import { MedusaNextFunction, MedusaResponse } from "@medusajs/framework";
import { AuthenticatedMedusaRequest } from "@medusajs/framework/http";
/**
 * Seeded by the RBAC module's initial-data loader; holds the `*:*` policy.
 */
export declare const SUPER_ADMIN_ROLE_ID = "role_super_admin";
/**
 * Resolves the acting admin user's RBAC roles per request.
 *
 * Medusa bakes roles into the JWT at login, which means a role change only
 * takes effect once the token is re-issued. Reading them here instead keeps
 * enforcement current, and mirrors what `ensureSellerMiddleware` already does
 * on the vendor side.
 *
 * A user with no roles falls back to super admin rather than being denied.
 * Route policy checks reject an actor with an empty role list outright, so
 * without this fallback every admin predating RBAC would lose access.
 */
export declare function resolveAdminRolesMiddleware(req: AuthenticatedMedusaRequest, _res: MedusaResponse, next: MedusaNextFunction): Promise<void>;