type Env = Record<string, string | undefined>;
export declare class WorkspaceProfileError extends Error {
}
/** Capture actual key authority before OTP; cached identity never supplies authority. */
export declare function prepareProfileWorkspace(action: string, source?: Env): {
    origin: string;
    resolve(): Promise<{
        origin: string;
        context: undefined;
        unchanged: () => void;
    } | {
        origin: string;
        context: Readonly<{
            userId: string;
            membershipId: string;
        }>;
        unchanged: () => void;
    }>;
};
export declare function captureProfileWorkspace(action: string, source?: Env): Promise<{
    origin: string;
    context: undefined;
    unchanged: () => void;
} | {
    origin: string;
    context: Readonly<{
        userId: string;
        membershipId: string;
    }>;
    unchanged: () => void;
}>;
/** Own only the explicitly named profile; injected credentials may not hide enrollment. */
export declare function prepareWorkspaceEnrollment(membershipId: string, source?: Env): Promise<{
    profile: string;
    origin: string;
    complete(email: string, code: string): Promise<{
        status: string;
        profile: string;
        apiUrl: string;
        userId: string;
        email: string;
        membershipId: string;
        organization: string;
        organizationId: string;
        role: import("./remote-profile.js").RemoteCustomerRole;
        keyCreated: boolean;
    }>;
}>;
export {};