/**
 * Predefined operation permission groups for use with `operations` role permissions.
 * Group names can be included in the `operations` array alongside individual operation names.
 */
export declare const OPERATION_PERMISSION_GROUPS: {
    /**
     * Read-only data operations: searches, SQL (DML type further enforced by table CRUD perms),
     * schema describes, and user/analytics reads. Does NOT include admin reads
     * (get_configuration, logs, component views) — add those explicitly alongside this group
     * when elevated admin visibility is needed.
     */
    readonly read_only: readonly ["search", "search_by_conditions", "search_by_hash", "search_by_id", "search_by_value", "sql", "describe_all", "describe_schema", "describe_database", "describe_table", "user_info", "get_job", "get_analytics", "list_metrics", "describe_metric"];
    /**
     * Elevated read-only access to server configuration, logs, and component views.
     * All ops here are SU-only and granted via the operations SU bypass.
     * Combine with `read_only` for a full studio/dashboard read role:
     * `operations: ['read_only', 'admin_read']`
     */
    readonly admin_read: readonly ["get_configuration", "read_log", "read_audit_log", "get_custom_functions", "get_custom_function", "get_components", "get_component_file"];
    /**
     * Everything in `read_only` plus full data manipulation (insert, update, upsert, delete)
     * and bulk load. Does NOT include schema DDL (create_attribute), user/role management,
     * or admin reads (get_configuration, logs). Add those explicitly when needed.
     */
    readonly standard_user: readonly ["search", "search_by_conditions", "search_by_hash", "search_by_id", "search_by_value", "sql", "describe_all", "describe_schema", "describe_database", "describe_table", "user_info", "get_job", "get_analytics", "list_metrics", "describe_metric", "insert", "update", "upsert", "delete", "csv_data_load", "csv_file_load", "csv_url_load", "import_from_s3"];
};
/**
 * Validates that every entry in an operations array is a known operation name or group name.
 * Returns the first invalid entry, or null if all entries are valid.
 */
export declare function validateOperations(operations: readonly unknown[]): string | null;
/**
 * Expands an operations array into a Set of individual operation names,
 * resolving group names (e.g. 'read_only') to their member operations.
 */
export declare function expandOperationsPerms(operations: readonly string[]): Set<string>;
