import { SearchOptions } from 'ldapts';
export interface LdapConfig {
    url: string;
    bindDn: string;
    password: string;
    timeout?: number;
    tlsOptions?: {
        rejectUnauthorized?: boolean;
        ca?: string;
    };
    isSecure?: boolean;
    hostType?: string;
}
/**
 * Escapes special characters in an LDAP DN
 */
export declare function escapeDN(str: string): string;
/**
 * Validates a sAMAccountName (max 20 chars, no spaces or special characters)
 */
export declare function validateSAMAccountName(sam: string): {
    valid: boolean;
    error?: string;
};
/**
 * Validates a UPN (User Principal Name)
 */
export declare function validateUPN(upn: string): {
    valid: boolean;
    error?: string;
};
export declare class AdClient {
    private client;
    private baseDn;
    private config;
    constructor(config: LdapConfig, baseDn: string);
    bind(bindDn: string, password: string): Promise<void>;
    unbind(): Promise<void>;
    /**
     * Reconnects the client in case of error
     */
    private reconnect;
    add(dn: string, entry: Record<string, string | string[]>): Promise<void>;
    modify(dn: string, changes: any): Promise<void>;
    search(base: string, options: SearchOptions): Promise<import("ldapts").SearchResult>;
    /**
     * Sets AD password (unicodePwd) - REQUIRES LDAPS
     */
    setPassword(dn: string, newPassword: string): Promise<void>;
    /**
     * Enables a user (removes the ACCOUNTDISABLE flag)
     */
    enableUser(dn: string): Promise<void>;
    /**
     * Disables a user (adds the ACCOUNTDISABLE flag)
     */
    disableUser(dn: string): Promise<void>;
    /**
     * Checks if a user is a member of a group
     */
    isGroupMember(userDn: string, groupDn: string): Promise<boolean>;
    /**
     * Searches for a user by sAMAccountName
     */
    findUserBySAM(samAccountName: string): Promise<string | null>;
    /**
     * Retrieves a user with all properties
     */
    getUserBySAM(samAccountName: string, includeAll?: boolean): Promise<any | null>;
    /**
     * Lists users with advanced filters
     */
    listUsers(options?: {
        filterType?: string;
        searchValue?: string;
        searchField?: string;
        includeAll?: boolean;
        maxResults?: number;
    }): Promise<any[]>;
    /**
     * Retrieves all groups of a user
     */
    getUserGroups(samAccountName: string, includeNested?: boolean, fullDetails?: boolean): Promise<any[]>;
    /**
     * Retrieves user activity information
     */
    getUserActivity(samAccountName: string, activityType?: string): Promise<any>;
    /**
     * Unlocks a user account
     */
    unlockUserAccount(samAccountName: string): Promise<any>;
    /**
     * Checks password expiration
     */
    checkPasswordExpiry(samAccountName: string): Promise<any>;
    /**
     * Creates an Organizational Unit
     */
    createOU(name: string, parentDn: string, description?: string): Promise<any>;
    /**
     * Gets an Organizational Unit by DN
     */
    getOU(dn: string): Promise<any>;
    /**
     * Modifies an Organizational Unit
     */
    modifyOU(dn: string, attributes: Record<string, string>): Promise<any>;
    /**
     * Deletes an Organizational Unit (must be empty)
     */
    deleteOU(dn: string): Promise<any>;
    /**
     * Lists Organizational Units
     */
    listOUs(parentDn?: string, searchFilter?: string): Promise<any[]>;
    /**
     * Creates a Group (Security or Distribution)
     */
    createGroup(name: string, parentDn: string, options?: {
        groupType?: 'security' | 'distribution';
        scope?: 'global' | 'domainLocal' | 'universal';
        description?: string;
        samAccountName?: string;
    }): Promise<any>;
    /**
     * Gets a Group by DN
     */
    getGroup(dn: string): Promise<any>;
    /**
     * Modifies a Group
     */
    modifyGroup(dn: string, attributes: Record<string, string>): Promise<any>;
    /**
     * Deletes a Group
     */
    deleteGroup(dn: string): Promise<any>;
    /**
     * Lists Groups with filters
     */
    listGroups(options?: {
        searchFilter?: string;
        groupType?: 'security' | 'distribution' | 'all';
        scope?: 'global' | 'domainLocal' | 'universal' | 'all';
        maxResults?: number;
    }): Promise<any[]>;
    /**
     * Searches groups by name (for autocomplete/dropdown)
     */
    searchGroups(searchTerm: string, maxResults?: number): Promise<Array<{
        name: string;
        value: string;
        description: string;
    }>>;
    /**
     * Searches OUs by name (for autocomplete/dropdown)
     */
    searchOUs(searchTerm: string, maxResults?: number): Promise<Array<{
        name: string;
        value: string;
        description: string;
    }>>;
}