import type { TNftFamily, INftFirewallRule, INftIPSetConfig } from './nft.types.js';
/**
 * Build an nft firewall rule for input/output/forward chains.
 */
export declare function buildFirewallRule(tableName: string, family: TNftFamily, rule: INftFirewallRule): string[];
/**
 * Build commands to create an nft named set (IP set).
 */
export declare function buildIPSetCreate(tableName: string, family: TNftFamily, config: INftIPSetConfig): string[];
/**
 * Build command to add elements to an existing set.
 */
export declare function buildIPSetAddElements(tableName: string, family: TNftFamily, setName: string, elements: string[]): string[];
/**
 * Build command to remove elements from a set.
 */
export declare function buildIPSetRemoveElements(tableName: string, family: TNftFamily, setName: string, elements: string[]): string[];
/**
 * Build command to delete an entire set.
 */
export declare function buildIPSetDelete(tableName: string, family: TNftFamily, setName: string): string[];
/**
 * Build a rule that matches against a named set.
 */
export declare function buildIPSetMatchRule(tableName: string, family: TNftFamily, options: {
    setName: string;
    direction: 'input' | 'output' | 'forward';
    matchField: 'saddr' | 'daddr';
    action: 'accept' | 'drop' | 'reject';
    comment?: string;
}): string[];