/**
 * Removes scopes that are no longer declared in code, cascading them out of
 * every role that holds them.
 *
 * This revokes access, so it never runs implicitly — not at boot, not as part
 * of `pikku all`. Without `--yes` it only reports the blast radius.
 */
export declare const scopesPrune: import("#pikku").PikkuFunctionConfig<{
    yes?: boolean;
}, void, "rpc" | "session", import("#pikku").PikkuFunctionSessionless<{
    yes?: boolean;
}, void, "rpc" | "session", import("#pikku").WiredServices> | import("#pikku").PikkuFunction<{
    yes?: boolean;
}, void, "rpc" | "session", import("#pikku").WiredServices>, undefined, undefined>;