import { getCurrentAdapter } from "better-auth";
export type RequiredAuthProvider = "google" | `sso:${string}` | null;
export type ResolvedRequiredAuthProvider = RequiredAuthProvider | "conflict";
export declare const GOOGLE_AUTH_REQUIRED_MESSAGE = "This organization requires Google sign-in.";
export declare const SSO_AUTH_REQUIRED_MESSAGE = "This organization requires single sign-on.";
export declare function authProviderRequiredMessage(provider: ResolvedRequiredAuthProvider): string;
export declare function getRequiredAuthProviderForOrg(orgId: string): Promise<RequiredAuthProvider>;
/**
 * Resolve an auth requirement before an account has a membership. Pending
 * invites and allowed domains must be included so password signup cannot be
 * used to create a first session for an org that requires Google.
 */
export declare function getRequiredAuthProviderForEmail(email: string): Promise<ResolvedRequiredAuthProvider>;
export declare function isGoogleSignInRequiredForEmail(email: string): Promise<boolean>;
export declare function getAuthEmailForUserId(userId: string, adapter?: Parameters<typeof getCurrentAdapter>[0]): Promise<string>;
export declare function setRequiredAuthProvider(orgId: string, provider: RequiredAuthProvider): Promise<{
    revokedBetterAuthSessions: number;
    revokedLegacySessions: number;
}>;