declare const AUTH_ONE_TIME_PURPOSES: {
    readonly passwordReset: "password_reset";
    readonly emailVerify: "email_verify";
};
type AuthOneTimePurpose = (typeof AUTH_ONE_TIME_PURPOSES)[keyof typeof AUTH_ONE_TIME_PURPOSES];
declare function generateOneTimeToken(): {
    plain: string;
    hash: string;
};
declare function hashOneTimeToken(plain: string): string;
type SqlClient = {
    unsafe<T>(query: string, params?: readonly unknown[]): Promise<T[]>;
};
declare function consumeOneTimeToken(sql: SqlClient, purpose: string, plain: string, now?: Date): Promise<number | null>;
declare function revokeUserSessions(sql: SqlClient, userId: number, options?: {
    revokeApiTokens?: boolean;
}): Promise<void>;
export type { AuthOneTimePurpose };
export { AUTH_ONE_TIME_PURPOSES, consumeOneTimeToken, generateOneTimeToken, hashOneTimeToken, revokeUserSessions, };