import type { Account } from "@aws-sdk/client-organizations";
/**
 * Member accounts that joined the organisation by invitation rather than
 * being created inside it. AWS reports provenance as Account.JoinedMethod
 * ("CREATED" | "INVITED"): an invited account existed standalone first, so
 * it holds self-managed root credentials that centralised root access
 * management takes over — the posture change AC2.8 warns about. The
 * management account is excluded (central management never applies to it),
 * as are non-ACTIVE accounts.
 */
export declare function selectImportedMemberAccounts(accounts: Account[], managementAccountId: string): Account[];
/**
 * Warn-once copy for the enable-root-access phase (AC2.8). Shared so every
 * adapter surfaces identical wording.
 */
export declare function formatImportedAccountsWarning(imported: Account[]): string;