/**
 * Administrative route manifest
 *
 * Operations one user performs on another's account. Never mounted by default, and
 * refused at startup unless an `IAuthorizationProvider` is configured — the toolkit
 * ships no role model, so without one these routes would be reachable by any
 * authenticated caller.
 *
 * Every route declares the {@link AuthAction} it performs. The service authorizes that
 * action independently, so the same policy also covers a hand-written controller or a
 * script; the declaration here lets a mount fail fast rather than at first request.
 *
 * @packageDocumentation
 */
import { AnyNAuthRouteDefinition } from './route-manifest.types';
/**
 * Every administrative route the toolkit ships.
 *
 * All are `access: 'admin'`, and all deny API-key authentication so that
 * `apiKeys.globalAllowlist` cannot inadvertently expose them. The guard enforces that
 * before the handler runs, so an authorization provider is never consulted for a
 * key-authenticated call here; `viaApiKey` on the authorization context exists for
 * hand-written admin routes marked `allowApiKey`.
 *
 * Ordering places literal segments before parametric ones at the same depth.
 */
export declare const ADMIN_ROUTES_MANIFEST: readonly AnyNAuthRouteDefinition[];
//# sourceMappingURL=admin-routes.manifest.d.ts.map