/**
 * Where an app shows its own MCP approval review page: on its home page, with
 * the grant id in this key of the URL fragment. The toolkit's `AppProviders`
 * renders the page there. The id is a lookup handle, not a credential: the
 * page reads and decides through the framework route, which checks the
 * browser session.
 */
export declare const MCP_APPROVAL_HASH_PARAM = "mcpApproval";
/** A grant id is a UUID, so it never needs percent-encoding. */
export declare function isMcpApprovalId(value: unknown): value is string;
/** The grant id a page's URL fragment names, if it names a well-formed one. */
export declare function readMcpApprovalId(hash: string): string | undefined;
/**
 * The app page that reviews one grant. The id rides in the fragment, not the
 * query: an app's home route often redirects (to `/inbox`, `/plans`), and a
 * browser carries the fragment through an HTTP redirect, where a server
 * redirect can drop the query.
 */
export declare function mcpApprovalAppPagePath(id: string, homePath: string, basePath?: string): string;