/**
 * Per-tool scope enforcement.
 * CoSAI MCP-T2: Least privilege — each tool declares required scopes.
 *
 * Keep aligned with elnora-cli command scopes (audit script enforces parity).
 */
export declare const TOOL_SCOPES: Record<string, string[]>;
/**
 * Check if the given scopes satisfy the required scopes for a tool.
 * Returns the list of missing scopes, or empty array if all present.
 */
export declare function checkToolScopes(toolName: string, grantedScopes: string[]): string[];
//# sourceMappingURL=scope-guard.d.ts.map