import type { SparqlEngine } from '../storage/sparql/SubgraphQueryEngine';
export declare class AclPermissionService {
    private readonly engine;
    protected readonly logger: import("global-logger-factory").Logger<unknown>;
    constructor(engine: SparqlEngine);
    protected getEngine(): Promise<SparqlEngine>;
    /**
     * Check if a user has acl:Control permission on a resource.
     *
     * Checks for:
     * - Direct agent match: acl:agent <userId>
     * - Public access: acl:agentClass foaf:Agent
     * - Authenticated access: acl:agentClass acl:AuthenticatedAgent
     *
     * @param userId - The WebID of the user
     * @param resourceUrl - The URL of the resource to check
     * @returns true if user has Control permission
     */
    hasControlPermission(userId: string, resourceUrl: string): Promise<boolean>;
    /**
     * Get all resources where user has Control permission under a base path.
     *
     * @param userId - The WebID of the user
     * @param basePath - The base path to search under
     * @returns Array of resource URLs with Control permission
     */
    getControlledResources(userId: string, basePath: string): Promise<string[]>;
}