/**
 * Zitadel + generic role-based access control helpers.
 *
 * Supports Zitadel IAM role claims (`urn:zitadel:iam:org:project:roles`),
 * generic `roles` arrays, and object-based role maps.
 *
 * If auth provider uses a different claim format, extend `hasRole`
 * rather than forking this module.
 */
export declare function hasRole(profile: Record<string, unknown> | null | undefined, role: string): boolean;
/** Collect every role name from a profile — Zitadel IAM roles, `roles` arrays, and object-based role maps — into a deduplicated `string[]`. */
export declare function getRoles(profile: Record<string, unknown> | null | undefined): string[];
//# sourceMappingURL=access.d.ts.map