/**
 * Whether this app runs inside a workspace, where auth and internal secrets
 * derive from the shared `A2A_SECRET`. Exported so the deploy settings check
 * decides "workspace" exactly the way the derivation does.
 */
export declare function isWorkspaceRuntime(): boolean;
export declare function deriveServerSecret(rootSecret: string, purpose: string): string;
export declare function getWorkspaceA2ADerivedSecret(purpose: "better-auth" | "oauth-state" | "short-lived-token" | "secrets-encryption"): string | undefined;