//#region src/cli/shared/readonly-guard.d.ts
interface AssertWritableOptions {
  /** Explicit profile name from command args. Falls back to TAILOR_PLATFORM_PROFILE. */
  profile?: string;
}
/**
 * Throw a CLIError if the active profile has `readonly: true`.
 *
 * Resolves the active profile in this order:
 * 1. `opts.profile` (CLI flag)
 * 2. `process.env.TAILOR_PLATFORM_PROFILE`
 *
 * If neither is set, no profile is in scope so the call is allowed. This is
 * intentional: `TAILOR_PLATFORM_TOKEN` direct access (CI / machine user) and
 * `--workspace-id` without a profile are out-of-band paths whose authorization
 * is governed by the bearer token itself, not by the local profile flag.
 *
 * If the resolved profile cannot be found in the config, this function returns
 * silently and lets downstream loaders surface the not-found error.
 * @param opts - Options
 * @param opts.profile - Optional explicit profile name from command args
 */
export declare function assertWritable(opts?: AssertWritableOptions): Promise<void>;
//#endregion