import { BaseController, Ok } from '@spinajs/http';
import { AccessControl, User as RbacUser } from '@spinajs/rbac';
import { IGrantsMap } from '../interfaces.js';
/**
 * RBAC grants management.
 * Provides access to the current RBAC access-control grants configuration.
 * @tags RBAC
 */
export declare class GrantsController extends BaseController {
    protected AC: AccessControl;
    /**
     * Get RBAC grants
     * Returns the RBAC grants for the requesting user's own role(s) only — not
     * the full cross-role matrix, which would leak the entire access-control
     * policy to any authenticated user.
     * @security cookieAuth
     * @returns {IGrantsMap} RBAC grants map keyed by the caller's role name(s)
     * @response 401 Unauthorized — valid session cookie required
     */
    getGrants(user: RbacUser): Ok<IGrantsMap>;
}
//# sourceMappingURL=GrantsController.d.ts.map