import { type ApiRouteDeps } from "@opengeni/core";
import type { Hono } from "hono";
export declare function registerManagedAuthSessionSetRoutes(app: Hono, deps: ApiRouteDeps): void;
export declare function validatedManagedAuthSocialAuthorizationUrl(input: {
    provider: "google" | "github";
    rawUrl: unknown;
    expectedClientId: string;
    expectedCallbackUrl: string;
}): string;
/**
 * Better Auth 1.6.26 provider lifecycle routes retained while session-set mode
 * owns all selected-session reads, enumeration, revocation, and user mutation.
 * The list is intentionally exact so a dependency upgrade cannot silently add
 * a selected-session capability under the wildcard.
 */
export declare function requireManagedAuthProviderRouteAllowed(method: string, pathname: string): void;
/** Remove provider bearer/session material and enforce browser-auth cache/cookie policy. */
export declare function scrubManagedAuthProviderResponse(response: Response, options?: {
    replacementCookies?: readonly string[] | undefined;
    preserveCookieNames?: readonly string[] | undefined;
}): Promise<Response>;
export declare function parseSupportedDeepLink(path: string): {
    workspaceId: string | null;
    sessionId: string | null;
    permission: "workspace:read" | "sessions:read";
} | null;