import type { OrgDef } from '../types.js';
import { type NativeBind } from './copy-inventory.js';
export interface RoleProtection {
    denyReadDirs: string[];
    denyWriteDirs: string[];
    bestEffortDenyRead: string[];
    bestEffortReadOnly: string[];
    bestEffortBinds: NativeBind[];
    runtimeEnv: Record<string, string>;
}
export declare const NO_PROTECTION: RoleProtection;
export declare function sectionsRoleProtection(args: {
    def: (Pick<OrgDef, 'roles'> & {
        sections?: unknown;
    }) | undefined;
    orgDir: string | undefined;
    roleId: string;
    runtime: string;
    home: string;
    env: NodeJS.ProcessEnv;
}): RoleProtection;
//# sourceMappingURL=role-protection.d.ts.map