export declare const getEmailDomain: (email: string) => string;
/**
 * Single source of truth for public / consumer email-provider domains that no
 * single organization can legitimately own. Used to block these domains from
 * being claimed as an organization email domain (auto-join) AND from being
 * verified as an SSO routing domain — receiving an OTP at e.g. `gmail.com`
 * proves nothing about owning the provider.
 *
 * Backed by the maintained Kickbox `free-email-domains` package (~10k entries,
 * updated via the dependency) plus the corporate provider roots above. It's a
 * vendored static set, never a runtime fetch. Note this is a best-effort
 * heuristic, not a hard security boundary — a brand-new provider slips through
 * until the list updates.
 */
export declare const PUBLIC_EMAIL_PROVIDER_DOMAINS: Set<string>;
/**
 * Whether a domain is a public/consumer email provider that no single
 * organization can own. Normalizes case before checking.
 */
export declare const isPublicEmailProviderDomain: (domain: string) => boolean;
export declare const isValidEmailDomain: (value: string) => RegExpMatchArray | null;
export declare const validateOrganizationEmailDomains: (domains: string[]) => string | undefined;
export declare const isValidEmailAddress: (email: string) => boolean;
//# sourceMappingURL=email.d.ts.map