/**
 * Auth-lease store (SPEC.md §7.3.1).
 *
 * A lease is a server-issued, time-bounded grant recording the actor's
 * resolved allowed scopes at issuance, keyed by `(partition, clientId)`.
 * It is the authorization the server falls to during a host-authorization
 * outage (§7.3.3), and the client's offline-trust window (§7.3.5).
 *
 * The store is OPTIONAL, wired only when `leases` is configured
 * (`leases` absent ⇒ the feature is off, zero cost — the blob-store
 * pattern). Records are host-owned; a production store signs them at rest
 * and verifies on read (§7.3.1). The reference stores keep them plain in
 * memory / sqlite — the seam is what matters for conformance.
 */
import type { ScopeMap } from '@syncular/core';
/** The stored lease record (§7.3.1). `revoked` is durable (§7.3.4). */
export interface LeaseRecord {
    readonly leaseId: string;
    readonly actorId: string;
    /** The actor's resolved allowed scopes at issuance (§3.2 step 3). */
    readonly allowedScopes: ScopeMap;
    readonly issuedAtMs: number;
    readonly expiresAtMs: number;
    readonly revoked: boolean;
}
export interface LeaseStore {
    /** The lease for `(partition, clientId)`, if any (revoked or not). */
    get(partition: string, clientId: string): Promise<LeaseRecord | undefined>;
    /**
     * Issue or refresh the lease for `(partition, clientId)` (§7.3.3). A
     * refresh slides the SAME `leaseId` — implementations MUST reuse the
     * stored id for the pair unless it is revoked (a revoked handle never
     * silently resurrects: a fresh id is minted only once the host clears
     * the revocation). Returns the stored record.
     */
    issue(partition: string, clientId: string, actorId: string, allowedScopes: ScopeMap, nowMs: number, ttlMs: number): Promise<LeaseRecord>;
    /** Revoke a lease by `leaseId` (§7.3.4); durable, survives refresh. */
    revoke(partition: string, leaseId: string): Promise<void>;
}
/** Stable-per-pair id generator; overridable for deterministic tests. */
export type LeaseIdFactory = () => string;
export declare class MemoryLeaseStore implements LeaseStore {
    #private;
    constructor(options?: {
        readonly leaseId?: LeaseIdFactory;
    });
    get(partition: string, clientId: string): Promise<LeaseRecord | undefined>;
    issue(partition: string, clientId: string, actorId: string, allowedScopes: ScopeMap, nowMs: number, ttlMs: number): Promise<LeaseRecord>;
    revoke(partition: string, leaseId: string): Promise<void>;
}