import type { OrgRole } from "./types.js";
export declare function orgRoleRank(role: OrgRole | null | undefined): number;
export declare function orgRoleAtLeast(role: OrgRole | null | undefined, minimum: OrgRole): boolean;
export declare function canManageOrg(role: OrgRole | null | undefined): boolean;
/**
 * Invites work without an email provider: the invitation is stored and the
 * invitee accepts it on sign-in, so email availability only changes the copy.
 */
export declare function canInviteOrgMembers(role: OrgRole | null | undefined): boolean;
export declare function canManageOrgDomain(role: OrgRole | null | undefined): boolean;
/**
 * The cross-app secret signs the JWTs peer apps accept as first-party callers,
 * so reading, replacing, or syncing it stays with the owner.
 */
export declare function canManageOrgA2ASecret(role: OrgRole | null | undefined): boolean;