/**
 * Admin API routes for org-level global workflow settings.
 *
 * Exposes GET / PATCH `/api/v1/admin/org-settings/global-workflows` so
 * `kici-admin` can read and write the per-org row in `org_settings`
 * without going through the Platform dashboard proxy — the CLI stays
 * operable even when Platform is unavailable.
 *
 * Mutations require the `secret.write` RBAC capability (already granted to
 * admin / owner roles), matching the gating posture used by source admin.
 */
import { Hono } from 'hono';
import { type Kysely } from 'kysely';
import { DashboardWriteOperation } from '@kici-dev/engine/protocol/dashboard-write-operations';
import type { Database } from '../db/types.js';
import type { RbacEnforcer, Role } from '../secrets/rbac.js';
import type { AccessLogWriter } from '../audit/access-log.js';
interface OrgSettingsRouteDeps {
    db: Kysely<Database>;
    rbac: RbacEnforcer;
    /**
     * Optional — when wired, each `dashboard_write_policy` flip emits one
     * `access_log` row (`org_settings.dashboard_write_policy.update`)
     * carrying the operation name + prior/next state in `actor_meta`.
     * Reset calls additionally stamp `reset: true`.
     */
    accessLog?: AccessLogWriter;
}
type AdminEnv = {
    Variables: {
        role: Role;
        userId: string;
        routingKey: string | null;
    };
};
export declare function createOrgSettingsRoutes(deps: OrgSettingsRouteDeps): Hono<AdminEnv>;
export { DashboardWriteOperation };
//# sourceMappingURL=admin-org-settings.d.ts.map