export interface DbOptions {
    readonly cwd: string;
    readonly subcommand: string | undefined;
    readonly db?: string | undefined;
    readonly test?: boolean | undefined;
    readonly confirm?: boolean | undefined;
    readonly adminUrl?: string | undefined;
}
export declare function db(opts: DbOptions): Promise<void>;
/**
 * The DML grants for the non-owner runtime role, applied at provision time on a
 * connection authenticated as the owner. The two ALTER DEFAULT PRIVILEGES lines
 * are the drift guard: every future table the owner creates via migrations is
 * granted to the runtime role automatically, so an RLS-enabled table can never
 * be left ungranted — which would blank the rows the app is entitled to.
 */
export declare function buildRuntimeGrants(schema: string, ownerRole: string, runtimeRole: string): string[];
//# sourceMappingURL=db.d.ts.map