import type { CreateOrganizationRequest, EnsureSystemOrgRequest, IdentityApiClientOptions, DelegatedPrincipalTokenRequest, DelegatedPrincipalTokenResponse, OnBehalfOfTokenRequest, OnBehalfOfTokenResponse, Organization, OrganizationListParams, OrganizationListResponse, OrganizationRecord, RegisterServiceRequest, RegisterServiceResponse, ScopedClaimGrantRequest, ScopedClaimGrantResponse, ScopedClaimTokenRequest, ScopedClaimTokenResponse, ServiceCredentials, UpdateOrganizationRequest, VerifyMembershipResponse } from './types';
export declare class IdentityApiClient {
    private readonly baseUrl;
    private readonly internalToken;
    private readonly timeoutMs;
    private readonly serviceTokenProvider;
    private readonly allowInternalTokenFallback;
    constructor(options: IdentityApiClientOptions);
    private resolveBearer;
    private assertRegisterRequest;
    registerService(request: RegisterServiceRequest): Promise<ServiceCredentials>;
    registerServiceFull(request: RegisterServiceRequest): Promise<RegisterServiceResponse>;
    verifyMembership(userId: string, orgId: string, realm?: string): Promise<VerifyMembershipResponse>;
    ensureSystemOrg(request: EnsureSystemOrgRequest): Promise<Organization>;
    getSystemOrg(name: string): Promise<Organization>;
    listOrgIds(realm: string): Promise<string[]>;
    listOrganizations(realm: string, params?: OrganizationListParams): Promise<OrganizationListResponse>;
    getOrganization(id: string, realm: string): Promise<OrganizationRecord>;
    createOrganization(input: CreateOrganizationRequest): Promise<OrganizationRecord>;
    updateOrganization(id: string, input: UpdateOrganizationRequest): Promise<OrganizationRecord>;
    deleteOrganization(id: string, realm: string): Promise<void>;
    mintOnBehalfOfToken(request: OnBehalfOfTokenRequest): Promise<OnBehalfOfTokenResponse>;
    mintDelegatedPrincipalToken(request: DelegatedPrincipalTokenRequest): Promise<DelegatedPrincipalTokenResponse>;
    grantScopedClaim(request: ScopedClaimGrantRequest): Promise<ScopedClaimGrantResponse>;
    revokeScopedClaim(request: ScopedClaimGrantRequest): Promise<void>;
    mintScopedClaimToken(request: ScopedClaimTokenRequest): Promise<ScopedClaimTokenResponse>;
    private get;
    private post;
    private patch;
    private getEnvelope;
    private request;
}
export declare class IdentityApiError extends Error {
    readonly statusCode: number;
    readonly responseBody?: string | undefined;
    constructor(message: string, statusCode: number, responseBody?: string | undefined);
}