import type { NodeLegalOrganizationVerificationTransactionInput, PollOptions, SubmitAndPollResult } from './orchestration/client-port.js';
import type { HostRouteContext } from './host-onboarding.js';
import type { RouteContext } from './individual-onboarding.js';
import type { EmployeeDeviceActivationResult, ProfileDeviceRegistrationInput } from './device-activation.js';
export type OrganizationControllerRecoveryInput = {
    credentialReissuanceInput?: NodeLegalOrganizationVerificationTransactionInput;
    /** @deprecated Use `credentialReissuanceInput`. */
    issueInput?: NodeLegalOrganizationVerificationTransactionInput;
    controllerIdToken: string;
    deviceRegistration?: ProfileDeviceRegistrationInput;
    /** @deprecated Use a profile-device draft and pass its `deviceRegistration`. */
    dcrPayload?: Record<string, unknown>;
    credentialReissuancePollOptions?: PollOptions;
    /** @deprecated Use `credentialReissuancePollOptions`. */
    issuePollOptions?: PollOptions;
    activationPollOptions?: PollOptions;
};
export type OrganizationControllerRecoveryResult = {
    credentialReissuance: SubmitAndPollResult;
    /** @deprecated Use `credentialReissuance`. */
    issue: SubmitAndPollResult;
    activationCode: string;
    activation: EmployeeDeviceActivationResult;
};
type RecoverOrganizationControllerWithCredentialReissuanceDeps = {
    hostCtx: HostRouteContext;
    tenantCtx: RouteContext;
    input: OrganizationControllerRecoveryInput;
    submitLegalOrganizationCredentialReissuance?: (hostCtx: HostRouteContext, input: NodeLegalOrganizationVerificationTransactionInput, pollOptions?: PollOptions) => Promise<SubmitAndPollResult>;
    /** @deprecated Use `submitLegalOrganizationCredentialReissuance`. */
    submitLegalOrganizationIssue?: (hostCtx: HostRouteContext, input: NodeLegalOrganizationVerificationTransactionInput, pollOptions?: PollOptions) => Promise<SubmitAndPollResult>;
    identityTokenExchangePath: (ctx: RouteContext) => string;
    identityTokenExchangePollPath: (ctx: RouteContext) => string;
    identityDeviceDcrPath: (ctx: RouteContext) => string;
    identityDeviceDcrPollPath: (ctx: RouteContext) => string;
    submitAndPollWithBearerToken: (bearerToken: string | undefined, submitPath: string, pollPath: string, payload: {
        thid?: string;
    } & Record<string, unknown>, pollOptions?: PollOptions) => Promise<SubmitAndPollResult>;
};
export declare function recoverOrganizationControllerWithCredentialReissuanceWithDeps(deps: RecoverOrganizationControllerWithCredentialReissuanceDeps): Promise<OrganizationControllerRecoveryResult>;
/** @deprecated Use `recoverOrganizationControllerWithCredentialReissuanceWithDeps`. */
export declare const recoverOrganizationControllerWithIssueWithDeps: typeof recoverOrganizationControllerWithCredentialReissuanceWithDeps;
/**
 * Reads the opaque activation code from a successful Organization/_issue poll result.
 *
 * Gateway deployments may retain one or more transport/job envelopes around
 * the terminal batch response. The canonical `Organization/_issue` shape
 * carries the serial-number claim in `data[].resource.meta.claims`, while the
 * ICA credential projection remains in sibling `data[].vc[]`. An explicitly
 * typed `License:Issued` entry is accepted
 * only as a legacy `License/_issue` compatibility fallback. Unrelated
 * identifiers and ICA credentials are never interpreted as activation
 * material.
 */
export declare function readLegalOrganizationCredentialReissuanceActivationCode(result: SubmitAndPollResult): string;
/** @deprecated Use `readLegalOrganizationCredentialReissuanceActivationCode`. */
export declare const readOrganizationIssueActivationCode: typeof readLegalOrganizationCredentialReissuanceActivationCode;
export {};