import type { SandboxScope } from "./sandbox-token.js";
/**
 * Check if a sandbox-scoped token is allowed to access the given API route.
 *
 * Returns true if the request is allowed, false → 403.
 * Everything not explicitly listed is blocked.
 */
export declare function isSandboxAllowed(pathname: string, method: string, scope: SandboxScope): boolean;
//# sourceMappingURL=sandbox-guard.d.ts.map