/**
 * Enable RLS on super_admins with read-only access for the app user.
 * The app can SELECT (to verify super-admin status) but cannot INSERT/UPDATE/DELETE
 * (mutations must go through a privileged DBA connection, not the app).
 * This prevents a compromised app from self-promoting to super-admin.
 */
declare const _default: {
    name: string;
    run: ({ sql }: {
        sql: (template: TemplateStringsArray, ...values: import("@slonik/sql-tag").ValueExpression[]) => import("slonik").QuerySqlToken;
        connection: import("slonik").DatabaseTransactionConnection | import("slonik").DatabasePool;
    }) => import("slonik").QuerySqlToken<import("@standard-schema/spec").StandardSchemaV1<unknown, unknown>>;
};
export default _default;
