import { RouterError } from "../router-core/envelope.js";
/** Refuse an unsafe list/search prefix (the empty string lists everything). */
export declare const assertSafePrefix: (prefix: string) => void;
/** The refusal for a key or prefix inside a plugin's reserved storage. */
export declare const outsideScope: () => RouterError;
/** Normalize a client-facing prefix to `""` or `"trimmed/"`. */
export declare const normalizePrefix: (prefix?: string) => string;
/**
 * Prepend the authorize prefix and validate the resolved key: unsafe → 422,
 * inside a plugin's `reserved` storage → 403. The messages name the key the
 * client sent, never the resolved storage key.
 */
export declare const scopeKey: (prefix: string, key: string, reserved?: readonly string[]) => string;
/** Strip the authorize prefix from a storage-relative key for the wire. */
export declare const unscopeKey: (prefix: string, key: string) => string;
//# sourceMappingURL=keys.d.ts.map