import { type CursorPaginatedResult, type Entity } from '../core/index.js';
import type { WorkOSStore } from './store.js';
import type { WorkOSOrganization, WorkOSOrganizationDomain, WorkOSOrganizationMembership, WorkOSUser, WorkOSSession, WorkOSEmailVerification, WorkOSPasswordReset, WorkOSMagicAuth, WorkOSAuthenticationFactor, WorkOSIdentity, WorkOSConnection, WorkOSSSOProfile, WorkOSPipeConnection, WorkOSInvitation, WorkOSRedirectUri, WorkOSCorsOrigin, WorkOSAuthorizedApplication, WorkOSConnectedAccount, WorkOSAuthenticationChallenge, WorkOSDeviceAuthorization, WorkOSRole, WorkOSPermission, WorkOSAuthorizationResource, WorkOSRoleAssignment, WorkOSDirectory, WorkOSDirectoryUser, WorkOSDirectoryGroup, WorkOSAuditLogAction, WorkOSAuditLogEvent, WorkOSAuditLogExport, WorkOSFeatureFlag, WorkOSFlagTarget, WorkOSConnectApplication, WorkOSClientSecret, WorkOSRadarAttempt, WorkOSApiKey, WorkOSEvent, WorkOSWebhookEndpoint } from './entities.js';
export declare function formatEntity<T extends Entity>(entity: T, opts?: {
    exclude?: Set<string>;
}): Record<string, unknown>;
export declare function formatListResponse<T>(result: CursorPaginatedResult<T>, formatter: (item: T) => Record<string, unknown>): {
    object: 'list';
    data: Record<string, unknown>[];
    list_metadata: {
        before: string | null;
        after: string | null;
    };
};
export declare function formatOrganization(org: WorkOSOrganization, ws: WorkOSStore, opts?: {
    domains?: WorkOSOrganizationDomain[];
}): Record<string, unknown>;
export declare function formatDomain(domain: WorkOSOrganizationDomain): Record<string, unknown>;
export declare function formatMembership(m: WorkOSOrganizationMembership): Record<string, unknown>;
export declare function formatUser(user: WorkOSUser): Record<string, unknown>;
export declare function formatSession(s: WorkOSSession): Record<string, unknown>;
export declare function formatEmailVerification(ev: WorkOSEmailVerification): Record<string, unknown>;
export declare function formatPasswordReset(pr: WorkOSPasswordReset): Record<string, unknown>;
export declare function formatMagicAuth(ma: WorkOSMagicAuth): Record<string, unknown>;
export declare function formatAuthFactor(f: WorkOSAuthenticationFactor): Record<string, unknown>;
export declare function formatIdentity(i: WorkOSIdentity): Record<string, unknown>;
export declare function generateVerificationToken(): string;
export declare function generateCode(): string;
export declare function hashPassword(password: string): string;
export declare function verifyPassword(password: string, hash: string): boolean;
export declare function expiresIn(minutes: number): string;
export declare function isExpired(expiresAt: string): boolean;
export declare function formatConnection(conn: WorkOSConnection): Record<string, unknown>;
export declare function formatSSOProfile(p: WorkOSSSOProfile): Record<string, unknown>;
export declare function formatPipeConnection(pc: WorkOSPipeConnection): Record<string, unknown>;
export declare function formatInvitation(inv: WorkOSInvitation): Record<string, unknown>;
export declare function formatRedirectUri(r: WorkOSRedirectUri): Record<string, unknown>;
export declare function formatCorsOrigin(o: WorkOSCorsOrigin): Record<string, unknown>;
export declare function formatAuthorizedApplication(a: WorkOSAuthorizedApplication): Record<string, unknown>;
export declare function formatConnectedAccount(a: WorkOSConnectedAccount): Record<string, unknown>;
/**
 * Validate that a redirect_uri points to a localhost origin.
 * Prevents the emulator from being used as an open redirect.
 */
export declare function assertLocalRedirectUri(uri: string): void;
export declare function formatAuthChallenge(c: WorkOSAuthenticationChallenge): Record<string, unknown>;
export declare function formatRole(role: WorkOSRole): Record<string, unknown>;
export declare function formatPermission(p: WorkOSPermission): Record<string, unknown>;
export declare function formatAuthorizationResource(r: WorkOSAuthorizationResource): Record<string, unknown>;
export declare function formatRoleAssignment(ra: WorkOSRoleAssignment): Record<string, unknown>;
export declare function formatDeviceAuthorization(d: WorkOSDeviceAuthorization): Record<string, unknown>;
export declare function formatDirectory(d: WorkOSDirectory): Record<string, unknown>;
export declare function formatDirectoryUser(u: WorkOSDirectoryUser): Record<string, unknown>;
export declare function formatDirectoryGroup(g: WorkOSDirectoryGroup): Record<string, unknown>;
export declare function formatAuditLogAction(a: WorkOSAuditLogAction): Record<string, unknown>;
export declare function formatAuditLogEvent(e: WorkOSAuditLogEvent): Record<string, unknown>;
export declare function formatAuditLogExport(ex: WorkOSAuditLogExport): Record<string, unknown>;
export declare function formatFeatureFlag(f: WorkOSFeatureFlag): Record<string, unknown>;
export declare function formatFlagTarget(t: WorkOSFlagTarget): Record<string, unknown>;
export declare function formatConnectApplication(a: WorkOSConnectApplication): Record<string, unknown>;
export declare function formatClientSecret(s: WorkOSClientSecret): Record<string, unknown>;
export declare function formatRadarAttempt(a: WorkOSRadarAttempt): Record<string, unknown>;
export declare function formatApiKeyRecord(k: WorkOSApiKey): Record<string, unknown>;
export declare function formatEvent(e: WorkOSEvent): Record<string, unknown>;
export declare function formatWebhookEndpoint(ep: WorkOSWebhookEndpoint, opts?: {
    includeSecret?: boolean;
}): Record<string, unknown>;
export declare function sealSession(data: {
    access_token: string;
    refresh_token: string;
    session_id: string;
}, apiKey: string): string;