import type * as Db from '../Db.js';
import type * as db_Schema from '../Schema.js';
/** Columns of the `api_key_revocations` table. */
export type Table = db_Schema.ApiKeyRevocation;
/** Retains fences beyond KV propagation and the one-minute in-process auth cache. */
export declare const retentionMs: number;
/** Non-expiring fence used until KV deletion is confirmed. */
export declare const pendingExpiresAt = "9999-12-31T23:59:59.999Z";
/** Maximum expired fences reclaimed by one revocation. */
export declare const pruneLimit = 1000;
/** Returns whether one stable API-key id has been revoked. */
export declare function exists(db: Db.Db, id: string): Promise<boolean>;
/** Fences one API-key id through the propagation window. Rotations use a new id. */
export declare function mark(db: Db.Db, id: string, orgId: string | null): Promise<void>;
/** Fences one API-key id without releasing its slot until KV deletion succeeds. */
export declare function markPending(db: Db.Db, id: string, orgId: string | null): Promise<void>;
/** Deletes pending fences whose admission slots are being removed with an owner. */
export declare function deletePending(db: Db.Db, ids: readonly string[]): Promise<void>;
/** Reclaims a bounded batch of fences after stale KV and auth entries have expired. */
export declare function prune(db: Db.Db, time?: Date): Promise<number>;
//# sourceMappingURL=apiKeyRevocations.d.ts.map