import { Response, NextFunction } from 'express';
import { AuthRequest } from '../auth';
/**
 * Require admin. Use after `authMiddleware`.
 * Fails closed (403) when req.user is missing or not admin.
 */
export declare function requireAdmin(req: AuthRequest, res: Response, next: NextFunction): void;
/**
 * Require owner (or admin) of the project identified by the given route param.
 * Use after `authMiddleware`. 404 when project not found, 403 when not owner.
 */
export declare function requireProjectOwner(paramName?: string): (req: AuthRequest, res: Response, next: NextFunction) => void;
//# sourceMappingURL=authz.d.ts.map