import type { CollectionConfig } from 'payload';
import type { MultiTenantPluginConfig } from '../types.js';
type Args<ConfigType = unknown> = {
    collection: CollectionConfig;
    tenantFieldName: string;
    tenantsArrayFieldName: string;
    tenantsArrayTenantFieldName: string;
    userHasAccessToAllTenants: Required<MultiTenantPluginConfig<ConfigType>>['userHasAccessToAllTenants'];
};
/**
 * Reject writes that assign a tenant the user is not a member of.
 *
 * The tenant field's own `validate` covers this on ordinary writes and gives the
 * admin panel an inline field error, but Payload skips field validation for draft,
 * autosave, trash and restore-version writes. A collection `beforeValidate` hook
 * always runs, so this is the check that actually closes those paths.
 */
export declare const addCollectionBeforeValidateHook: <ConfigType = unknown>({ collection, tenantFieldName, tenantsArrayFieldName, tenantsArrayTenantFieldName, userHasAccessToAllTenants, }: Args<ConfigType>) => void;
export {};
//# sourceMappingURL=enforceTenantMembership.d.ts.map