import type { EnvironmentConfig } from "../config/environment-config.js";
export declare const OAUTH_RESPONSE_HEADERS: {
    readonly "Cache-Control": "no-store";
    readonly "Referrer-Policy": "no-referrer";
};
/** Only explicit development/test environments may use local OAuth defaults. */
export declare function isExplicitLocalOAuthEnvironment(env: EnvironmentConfig): boolean;
/** Resolve and validate the public web origin used by OAuth handlers. */
export declare function resolveOAuthApplicationUrl(baseUrl: string | undefined, env: EnvironmentConfig): URL;
/** Build the exact callback URI used in both authorization and token requests. */
export declare function buildOAuthCallbackUrl(appUrl: URL, serviceId: string): string;
/** Resolve a post-flow redirect while preventing an OAuth client open redirector. */
export declare function resolveOAuthCompletionRedirect(appUrl: URL, target: string): URL;
export declare function createOAuthRedirect(url: string | URL): Response;
export declare function createOAuthJsonResponse(body: unknown, init?: ResponseInit): Response;
//# sourceMappingURL=url-utils.d.ts.map