import { CommandType } from '../types/command.types';
import { PermissionKey } from '../../config/Keys/Permissions';
/**
 * Maps each data-plane TCP command to the RBAC permission key required to run it.
 * Mirrors the GUI's per-route `requirePermission(key)` chain (see
 * `source/server/router/Routers/*.routes.ts`) so TCP and GUI enforce identical rules
 * against the same `config` DB users/roles.
 *
 * Transaction commands require DOCUMENT_CREATE because they modify data.
 */
export declare const TCP_COMMAND_PERMISSIONS: Partial<Record<CommandType, PermissionKey>>;
/** Commands that never require authentication, even when the TCP server has `TCPAuth` enabled. */
export declare const TCP_AUTH_EXEMPT_COMMANDS: ReadonlySet<CommandType>;