/**
 * @dotdo/oauth - Durable Object SQLite Storage
 *
 * SQLite-based storage adapter for Cloudflare Durable Objects.
 * Implements the OAuthStorage interface for persistent storage.
 */
import type { OAuthStorage, ListOptions } from './storage.js';
import type { OAuthUser, OAuthOrganization, OAuthClient, OAuthAuthorizationCode, OAuthAccessToken, OAuthRefreshToken, OAuthGrant } from './types.js';
/**
 * Cloudflare Durable Object SqlStorage interface
 * This matches the Cloudflare Workers runtime API
 */
export interface SqlStorage {
    exec<T = Record<string, unknown>>(query: string, ...bindings: unknown[]): SqlStorageResult<T>;
}
export interface SqlStorageResult<T> {
    toArray(): T[];
    raw<R = unknown[]>(): R[];
    columnNames: string[];
    rowsRead: number;
    rowsWritten: number;
}
/**
 * Extended user type with Stripe integration
 */
export interface OAuthUserWithStripe extends OAuthUser {
    stripeCustomerId?: string;
}
/**
 * DO SQLite Storage implementation
 */
export declare class DOSQLiteStorage implements OAuthStorage {
    private sql;
    constructor(sql: SqlStorage);
    /**
     * Initialize database schema
     */
    private initSchema;
    getUser(id: string): Promise<OAuthUser | null>;
    getUserByEmail(email: string): Promise<OAuthUser | null>;
    getUserByProvider(provider: string, providerId: string): Promise<OAuthUser | null>;
    saveUser(user: OAuthUser): Promise<void>;
    deleteUser(id: string): Promise<void>;
    listUsers(options?: ListOptions): Promise<OAuthUser[]>;
    getOrganization(id: string): Promise<OAuthOrganization | null>;
    getOrganizationBySlug(slug: string): Promise<OAuthOrganization | null>;
    getOrganizationByDomain(domain: string): Promise<OAuthOrganization | null>;
    saveOrganization(org: OAuthOrganization): Promise<void>;
    deleteOrganization(id: string): Promise<void>;
    listOrganizations(options?: ListOptions): Promise<OAuthOrganization[]>;
    getClient(clientId: string): Promise<OAuthClient | null>;
    saveClient(client: OAuthClient): Promise<void>;
    deleteClient(clientId: string): Promise<void>;
    listClients(options?: ListOptions): Promise<OAuthClient[]>;
    saveAuthorizationCode(code: OAuthAuthorizationCode): Promise<void>;
    consumeAuthorizationCode(code: string): Promise<OAuthAuthorizationCode | null>;
    saveAccessToken(token: OAuthAccessToken): Promise<void>;
    getAccessToken(token: string): Promise<OAuthAccessToken | null>;
    revokeAccessToken(token: string): Promise<void>;
    saveRefreshToken(token: OAuthRefreshToken): Promise<void>;
    getRefreshToken(token: string): Promise<OAuthRefreshToken | null>;
    revokeRefreshToken(token: string): Promise<void>;
    revokeAllUserTokens(userId: string): Promise<void>;
    revokeAllClientTokens(clientId: string): Promise<void>;
    getGrant(userId: string, clientId: string): Promise<OAuthGrant | null>;
    saveGrant(grant: OAuthGrant): Promise<void>;
    revokeGrant(userId: string, clientId: string): Promise<void>;
    listUserGrants(userId: string): Promise<OAuthGrant[]>;
    getSigningKeys(): Promise<SerializedSigningKeyRow[]>;
    getCurrentSigningKey(): Promise<SerializedSigningKeyRow | null>;
    saveSigningKey(key: {
        kid: string;
        alg: string;
        privateKeyJwk: JsonWebKey;
        publicKeyJwk: JsonWebKey;
        createdAt: number;
        isCurrent?: boolean;
    }): Promise<void>;
    getUserByStripeCustomerId(stripeCustomerId: string): Promise<OAuthUser | null>;
    updateUserStripeCustomerId(userId: string, stripeCustomerId: string): Promise<void>;
    private rowToUser;
    private rowToOrganization;
    private rowToClient;
    private rowToAuthCode;
    private rowToAccessToken;
    private rowToRefreshToken;
    private rowToGrant;
}
export interface SerializedSigningKeyRow {
    kid: string;
    alg: string;
    private_key_jwk: string;
    public_key_jwk: string;
    created_at: number;
    is_current: number;
}
//# sourceMappingURL=storage-do.d.ts.map