import { SigningScope } from './types';
/**
 * Check whether a (org, project) deployment target is covered by at least one scope.
 *
 * Matching rules (aligned with the backend BundleSignatureVerifier):
 * - org: exact match only (no wildcards)
 * - project: "*" matches all, leading wildcard "*-suffix" matches by suffix, else exact match
 * - Trailing wildcards like "myapp-*" are NOT supported and treated as exact string matches
 */
export declare function isScopeCovered(org: string, project: string, scopes: readonly SigningScope[]): boolean;
/**
 * Validate an array of scopes. Returns validation error strings (empty if valid).
 */
export declare function validateScopes(scopes: readonly SigningScope[]): string[];
/**
 * Parse a scope string like "org/project" into a SigningScope.
 */
export declare function parseScope(scope: string): SigningScope;