import { type Kysely } from 'kysely';
/**
 * Add `org_settings.dashboard_write_policy jsonb NOT NULL DEFAULT '{}'`.
 *
 * Stores the per-customer policy that decides which Platform-routed
 * dashboard.* write operations the orchestrator accepts. An empty
 * JSONB object means everything is enabled (permissive default). To
 * disable an operation, set its key to `false`, e.g.
 * `{"secrets.set": false, "variables.set": false}`. Unknown / missing
 * keys are treated as `true` by the resolver in
 * `@kici-dev/engine/protocol/dashboard-write-operations`.
 *
 * Idempotent: a re-run on a DB that already has the column is a no-op.
 */
export declare function up(db: Kysely<unknown>): Promise<void>;
export declare function down(db: Kysely<unknown>): Promise<void>;
//# sourceMappingURL=020_org_settings_dashboard_write_policy.d.ts.map