@mastra/auth-cloud 1.2.0 → 1.2.1-alpha.0

package/dist/_types/@internal_auth/dist/ee/interfaces/permissions.generated.d.ts

@@ -0,0 +1,519 @@
+/**
+ * AUTO-GENERATED FILE - DO NOT EDIT DIRECTLY
+ *
+ * This file is generated by packages/server/scripts/generate-permissions.ts
+ * Run `pnpm generate:permissions` from packages/server to regenerate.
+ *
+ * Source of truth: SERVER_ROUTES in @mastra/server
+ */
+/**
+ * All known API resources.
+ * Derived from SERVER_ROUTES paths in @mastra/server.
+ */
+export declare const RESOURCES: readonly ["a2a", "agent-builder", "agents", "auth", "background-tasks", "channels", "datasets", "embedders", "experiments", "harness", "infrastructure", "logs", "mcp", "memory", "observability", "processor-providers", "processors", "schedules", "scores", "stored-agents", "stored-mcp-clients", "stored-prompt-blocks", "stored-scorers", "stored-skills", "stored-workspaces", "system", "tool-providers", "tools", "vector", "vectors", "workflows", "workspaces"];
+/**
+ * Resource type union.
+ */
+export type Resource = (typeof RESOURCES)[number];
+/**
+ * All permission actions.
+ * Derived from HTTP methods and route overrides:
+ * - GET → read
+ * - POST → write or execute (context-dependent)
+ * - PUT/PATCH → write
+ * - DELETE → delete
+ * - Additional actions from explicit requiresPermission overrides
+ */
+export declare const ACTIONS: readonly ["create", "delete", "execute", "publish", "read", "share", "write"];
+/**
+ * Action type union.
+ */
+export type Action = (typeof ACTIONS)[number];
+/**
+ * All valid permission patterns.
+ * Use `keyof typeof PERMISSION_PATTERNS` or the `PermissionPattern` type.
+ */
+export declare const PERMISSION_PATTERNS: {
+    /** Full access to all resources and actions */
+    readonly '*': "*";
+    /** Create all resources */
+    readonly '*:create': "*:create";
+    /** Delete all resources */
+    readonly '*:delete': "*:delete";
+    /** Execute all resources */
+    readonly '*:execute': "*:execute";
+    /** Publish, activate, or restore all resources */
+    readonly '*:publish': "*:publish";
+    /** View all resources */
+    readonly '*:read': "*:read";
+    /** Change visibility/audience all resources */
+    readonly '*:share': "*:share";
+    /** Create and modify all resources */
+    readonly '*:write': "*:write";
+    /** Full access to agent-to-agent communication */
+    readonly 'a2a:*': "a2a:*";
+    /** Full access to agent builder */
+    readonly 'agent-builder:*': "agent-builder:*";
+    /** Full access to agents */
+    readonly 'agents:*': "agents:*";
+    /** Full access to auth */
+    readonly 'auth:*': "auth:*";
+    /** Full access to background tasks */
+    readonly 'background-tasks:*': "background-tasks:*";
+    /** Full access to channels */
+    readonly 'channels:*': "channels:*";
+    /** Full access to datasets */
+    readonly 'datasets:*': "datasets:*";
+    /** Full access to embedders */
+    readonly 'embedders:*': "embedders:*";
+    /** Full access to experiments */
+    readonly 'experiments:*': "experiments:*";
+    /** Full access to harness sessions */
+    readonly 'harness:*': "harness:*";
+    /** Full access to infrastructure */
+    readonly 'infrastructure:*': "infrastructure:*";
+    /** Full access to logs */
+    readonly 'logs:*': "logs:*";
+    /** Full access to MCP servers */
+    readonly 'mcp:*': "mcp:*";
+    /** Full access to memory and threads */
+    readonly 'memory:*': "memory:*";
+    /** Full access to traces and spans */
+    readonly 'observability:*': "observability:*";
+    /** Full access to processor-providers */
+    readonly 'processor-providers:*': "processor-providers:*";
+    /** Full access to processors */
+    readonly 'processors:*': "processors:*";
+    /** Full access to schedules */
+    readonly 'schedules:*': "schedules:*";
+    /** Full access to evaluation scores */
+    readonly 'scores:*': "scores:*";
+    /** Full access to stored agents */
+    readonly 'stored-agents:*': "stored-agents:*";
+    /** Full access to stored MCP clients */
+    readonly 'stored-mcp-clients:*': "stored-mcp-clients:*";
+    /** Full access to stored prompt blocks */
+    readonly 'stored-prompt-blocks:*': "stored-prompt-blocks:*";
+    /** Full access to stored scorers */
+    readonly 'stored-scorers:*': "stored-scorers:*";
+    /** Full access to stored skills */
+    readonly 'stored-skills:*': "stored-skills:*";
+    /** Full access to stored workspaces */
+    readonly 'stored-workspaces:*': "stored-workspaces:*";
+    /** Full access to system info */
+    readonly 'system:*': "system:*";
+    /** Full access to tool-providers */
+    readonly 'tool-providers:*': "tool-providers:*";
+    /** Full access to tools */
+    readonly 'tools:*': "tools:*";
+    /** Full access to vector stores */
+    readonly 'vector:*': "vector:*";
+    /** Full access to vectors */
+    readonly 'vectors:*': "vectors:*";
+    /** Full access to workflows */
+    readonly 'workflows:*': "workflows:*";
+    /** Full access to workspaces */
+    readonly 'workspaces:*': "workspaces:*";
+    /** View agent-to-agent communication */
+    readonly 'a2a:read': "a2a:read";
+    /** Create and modify agent-to-agent communication */
+    readonly 'a2a:write': "a2a:write";
+    /** Execute agent builder */
+    readonly 'agent-builder:execute': "agent-builder:execute";
+    /** View agent builder */
+    readonly 'agent-builder:read': "agent-builder:read";
+    /** Create and modify agent builder */
+    readonly 'agent-builder:write': "agent-builder:write";
+    /** Create agents */
+    readonly 'agents:create': "agents:create";
+    /** Delete agents */
+    readonly 'agents:delete': "agents:delete";
+    /** Execute agents */
+    readonly 'agents:execute': "agents:execute";
+    /** View agents */
+    readonly 'agents:read': "agents:read";
+    /** Create and modify agents */
+    readonly 'agents:write': "agents:write";
+    /** View auth */
+    readonly 'auth:read': "auth:read";
+    /** View background tasks */
+    readonly 'background-tasks:read': "background-tasks:read";
+    /** View channels */
+    readonly 'channels:read': "channels:read";
+    /** Create and modify channels */
+    readonly 'channels:write': "channels:write";
+    /** Delete datasets */
+    readonly 'datasets:delete': "datasets:delete";
+    /** Execute datasets */
+    readonly 'datasets:execute': "datasets:execute";
+    /** View datasets */
+    readonly 'datasets:read': "datasets:read";
+    /** Create and modify datasets */
+    readonly 'datasets:write': "datasets:write";
+    /** View embedders */
+    readonly 'embedders:read': "embedders:read";
+    /** View experiments */
+    readonly 'experiments:read': "experiments:read";
+    /** Execute harness sessions */
+    readonly 'harness:execute': "harness:execute";
+    /** View harness sessions */
+    readonly 'harness:read': "harness:read";
+    /** View infrastructure */
+    readonly 'infrastructure:read': "infrastructure:read";
+    /** View logs */
+    readonly 'logs:read': "logs:read";
+    /** Execute MCP servers */
+    readonly 'mcp:execute': "mcp:execute";
+    /** View MCP servers */
+    readonly 'mcp:read': "mcp:read";
+    /** Create and modify MCP servers */
+    readonly 'mcp:write': "mcp:write";
+    /** Delete memory and threads */
+    readonly 'memory:delete': "memory:delete";
+    /** Execute memory and threads */
+    readonly 'memory:execute': "memory:execute";
+    /** View memory and threads */
+    readonly 'memory:read': "memory:read";
+    /** Create and modify memory and threads */
+    readonly 'memory:write': "memory:write";
+    /** View traces and spans */
+    readonly 'observability:read': "observability:read";
+    /** Create and modify traces and spans */
+    readonly 'observability:write': "observability:write";
+    /** View processor-providers */
+    readonly 'processor-providers:read': "processor-providers:read";
+    /** Execute processors */
+    readonly 'processors:execute': "processors:execute";
+    /** View processors */
+    readonly 'processors:read': "processors:read";
+    /** Execute schedules */
+    readonly 'schedules:execute': "schedules:execute";
+    /** View schedules */
+    readonly 'schedules:read': "schedules:read";
+    /** Create and modify schedules */
+    readonly 'schedules:write': "schedules:write";
+    /** View evaluation scores */
+    readonly 'scores:read': "scores:read";
+    /** Create and modify evaluation scores */
+    readonly 'scores:write': "scores:write";
+    /** Delete stored agents */
+    readonly 'stored-agents:delete': "stored-agents:delete";
+    /** Publish, activate, or restore stored agents */
+    readonly 'stored-agents:publish': "stored-agents:publish";
+    /** View stored agents */
+    readonly 'stored-agents:read': "stored-agents:read";
+    /** Create and modify stored agents */
+    readonly 'stored-agents:write': "stored-agents:write";
+    /** Delete stored MCP clients */
+    readonly 'stored-mcp-clients:delete': "stored-mcp-clients:delete";
+    /** Publish, activate, or restore stored MCP clients */
+    readonly 'stored-mcp-clients:publish': "stored-mcp-clients:publish";
+    /** View stored MCP clients */
+    readonly 'stored-mcp-clients:read': "stored-mcp-clients:read";
+    /** Create and modify stored MCP clients */
+    readonly 'stored-mcp-clients:write': "stored-mcp-clients:write";
+    /** Delete stored prompt blocks */
+    readonly 'stored-prompt-blocks:delete': "stored-prompt-blocks:delete";
+    /** Publish, activate, or restore stored prompt blocks */
+    readonly 'stored-prompt-blocks:publish': "stored-prompt-blocks:publish";
+    /** View stored prompt blocks */
+    readonly 'stored-prompt-blocks:read': "stored-prompt-blocks:read";
+    /** Create and modify stored prompt blocks */
+    readonly 'stored-prompt-blocks:write': "stored-prompt-blocks:write";
+    /** Delete stored scorers */
+    readonly 'stored-scorers:delete': "stored-scorers:delete";
+    /** Publish, activate, or restore stored scorers */
+    readonly 'stored-scorers:publish': "stored-scorers:publish";
+    /** View stored scorers */
+    readonly 'stored-scorers:read': "stored-scorers:read";
+    /** Create and modify stored scorers */
+    readonly 'stored-scorers:write': "stored-scorers:write";
+    /** Delete stored skills */
+    readonly 'stored-skills:delete': "stored-skills:delete";
+    /** Publish, activate, or restore stored skills */
+    readonly 'stored-skills:publish': "stored-skills:publish";
+    /** View stored skills */
+    readonly 'stored-skills:read': "stored-skills:read";
+    /** Create and modify stored skills */
+    readonly 'stored-skills:write': "stored-skills:write";
+    /** Delete stored workspaces */
+    readonly 'stored-workspaces:delete': "stored-workspaces:delete";
+    /** View stored workspaces */
+    readonly 'stored-workspaces:read': "stored-workspaces:read";
+    /** Create and modify stored workspaces */
+    readonly 'stored-workspaces:write': "stored-workspaces:write";
+    /** View system info */
+    readonly 'system:read': "system:read";
+    /** Delete tool-providers */
+    readonly 'tool-providers:delete': "tool-providers:delete";
+    /** View tool-providers */
+    readonly 'tool-providers:read': "tool-providers:read";
+    /** Create and modify tool-providers */
+    readonly 'tool-providers:write': "tool-providers:write";
+    /** Execute tools */
+    readonly 'tools:execute': "tools:execute";
+    /** View tools */
+    readonly 'tools:read': "tools:read";
+    /** Delete vector stores */
+    readonly 'vector:delete': "vector:delete";
+    /** Execute vector stores */
+    readonly 'vector:execute': "vector:execute";
+    /** View vector stores */
+    readonly 'vector:read': "vector:read";
+    /** Create and modify vector stores */
+    readonly 'vector:write': "vector:write";
+    /** View vectors */
+    readonly 'vectors:read': "vectors:read";
+    /** Delete workflows */
+    readonly 'workflows:delete': "workflows:delete";
+    /** Execute workflows */
+    readonly 'workflows:execute': "workflows:execute";
+    /** View workflows */
+    readonly 'workflows:read': "workflows:read";
+    /** Create and modify workflows */
+    readonly 'workflows:write': "workflows:write";
+    /** Delete workspaces */
+    readonly 'workspaces:delete': "workspaces:delete";
+    /** View workspaces */
+    readonly 'workspaces:read': "workspaces:read";
+    /** Create and modify workspaces */
+    readonly 'workspaces:write': "workspaces:write";
+    /** Full access to all stored resource families */
+    readonly 'stored:*': "stored:*";
+    /** View all stored resource families */
+    readonly 'stored:read': "stored:read";
+    /** Create and modify all stored resource families */
+    readonly 'stored:write': "stored:write";
+    /** Delete all stored resource families */
+    readonly 'stored:delete': "stored:delete";
+    /** Change visibility/audience stored agents */
+    readonly 'stored-agents:share': "stored-agents:share";
+    /** Change visibility/audience stored skills */
+    readonly 'stored-skills:share': "stored-skills:share";
+};
+/**
+ * Permission pattern that can be used in role definitions.
+ * Supports:
+ * - Specific permissions: 'agents:read', 'workflows:execute'
+ * - Resource wildcards: 'agents:*', 'workflows:*' (all actions on a resource)
+ * - Action wildcards: '*:read', '*:write' (an action across all resources)
+ * - Global wildcard: '*' (full access)
+ */
+export type PermissionPattern = keyof typeof PERMISSION_PATTERNS;
+/**
+ * All valid resource:action permission combinations (excludes wildcards).
+ */
+export declare const PERMISSIONS: readonly ["a2a:read", "a2a:write", "agent-builder:execute", "agent-builder:read", "agent-builder:write", "agents:create", "agents:delete", "agents:execute", "agents:read", "agents:write", "auth:read", "background-tasks:read", "channels:read", "channels:write", "datasets:delete", "datasets:execute", "datasets:read", "datasets:write", "embedders:read", "experiments:read", "harness:execute", "harness:read", "infrastructure:read", "logs:read", "mcp:execute", "mcp:read", "mcp:write", "memory:delete", "memory:execute", "memory:read", "memory:write", "observability:read", "observability:write", "processor-providers:read", "processors:execute", "processors:read", "schedules:execute", "schedules:read", "schedules:write", "scores:read", "scores:write", "stored-agents:delete", "stored-agents:publish", "stored-agents:read", "stored-agents:write", "stored-mcp-clients:delete", "stored-mcp-clients:publish", "stored-mcp-clients:read", "stored-mcp-clients:write", "stored-prompt-blocks:delete", "stored-prompt-blocks:publish", "stored-prompt-blocks:read", "stored-prompt-blocks:write", "stored-scorers:delete", "stored-scorers:publish", "stored-scorers:read", "stored-scorers:write", "stored-skills:delete", "stored-skills:publish", "stored-skills:read", "stored-skills:write", "stored-workspaces:delete", "stored-workspaces:read", "stored-workspaces:write", "system:read", "tool-providers:delete", "tool-providers:read", "tool-providers:write", "tools:execute", "tools:read", "vector:delete", "vector:execute", "vector:read", "vector:write", "vectors:read", "workflows:delete", "workflows:execute", "workflows:read", "workflows:write", "workspaces:delete", "workspaces:read", "workspaces:write"];
+/**
+ * Specific permission type (e.g., 'agents:read', 'workflows:execute').
+ */
+export type Permission = (typeof PERMISSIONS)[number];
+/**
+ * Type-safe constants for Mastra-owned FGA permissions.
+ *
+ * These values are generated from server routes and can be used wherever
+ * Mastra checks or maps FGA permissions.
+ */
+export declare const MastraFGAPermissions: {
+    /** View agent-to-agent communication */
+    readonly A2A_READ: "a2a:read";
+    /** Create and modify agent-to-agent communication */
+    readonly A2A_WRITE: "a2a:write";
+    /** Execute agent builder */
+    readonly AGENT_BUILDER_EXECUTE: "agent-builder:execute";
+    /** View agent builder */
+    readonly AGENT_BUILDER_READ: "agent-builder:read";
+    /** Create and modify agent builder */
+    readonly AGENT_BUILDER_WRITE: "agent-builder:write";
+    /** Create agents */
+    readonly AGENTS_CREATE: "agents:create";
+    /** Delete agents */
+    readonly AGENTS_DELETE: "agents:delete";
+    /** Execute agents */
+    readonly AGENTS_EXECUTE: "agents:execute";
+    /** View agents */
+    readonly AGENTS_READ: "agents:read";
+    /** Create and modify agents */
+    readonly AGENTS_WRITE: "agents:write";
+    /** View auth */
+    readonly AUTH_READ: "auth:read";
+    /** View background tasks */
+    readonly BACKGROUND_TASKS_READ: "background-tasks:read";
+    /** View channels */
+    readonly CHANNELS_READ: "channels:read";
+    /** Create and modify channels */
+    readonly CHANNELS_WRITE: "channels:write";
+    /** Delete datasets */
+    readonly DATASETS_DELETE: "datasets:delete";
+    /** Execute datasets */
+    readonly DATASETS_EXECUTE: "datasets:execute";
+    /** View datasets */
+    readonly DATASETS_READ: "datasets:read";
+    /** Create and modify datasets */
+    readonly DATASETS_WRITE: "datasets:write";
+    /** View embedders */
+    readonly EMBEDDERS_READ: "embedders:read";
+    /** View experiments */
+    readonly EXPERIMENTS_READ: "experiments:read";
+    /** Execute harness sessions */
+    readonly HARNESS_EXECUTE: "harness:execute";
+    /** View harness sessions */
+    readonly HARNESS_READ: "harness:read";
+    /** View infrastructure */
+    readonly INFRASTRUCTURE_READ: "infrastructure:read";
+    /** View logs */
+    readonly LOGS_READ: "logs:read";
+    /** Execute MCP servers */
+    readonly MCP_EXECUTE: "mcp:execute";
+    /** View MCP servers */
+    readonly MCP_READ: "mcp:read";
+    /** Create and modify MCP servers */
+    readonly MCP_WRITE: "mcp:write";
+    /** Delete memory and threads */
+    readonly MEMORY_DELETE: "memory:delete";
+    /** Execute memory and threads */
+    readonly MEMORY_EXECUTE: "memory:execute";
+    /** View memory and threads */
+    readonly MEMORY_READ: "memory:read";
+    /** Create and modify memory and threads */
+    readonly MEMORY_WRITE: "memory:write";
+    /** View traces and spans */
+    readonly OBSERVABILITY_READ: "observability:read";
+    /** Create and modify traces and spans */
+    readonly OBSERVABILITY_WRITE: "observability:write";
+    /** View processor-providers */
+    readonly PROCESSOR_PROVIDERS_READ: "processor-providers:read";
+    /** Execute processors */
+    readonly PROCESSORS_EXECUTE: "processors:execute";
+    /** View processors */
+    readonly PROCESSORS_READ: "processors:read";
+    /** Execute schedules */
+    readonly SCHEDULES_EXECUTE: "schedules:execute";
+    /** View schedules */
+    readonly SCHEDULES_READ: "schedules:read";
+    /** Create and modify schedules */
+    readonly SCHEDULES_WRITE: "schedules:write";
+    /** View evaluation scores */
+    readonly SCORES_READ: "scores:read";
+    /** Create and modify evaluation scores */
+    readonly SCORES_WRITE: "scores:write";
+    /** Delete stored agents */
+    readonly STORED_AGENTS_DELETE: "stored-agents:delete";
+    /** Publish, activate, or restore stored agents */
+    readonly STORED_AGENTS_PUBLISH: "stored-agents:publish";
+    /** View stored agents */
+    readonly STORED_AGENTS_READ: "stored-agents:read";
+    /** Create and modify stored agents */
+    readonly STORED_AGENTS_WRITE: "stored-agents:write";
+    /** Delete stored MCP clients */
+    readonly STORED_MCP_CLIENTS_DELETE: "stored-mcp-clients:delete";
+    /** Publish, activate, or restore stored MCP clients */
+    readonly STORED_MCP_CLIENTS_PUBLISH: "stored-mcp-clients:publish";
+    /** View stored MCP clients */
+    readonly STORED_MCP_CLIENTS_READ: "stored-mcp-clients:read";
+    /** Create and modify stored MCP clients */
+    readonly STORED_MCP_CLIENTS_WRITE: "stored-mcp-clients:write";
+    /** Delete stored prompt blocks */
+    readonly STORED_PROMPT_BLOCKS_DELETE: "stored-prompt-blocks:delete";
+    /** Publish, activate, or restore stored prompt blocks */
+    readonly STORED_PROMPT_BLOCKS_PUBLISH: "stored-prompt-blocks:publish";
+    /** View stored prompt blocks */
+    readonly STORED_PROMPT_BLOCKS_READ: "stored-prompt-blocks:read";
+    /** Create and modify stored prompt blocks */
+    readonly STORED_PROMPT_BLOCKS_WRITE: "stored-prompt-blocks:write";
+    /** Delete stored scorers */
+    readonly STORED_SCORERS_DELETE: "stored-scorers:delete";
+    /** Publish, activate, or restore stored scorers */
+    readonly STORED_SCORERS_PUBLISH: "stored-scorers:publish";
+    /** View stored scorers */
+    readonly STORED_SCORERS_READ: "stored-scorers:read";
+    /** Create and modify stored scorers */
+    readonly STORED_SCORERS_WRITE: "stored-scorers:write";
+    /** Delete stored skills */
+    readonly STORED_SKILLS_DELETE: "stored-skills:delete";
+    /** Publish, activate, or restore stored skills */
+    readonly STORED_SKILLS_PUBLISH: "stored-skills:publish";
+    /** View stored skills */
+    readonly STORED_SKILLS_READ: "stored-skills:read";
+    /** Create and modify stored skills */
+    readonly STORED_SKILLS_WRITE: "stored-skills:write";
+    /** Delete stored workspaces */
+    readonly STORED_WORKSPACES_DELETE: "stored-workspaces:delete";
+    /** View stored workspaces */
+    readonly STORED_WORKSPACES_READ: "stored-workspaces:read";
+    /** Create and modify stored workspaces */
+    readonly STORED_WORKSPACES_WRITE: "stored-workspaces:write";
+    /** View system info */
+    readonly SYSTEM_READ: "system:read";
+    /** Delete tool-providers */
+    readonly TOOL_PROVIDERS_DELETE: "tool-providers:delete";
+    /** View tool-providers */
+    readonly TOOL_PROVIDERS_READ: "tool-providers:read";
+    /** Create and modify tool-providers */
+    readonly TOOL_PROVIDERS_WRITE: "tool-providers:write";
+    /** Execute tools */
+    readonly TOOLS_EXECUTE: "tools:execute";
+    /** View tools */
+    readonly TOOLS_READ: "tools:read";
+    /** Delete vector stores */
+    readonly VECTOR_DELETE: "vector:delete";
+    /** Execute vector stores */
+    readonly VECTOR_EXECUTE: "vector:execute";
+    /** View vector stores */
+    readonly VECTOR_READ: "vector:read";
+    /** Create and modify vector stores */
+    readonly VECTOR_WRITE: "vector:write";
+    /** View vectors */
+    readonly VECTORS_READ: "vectors:read";
+    /** Delete workflows */
+    readonly WORKFLOWS_DELETE: "workflows:delete";
+    /** Execute workflows */
+    readonly WORKFLOWS_EXECUTE: "workflows:execute";
+    /** View workflows */
+    readonly WORKFLOWS_READ: "workflows:read";
+    /** Create and modify workflows */
+    readonly WORKFLOWS_WRITE: "workflows:write";
+    /** Delete workspaces */
+    readonly WORKSPACES_DELETE: "workspaces:delete";
+    /** View workspaces */
+    readonly WORKSPACES_READ: "workspaces:read";
+    /** Create and modify workspaces */
+    readonly WORKSPACES_WRITE: "workspaces:write";
+};
+/**
+ * Mastra-owned FGA permission values.
+ */
+export type MastraFGAPermission = (typeof MastraFGAPermissions)[keyof typeof MastraFGAPermissions];
+/**
+ * FGA permission input accepted by public config and provider APIs.
+ * Keeps autocomplete for Mastra-owned permissions while allowing custom provider strings.
+ */
+export type MastraFGAPermissionInput = MastraFGAPermission | (string & {});
+/**
+ * Type-safe role mapping configuration.
+ *
+ * Maps role names (from your identity provider) to Mastra permission patterns.
+ *
+ * @example
+ * ```typescript
+ * const roleMapping: TypedRoleMapping = {
+ *   "Engineering": ["agents:*", "workflows:*"],
+ *   "Product": ["agents:read", "workflows:read"],
+ *   "Admin": ["*"],
+ *   "_default": [],
+ * };
+ * ```
+ */
+export type TypedRoleMapping = {
+    [role: string]: PermissionPattern[];
+};
+/**
+ * Validates that a string is a valid permission pattern.
+ * Useful for runtime validation of permission strings.
+ */
+export declare function isValidPermissionPattern(pattern: string): pattern is PermissionPattern;
+/**
+ * Validates that all permissions in an array are valid patterns.
+ */
+export declare function validatePermissions(permissions: string[]): permissions is PermissionPattern[];
+//# sourceMappingURL=permissions.generated.d.ts.map