//#region src/utils/copilot.d.ts
/**
 * Whether the copilot bypass is fully configured (all three env vars set).
 * Evaluated once at module load — safe because env vars don't change at runtime.
 */
declare const copilotBypassConfigured: boolean;
/**
 * Returns true when the given identifiers match the copilot agent configured
 * via INKEEP_COPILOT_* env vars. Used to bypass tenant membership and SpiceDB
 * permission checks for the copilot (chat-to-edit) feature.
 *
 * Callers should still verify the user is session-authenticated.
 * Target-resource authorization is enforced by the copilot agent via
 * forwarded session cookies.
 */
declare function isCopilotAgent(ids: {
  tenantId: string;
  projectId?: string;
  agentId?: string;
}): boolean;
//#endregion
export { copilotBypassConfigured, isCopilotAgent };