import { type ToolDefinition } from './types.js';
/**
 * Whether the caller is a full account admin. RBAC `resourceAreas` can be all-false for such users
 * (they have no per-resource-group rows), so this flags that `resourceAreas` may understate access —
 * a caller seeing a false area should still attempt the operation.
 */
export declare function hasBroadAbacAccess(statements: string[]): boolean;
type AreaSummary = {
    create: boolean;
    read: boolean;
    update: boolean;
    delete: boolean;
};
/**
 * Coarse any-grant fold of iamGetCurrentUser resourcePermissions rows: true means at least one
 * grant exists for that action in that area. The authoritative check stays with the API — a user
 * with broad ABAC access may legitimately have zero rows here.
 */
export declare function summarizeResourceAreas(rows: Array<{
    resourceArea: string;
    canCreate: boolean;
    canRead: boolean;
    canUpdate: boolean;
    canDelete: boolean;
}>): Record<string, AreaSummary>;
export declare const accountTools: ToolDefinition[];
export {};
//# sourceMappingURL=account.d.ts.map