import type { NctUser } from '../../shared/types/auth.js';
/**
 * Checks whether authentication is globally enabled for the CRUD table module
 * via the runtime public configuration.
 *
 * @returns {boolean} True if authentication configuration is present and enabled, false otherwise.
 */
export declare function nctIsAuthEnabled(): boolean;
/**
 * Determines if the given user has an administrative role.
 *
 * @param {NctUser | null | undefined} user - The user object to check.
 * @returns {boolean} True if the user exists and has the 'admin' role, false otherwise.
 */
export declare function nctIsAdmin(user: NctUser | null | undefined): boolean;
/**
 * Verifies if the authenticated user is the owner of a specific data record.
 * It matches the user's ID against a specified ownership key within the record.
 *
 * @param {NctUser | null | undefined} user - The user object to evaluate.
 * @param {Record<string, unknown>} [record] - The data record being checked.
 * @param {string} [ownerKey] - The property key in the record that holds the creator/owner ID.
 * @returns {boolean} True if the user ID matches the record's owner field, false otherwise.
 */
export declare function nctIsOwner(user: NctUser | null | undefined, record?: Record<string, unknown>, ownerKey?: string): boolean;
/**
 * Checks if a user has permission to perform a specific action on a given model/resource.
 * Automatically grants access if authentication is disabled or if the user is an admin.
 *
 * @param {NctUser | null | undefined} user - The user whose permissions are being checked.
 * @param {string} model - The resource/model name (e.g., 'users', 'posts').
 * @param {string} action - The action being performed (e.g., 'create', 'edit', 'delete').
 * @returns {boolean} True if the action is permitted, false otherwise.
 */
export declare function nctHasPermission(user: NctUser | null | undefined, model: string, action: string): boolean;
/**
 * Checks row-level permissions for a specific record.
 * Allows the action if the user has global permission, or if they have an ownership-restricted
 * permission (e.g., `action_own`) and actually own the record.
 *
 * @param {NctUser | null | undefined} user - The user executing the action.
 * @param {string} model - The resource/model name.
 * @param {string} action - The base action being attempted (e.g., 'edit').
 * @param {Record<string, unknown>} [record] - The specific record instance being accessed.
 * @returns {boolean} True if the user is authorized to perform the action on this specific row.
 */
export declare function nctHasRowPermission(user: NctUser | null | undefined, model: string, action: string, record?: Record<string, unknown>): boolean;
/**
 * Determines whether a user should see the navigation menu item for a specific resource
 * based on whether they have list visibility permissions (`list`, `list_all`, or `list_own`).
 *
 * @param {NctUser | null | undefined} user - The current user.
 * @param {string} model - The resource/model name to evaluate.
 * @returns {boolean} True if the user has any listing capability for the resource.
 */
export declare function nctIsAllowedToSeeResourceMenu(user: NctUser | null | undefined, model: string): boolean;