import type { OrgDaemon, RunningOrg } from './daemon.js';
import { type OrgDef } from './types.js';
/** `federation.allow_*` membership: absent list = unrestricted, '*' = any. */
export declare function federationAllows(list: string[] | undefined, org: string): boolean;
/** The org def for federation checks: the running def, else the one on disk. */
export declare function federationDef(daemon: OrgDaemon, org: string): Pick<OrgDef, 'federation'> | undefined;
/** M4: the sender's allow_to check for a cross-root delivery. Returns the
 *  ERROR receipt when denied (and emits the audit event), else undefined. */
export declare function federationDenied(daemon: OrgDaemon, fromOrg: string, fromRole: string, targetOrgName: string, to: string, subject: string, src: RunningOrg | undefined): string | undefined;
//# sourceMappingURL=cross-org-federation.d.ts.map