import type * as plugins from './plugins.js';
import type { SmartDataAuthStore } from './classes.authstore.js';
type TOperation = plugins.browserRuntime.TBrowserRuntimeOperationIdentity;
type TStore = Pick<SmartDataAuthStore, 'getResource' | 'recordAuditEvent'>;
interface IBrowserOperationAuthorityOptions {
    store: TStore;
    isRetiring(operation: TOperation): boolean;
    assertHuman(operation: TOperation, signal: AbortSignal): void;
    authorizeFlex(operation: TOperation): boolean;
    authorizeMcp(operation: TOperation): boolean;
}
/** Authorization runs after Runtime reserves execution order, never in a second queue. */
export declare class ControllerBrowserOperationAuthority {
    private readonly options;
    private readonly attachmentReads;
    constructor(options: IBrowserOperationAuthorityOptions);
    beforeOperation: (operation: TOperation, signal: AbortSignal) => Promise<void>;
    audit: (event: plugins.browserRuntime.TBrowserRuntimeAuditEvent, signal: AbortSignal) => Promise<void>;
    private assertActive;
    private recordAudit;
}
export {};