export interface ClientIdentity {
    uid: number;
    gid: number;
    role?: string;
    exePath?: string;
}
export interface AccessPolicy {
    allowedSecrets: string[];
}
export declare class PolicyEngine {
    private rolePolicies;
    private allowAllForOwner;
    constructor(initialPolicies?: Record<string, AccessPolicy>, allowAllForOwner?: boolean);
    registerPolicy(roleName: string, allowedSecrets: string[]): this;
    removePolicy(roleName: string): boolean;
    getPolicies(): Record<string, AccessPolicy>;
    isAllowed(identity: ClientIdentity, secretName: string): boolean;
}