import { type DrizzleExecutor } from "../drizzle.js";
import type { Permission } from "../permission/types.js";
/**
 * Requires the actor's requested secret-management capability before any external Rig secret operation proceeds.
 * A shared authorization entry point keeps non-database secret lifecycle work aligned with the same grants enforced by durable actions.
 */
export declare function agentSecretAuthorizeManagement(executor: DrizzleExecutor, actorUserId: string, permission: Extract<Permission, "manageSecrets" | "assignSecrets">): Promise<void>;
//# sourceMappingURL=agentSecretAuthorizeManagement.d.ts.map