export type { AuthToken } from '@stacksjs/types';
/**
 * `TokenManager` used to expose `createAccessToken` / `validateToken` /
 * `rotateToken` / `revokeToken` static methods that hardcoded a 30-day
 * `expires_at`, bypassed `config.auth.tokenExpiry`, and compared raw
 * tokens against DB-stored hashes (i.e. broken). They had no callers —
 * the real path lives on `Auth` (see authentication.ts) and respects
 * the configured 1-hour expiry plus the refresh-token rotation
 * landed for #1839. Removed entirely so the trap can't fire.
 *
 * `generateJWT` is the one piece worth keeping — `Auth.createTokenForUser`
 * and `Auth.rotateToken` both use it to mint the JWT body.
 */
export declare class TokenManager {
  static generateJWT(userId: number, expiresInSeconds?: number): string;
}