/** Magento admin username (lower-case) or `*` → scopes that user may be granted. */
export type UserScopes = Map<string, string[]>;
/**
 * Parse `MCP_USER_SCOPES`, e.g.
 *   `alice=catalog:read orders:read orders:pii;*=catalog:read orders:read`
 * `*` applies to any Magento admin not listed. Omit `*` to allow only listed users.
 */
export declare function parseUserScopes(spec: string): UserScopes;
/** Scopes to grant: what the user is allowed, narrowed to what the client asked for (if it asked). */
export declare function grantedScopes(config: UserScopes, username: string, requested: string[]): string[];
//# sourceMappingURL=user-scopes.d.ts.map