/**
 * Resolves whether the current user may use the write-capable `api-calls`
 * assistant mode.
 *
 * That mode mints a per-sandbox OAuth app under the caller's identity
 * (createApp/createApplication in wspace-sandbox-svc), which is RBAC-gated to a
 * global Owner/Admin — a non-admin would only discover this as a FORBIDDEN at
 * provision time. So we gate the UI on the same signal up front, via the global
 * gateway's `myRoles(scopeId)` query (`@rbac(public: true)`, auth-only, returns
 * `isAdmin`/`isOwner` directly — no extra provider wiring needed).
 *
 * Fails CLOSED: an error, an empty org scope, or the master flag being off all
 * resolve to `canUseApiCalls = false`, so the mode stays hidden unless the user
 * is provably an org admin.
 */
export interface AssistantApiAccess {
    /** True only for a confirmed global Owner/Admin (and when the mode is enabled). */
    canUseApiCalls: boolean;
    /** True while the role check is in flight. */
    loading: boolean;
}
export declare function useAssistantApiAccess(scopeId: string): AssistantApiAccess;
//# sourceMappingURL=useAssistantApiAccess.d.ts.map