import type { AuthenticationStore, AuthIdentity, VerifiedOidcIdentity } from '../auth';
import type { DashboardUser } from './dashboard-auth';
import type { DashboardControlPlane } from './dashboard-control-plane';
/**
 * Non-breaking bridge from the original local user file into durable auth.
 * The control-plane identity becomes authoritative after the first migration;
 * memberships remain a separate authorization concern.
 */
export declare function synchronizeDashboardIdentities(authentication: AuthenticationStore, controlPlane: DashboardControlPlane, users: DashboardUser[]): void;
export declare function resolveOidcDashboardIdentity(authentication: AuthenticationStore, controlPlane: DashboardControlPlane, cwd: string, verified: VerifiedOidcIdentity): {
    identity: AuthIdentity;
    user: DashboardUser;
    provisioned: boolean;
};
export declare function localLoginRequiresSso(authentication: AuthenticationStore, controlPlane: DashboardControlPlane, identity: AuthIdentity): boolean;
