/**
 * RBAC evaluation logic
 * Mirrors Python _evaluate_rbac and _normalize_claim_list
 */
import type { RbacRequirements, UserInfo } from './types.js';
/**
 * Evaluate RBAC requirements against user info.
 *
 * @returns [allowed, reason] - allowed is true if access is granted, reason explains denial
 */
export declare function evaluateRbac(userInfo: UserInfo, requirements: RbacRequirements): [boolean, string];
//# sourceMappingURL=rbac.d.ts.map