import * as _develit_io_backend_sdk from '@develit-io/backend-sdk';
import { IRPCResponse } from '@develit-io/backend-sdk';
import { L as LabeledScope, t as tables, C as CreateRoleInput, a as CreateRoleOutput, A as AssignRoleToUserInput, b as AssignRoleToUserOutput, c as AssignRolesToUserInput, d as AssignRolesToUserOutput, R as RevokeRoleFromUserInput, e as RevokeRoleFromUserOutput, G as GrantScopeToUserInput, f as GrantScopeToUserOutput, g as GrantScopesToUserInput, h as GrantScopesToUserOutput, i as RevokeScopeFromUserInput, j as RevokeScopeFromUserOutput, k as GrantScopeToRoleInput, l as GrantScopeToRoleOutput, m as RevokeScopeFromRoleInput, n as RevokeScopeFromRoleOutput, o as GetAllUserRolesOutput, p as GetPermissionsOutput, q as GetUserPermissionsInput, r as GetUserPermissionsOutput, V as VerifyAccessInput, s as VerifyAccessOutput, D as DeleteRoleInput, u as DeleteRoleOutput, U as UpdateRoleInput, v as UpdateRoleOutput } from './shared/rbac.TmcBTYf9.cjs';
import { WorkerEntrypoint } from 'cloudflare:workers';
import { DrizzleD1Database } from 'drizzle-orm/d1';
import 'zod';
import 'drizzle-orm';
import './shared/rbac.P-yL2vdQ.cjs';
import 'drizzle-orm/sqlite-core';

type TypedScopeObject<TScopes extends readonly LabeledScope[]> = {
    scope: TScopes[number]['value'];
    resourceId?: string;
    resourcePath?: string;
};
type TypedScopeCondition<TScopes extends readonly LabeledScope[]> = TypedScopeObject<TScopes> | {
    or: TypedScopeCondition<TScopes>[];
} | {
    and: TypedScopeCondition<TScopes>[];
} | TypedScopeCondition<TScopes>[];
declare const RbacServiceBase_base: (abstract new (ctx: ExecutionContext, env: RbacEnv) => WorkerEntrypoint<RbacEnv, {}>) & (abstract new (...args: any[]) => _develit_io_backend_sdk.DevelitWorkerMethods);
declare class RbacServiceBase<TScopes extends readonly LabeledScope[] = LabeledScope[]> extends RbacServiceBase_base {
    readonly db: DrizzleD1Database<typeof tables>;
    readonly SCOPES: TScopes;
    constructor(ctx: ExecutionContext, env: RbacEnv, scopes: TScopes);
    private validateScope;
    createRole(input: CreateRoleInput): Promise<IRPCResponse<CreateRoleOutput>>;
    assignRoleToUser(input: AssignRoleToUserInput): Promise<IRPCResponse<AssignRoleToUserOutput>>;
    assignRolesToUser(input: AssignRolesToUserInput): Promise<IRPCResponse<AssignRolesToUserOutput>>;
    revokeRoleFromUser(input: RevokeRoleFromUserInput): Promise<IRPCResponse<RevokeRoleFromUserOutput>>;
    grantScopeToUser(input: GrantScopeToUserInput): Promise<IRPCResponse<GrantScopeToUserOutput>>;
    grantScopesToUser(input: GrantScopesToUserInput): Promise<IRPCResponse<GrantScopesToUserOutput>>;
    revokeScopeFromUser(input: RevokeScopeFromUserInput): Promise<IRPCResponse<RevokeScopeFromUserOutput>>;
    grantScopeToRole(input: GrantScopeToRoleInput): Promise<IRPCResponse<GrantScopeToRoleOutput>>;
    revokeScopeFromRole(input: RevokeScopeFromRoleInput): Promise<IRPCResponse<RevokeScopeFromRoleOutput>>;
    getAllUserRoles(): Promise<IRPCResponse<GetAllUserRolesOutput>>;
    getPermissions(): Promise<IRPCResponse<GetPermissionsOutput>>;
    getUserPermissions(input: GetUserPermissionsInput): Promise<IRPCResponse<GetUserPermissionsOutput>>;
    verifyAccess(input: Omit<VerifyAccessInput, 'accessRequests'> & {
        accessRequests: TypedScopeCondition<TScopes>;
    }): Promise<IRPCResponse<VerifyAccessOutput>>;
    private verifySingleScope;
    deleteRole(input: DeleteRoleInput): Promise<IRPCResponse<DeleteRoleOutput>>;
    updateRole(input: UpdateRoleInput): Promise<IRPCResponse<UpdateRoleOutput>>;
}
declare function defineRbacService<const TScopes extends readonly LabeledScope[]>(config?: {
    scopes: TScopes;
}): typeof RbacServiceBase<TScopes>;

export { RbacServiceBase, defineRbacService };