import { DISPATCH_WORKSPACE_SSO_FLAG } from "./feature-flags.js";
export { DISPATCH_WORKSPACE_SSO_FLAG };
/** Exact first-party origins. Never replace this with a suffix or wildcard. */
export declare const CANONICAL_WORKSPACE_SSO_APP_ORIGINS: {
    readonly analytics: "https://analytics.agent-native.com";
    readonly assets: "https://assets.agent-native.com";
    readonly brain: "https://brain.agent-native.com";
    readonly calendar: "https://calendar.agent-native.com";
    readonly chat: "https://chat.agent-native.com";
    readonly clips: "https://clips.agent-native.com";
    readonly content: "https://content.agent-native.com";
    readonly crm: "https://crm.agent-native.com";
    readonly design: "https://design.agent-native.com";
    readonly dispatch: "https://dispatch.agent-native.com";
    readonly forms: "https://forms.agent-native.com";
    readonly macros: "https://macros.agent-native.com";
    readonly mail: "https://mail.agent-native.com";
    readonly plan: "https://plan.agent-native.com";
    readonly slides: "https://slides.agent-native.com";
    readonly tasks: "https://tasks.agent-native.com";
};
export declare const WORKSPACE_SSO_CALLBACK_PATH: "/_agent-native/identity/callback";
export interface WorkspaceSsoAppRegistration {
    appId: string;
    clientId: string;
    origin: string;
    callbackPath: typeof WORKSPACE_SSO_CALLBACK_PATH;
}
export declare function exactWorkspaceSsoOrigin(raw: unknown): string | null;
/**
 * Parse the same additive custom registry used by browser identity SSO. The
 * raw value is passed in so this shared module stays safe to import in the
 * browser bundle.
 */
export declare function parseWorkspaceSsoAppRegistrations(raw: unknown): WorkspaceSsoAppRegistration[];
/**
 * Keep the server-side app catalog and the browser's action choice on the
 * same exact-origin rules. `registryRaw` is deliberately supplied by the
 * caller so this shared module never reads process or browser environment.
 */
export declare function isWorkspaceSsoAppUrl(app: {
    id: string;
    url?: unknown;
}, options?: {
    nodeEnv?: string;
    registryRaw?: unknown;
}): boolean;
//# sourceMappingURL=workspace-sso.d.ts.map