/**
 * Shared capability bridge rules — single source for client JWT fallback checks.
 * Server uses the same helpers from pi-kiosk-shared in PermissionInheritanceResolver.
 * Forward-only: legacy → canonical; never canonical view → manage cluster.
 */
export declare const ADMIN_USERS_MANAGE_BRIDGE_SOURCES: readonly string[];
export declare const ADMIN_USERS_MANAGE_BRIDGE_TARGETS: readonly string[];
export declare const DEV_COMPLIANCE_AUDIT_BRIDGE_SOURCES: readonly string[];
export declare const DEV_COMPLIANCE_GDPR_BRIDGE_SOURCES: readonly string[];
/**
 * Forward-only implication used by client expansion and server bridge checks.
 */
export declare function grantImpliesTarget(granted: string, target: string): boolean;
/**
 * Expands grants with bridge rules and manage→view / manage→read (no reverse implications).
 */
export declare function expandCapabilitiesForClientCheck(grants: readonly string[]): Set<string>;
/** Parity fixture — both backend and shared tests must satisfy. */
export declare const BRIDGE_PARITY_FIXTURE_GRANTS: readonly ["users:admins:create", "dev:workers:read", "dev:workers:run", "dev:aggregates:read", "dev:aggregates:run", "dev:compliance:audit:read", "dev:compliance:gdpr:read", "ops:payment-preferences:read", "ops:payment-preferences:manage", "tenant.bankInbox.read", "tenant.bankInbox.manage", "tenant.paymentClaims.approve", "tenant.paymentPreferences.view", "tenant.paymentPreferences.manage", "system:logs:read", "system:logs:manage", "system:pii:read", "system:pii:manage"];
export declare const BRIDGE_PARITY_FIXTURE_EXPECTED_TARGETS: readonly ["tenant.adminUserCapabilities.view", "tenant.adminUserCapabilities.manage", "tenant.adminUsers.manage", "platform.retentionWorkers.view", "platform.retentionWorkers.manage", "platform.aggregates.view", "platform.aggregates.manage", "platform.complianceAudit.view", "platform.complianceGdpr.view", "tenant.reconciliation.read", "tenant.systemLogs.view", "tenant.systemLogs.manage", "tenant.systemPii.view", "tenant.systemPii.manage"];
//# sourceMappingURL=capabilityBridgeRules.d.ts.map