import { type FirestoreDocument } from '../../firestore/accessor/document';
import { type GrantedRole, type GrantedRoleMap, type GrantedRoleMapReader, type GrantedRoleTruthMap, type GrantedRoleTruthMapObject } from '@dereekb/model';
import { type InModelContextFirebaseModelPermissionService } from './permission.service';
import { type SetIncludesMode, type ArrayOrValue } from '@dereekb/util';
import { type FirebasePermissionErrorContext } from './permission.context';
import { type FirebaseContextGrantedModelRoles, type FirebasePermissionServiceModel } from './permission';
/**
 * Reads and asserts granted roles for a specific model in a given context.
 *
 * Combines the computed {@link GrantedRoleMap} with the model's data and provides methods to
 * check and assert roles. Used as the primary interface for permission-guarded operations.
 *
 * Chainable assertion methods (`assertExists`, `assertHasRole`, `assertHasRoles`) return `this`
 * for fluent usage.
 */
export interface ContextGrantedModelRolesReader<C extends FirebasePermissionErrorContext, T, D extends FirestoreDocument<T> = FirestoreDocument<T>, R extends GrantedRole = GrantedRole> extends GrantedRoleMapReader<R>, FirebasePermissionServiceModel<T, D> {
    readonly roleMap: GrantedRoleMap<R>;
    readonly contextGrantedModelRoles: FirebaseContextGrantedModelRoles<C, T, D, R>;
    assertExists(): this;
    assertHasRole(role: R): this;
    assertHasRoles(setIncludes: SetIncludesMode, roles: ArrayOrValue<R>): this;
    assertContainsRoles(setIncludes: SetIncludesMode, roles: ArrayOrValue<R>): this;
    throwPermissionError(role?: R): never;
}
/**
 * Default implementation of {@link ContextGrantedModelRolesReader}.
 *
 * Wraps a {@link FirebaseContextGrantedModelRoles} result and delegates role reading
 * to a {@link GrantedRoleMapReader}. Throws context-specific errors via the permission error context.
 */
export declare class ContextGrantedModelRolesReaderInstance<C extends FirebasePermissionErrorContext, T, D extends FirestoreDocument<T> = FirestoreDocument<T>, R extends GrantedRole = GrantedRole> implements ContextGrantedModelRolesReader<C, T, D, R> {
    private readonly _contextGrantedModelRoles;
    private readonly _roleReader;
    constructor(contextGrantedModelRoles: FirebaseContextGrantedModelRoles<C, T, D, R>);
    get contextGrantedModelRoles(): FirebaseContextGrantedModelRoles<C, T, D, R>;
    get permissionServiceModel(): FirebasePermissionServiceModel<T, D>;
    get data(): import("@dereekb/util").Maybe<T>;
    get document(): D;
    get snapshot(): import("../..").DocumentSnapshot<T>;
    get exists(): boolean;
    get roleMap(): GrantedRoleMap<R>;
    truthMap<M extends GrantedRoleTruthMapObject<unknown, R>>(input: M): GrantedRoleTruthMap<M>;
    hasNoAccess(): boolean;
    hasRole(role: R): boolean;
    hasRoles(setIncludes: SetIncludesMode, roles: ArrayOrValue<R>): boolean;
    containsRoles(setIncludes: SetIncludesMode, roles: ArrayOrValue<R>): boolean;
    assertExists(): this;
    assertHasRole(role: R): this;
    assertHasRoles(setIncludes: SetIncludesMode, roles: ArrayOrValue<R>): this;
    assertContainsRoles(setIncludes: SetIncludesMode, roles: ArrayOrValue<R>): this;
    throwDoesNotExistError(): never;
    throwPermissionError(role?: ArrayOrValue<R>): never;
}
/**
 * Creates a new ContextGrantedModelRolesReader for the input model.
 *
 * @param service - the in-model-context permission service to read roles from
 * @returns a promise resolving to a {@link ContextGrantedModelRolesReader} for the model
 */
export declare function contextGrantedModelRolesReader<C extends FirebasePermissionErrorContext, T, D extends FirestoreDocument<T> = FirestoreDocument<T>, R extends GrantedRole = GrantedRole>(service: InModelContextFirebaseModelPermissionService<C, T, D, R>): Promise<ContextGrantedModelRolesReader<C, T, D, R>>;
/**
 * Creates the default permission error message.
 *
 * @param contextGrantedModelRoles - the granted model roles context to generate the message from
 * @param roles - the required role(s) that were not satisfied
 * @returns a human-readable permission error message string
 */
export declare function contextGrantedModelRolesReaderPermissionErrorMessage(contextGrantedModelRoles: FirebaseContextGrantedModelRoles<FirebasePermissionErrorContext, unknown>, roles?: ArrayOrValue<GrantedRole>): string;
/**
 * Creates the default does not exist error message.
 *
 * @param contextGrantedModelRoles - the granted model roles context to generate the message from
 * @returns a human-readable does-not-exist error message string
 */
export declare function contextGrantedModelRolesReaderDoesNotExistErrorMessage(contextGrantedModelRoles: FirebaseContextGrantedModelRoles<FirebasePermissionErrorContext, unknown>): string;