type AuthorizationHeader = string | string[] | undefined;
export type TokenRevocationDriverName = 'database' | 'memory' | 'redis' | 'kv' | 'kv-remote';
export declare const TokenRevocation: Readonly<{
    /**
     * Mark a token as revoked.
     *
     * Storage is keyed by JWT `jti` when present; otherwise falls back to the raw token string.
     */
    revoke(header: AuthorizationHeader): Promise<string | null>;
    /**
     * Check if a token is revoked.
     */
    isRevoked(token: string): Promise<boolean>;
    /**
     * For observability.
     */
    getDriver(): TokenRevocationDriverName;
    /**
     * Test/boot helper: reset cached driver.
     */
    _resetForTests(): void;
}>;
export default TokenRevocation;
//# sourceMappingURL=TokenRevocation.d.ts.map