import type { OrgRole } from "../../org/types.js";
export declare const SERVICE_TOKEN_MANAGE_FORBIDDEN_MESSAGE = "Only org owners or admins can create or revoke service tokens.";
export declare class ServiceTokenError extends Error {
    statusCode: number;
    constructor(message: string, statusCode: number);
}
export declare function getOrgRoleForEmail(orgId: string, email: string): Promise<OrgRole | null>;
export interface ServiceTokenCallerContext {
    email: string;
    orgId: string;
    role: OrgRole;
}
export declare function requireServiceTokenCaller(params: {
    userEmail: string | undefined;
    orgId: string | null | undefined;
    level: "manage" | "read";
}): Promise<ServiceTokenCallerContext>;