import { CommandType } from '../types/command.types';
import { PermissionKey } from '../../config/Keys/Permissions';
/**
 * Maps each data-plane TCP command to the RBAC permission key required to run it.
 * Mirrors the GUI's per-route `requirePermission(key)` chain (see
 * `source/server/router/Routers/*.routes.ts`) so TCP and GUI enforce identical rules
 * against the same `config` DB users/roles.
 *
 * Commands with no entry here (and not in `TCP_AUTH_EXEMPT_COMMANDS`) still require a
 * successful AUTHENTICATE, but no specific permission - currently only
 * BEGIN/COMMIT/ROLLBACK_TRANSACTION, which fall straight through to the existing
 * `NOT_IMPLEMENTED` response.
 */
export declare const TCP_COMMAND_PERMISSIONS: Partial<Record<CommandType, PermissionKey>>;
/** Commands that never require authentication, even when the TCP server has `TCPAuth` enabled. */
export declare const TCP_AUTH_EXEMPT_COMMANDS: ReadonlySet<CommandType>;