import type { AppId, CatalogId } from "@x12i/catalox-contracts/ids.js";
import type { CataloxContext } from "@x12i/catalox-contracts/context.js";
import type { CatalogBindingRecord } from "@x12i/catalox-contracts/bindings.js";
import { BindingStore } from "../firebase/binding-store.js";
export type RequiredAccess = "read" | "write" | "admin";
export type VisibilityDecision = {
    outcome: "allowed";
    binding: CatalogBindingRecord;
} | {
    outcome: "denied";
    reason: string;
    details?: Record<string, unknown>;
};
export declare class AuthorizationService {
    private readonly bindings;
    constructor(bindings: BindingStore);
    resolveVisibility(context: CataloxContext, appId: AppId, catalogId: CatalogId, required: RequiredAccess): Promise<VisibilityDecision>;
    requireBindingAccess(context: CataloxContext, appId: AppId, catalogId: CatalogId, required: RequiredAccess): Promise<CatalogBindingRecord>;
}
//# sourceMappingURL=authorization.d.ts.map