metadata?: Record<string, unknown>;
}
export interface OAuthInstallUrlResult {
    url: string;
    state: string;
    provider?: string;
    scopes: string[];
}
export interface OAuthCallbackPayload {
    code: string;
    state: string;
    provider?: string;
    metadata?: Record<string, unknown>;
}
export interface OAuthLifecycleState {
    user_id: string;
    account_id?: string;
    workspace_id?: string;
    provider?: string;
    metadata?: Record<string, unknown>;
}
export interface OAuthLifecycleOptions {
    clientId?: string;
    clientSecret?: string;
    redirectUri?: string;
    authorizeBaseUrl?: string;
    tokenUrl?: string;
    cacheStorage?: ITokenCacheStorage;
    cacheTtlFallbackSeconds?: number;
    tokenBodyFormat?: "form" | "json";
    stateSecret?: string;
}
export interface OAuthRuntimeShape {
    [key: string]: unknown;
    hostname: string;
    headers: Record<string, string>;
    metadata?: Record<string, unknown>;
}
export type OAuthAuthorizationParams = Record<string, string | number | boolean | undefined>;
type OAuthConnectionLike = {
    provider: string;
};
export interface OAuthLifecycleAdapter<TConnection extends OAuthConnectionLike = ConnectionMetadata, TInstallContext extends OAuthInstallContext = OAuthInstallContext, TCallbackResult = ConnectionMetadata, TRuntime = OAuthRuntimeShape> {
    resolveScopes(context: TInstallContext): string[] | Promise<string[]>;
    buildState(context: TInstallContext): OAuthLifecycleState;
    buildRuntime(connection: TConnection, accessToken: string): TRuntime;
    handleCallbackResult(args: {
        payload: OAuthCallbackPayload;
        state: OAuthLifecycleState;
        tokens: OAuthTokenResponse;
    }): Promise<TCallbackResult>;
    getAuthorizationParams?(context: TInstallContext): OAuthAuthorizationParams | Promise<OAuthAuthorizationParams>;
    getRefreshToken(connection: TConnection): string | undefined;
    getLatestRefreshToken?(connection: TConnection): Promise<string | undefined>;
    updateConnection(connection: TConnection, tokens: OAuthTokenResponse): Promise<void>;
    getCacheKey?(connection: TConnection): string;
    getRefreshLockKey?(connection: TConnection): string;
    readCachedAccessToken?(connection: TConnection, cacheStorage: ITokenCacheStorage): Promise<CachedAccessToken | null>;
    writeCachedAccessToken?(connection: TConnection, cacheStorage: ITokenCacheStorage, cacheEntry: CachedAccessToken, ttlSeconds: number): Promise<CachedAccessToken | null>;
    deleteCachedAccessToken?(connection: TConnection, cacheStorage: ITokenCacheStorage): Promise<void>;
}
export declare class OAuthStrategy {
    private storage;
    private options;
    constructor(storage: any, options?: OAuthLifecycleOptions);
    buildInstallUrl<TConnection extends OAuthConnectionLike, TInstallContext extends OAuthInstallContext>(context: TInstallContext, adapter: OAuthLifecycleAdapter<TConnection, TInstallContext, unknown, unknown>): Promise<OAuthInstallUrlResult>;
    handleInstallCallback<TConnection extends OAuthConnectionLike, TCallbackResult>(payload: OAuthCallbackPayload, adapter: OAuthLifecycleAdapter<TConnection, OAuthInstallContext, TCallbackResult, unknown>): Promise<TCallbackResult>;
    getValidAccessToken<TConnection extends OAuthConnectionLike>(conn: TConnection, adapter: OAuthLifecycleAdapter<TConnection, OAuthInstallContext, unknown, unknown>): Promise<string>;
    invalidateTokens<TConnection extends OAuthConnectionLike>(conn: TConnection, adapter?: OAuthLifecycleAdapter<TConnection, OAuthInstallContext, unknown, unknown>): Promise<void>;
    refreshIfNeeded(conn: ConnectionMetadata): Promise<ConnectionMetadata>;
    resolve<T>(conn: ConnectionMetadata): Promise<T>;
    private exchangeAuthorizationCode;
    private refreshWithAdapter;
    private waitForConcurrentRefresh;
    private refreshAccessToken;
    private writeAccessTokenToCache;
    private getTtlSeconds;
    private getDefaultCacheKey;
    private getDefaultRefreshLockKey;
    private readCachedAccessToken;
    private deleteCachedAccessToken;
    private getDefaultConnectionId;
    private encodeState;
    private decodeState;
    private buildTokenRequest;
    private verifyAndExtractStatePayload;
    private signState;
    private requireOption;
    private delay;
}
export {};