/**
 * Review hints describe behavior, not a desired client confirmation policy.
 * Trace the executor through its API route and background jobs: HTTP verbs,
 * provider calls and reversible writes alone do not establish the hints.
 * The submission generator and the remote transport share this table.
 */
/** MCP tool annotations, explicit for ChatGPT Apps submission review. */
export interface ToolAnnotations {
    title: string;
    readOnlyHint: boolean;
    destructiveHint: boolean;
    idempotentHint: boolean;
    openWorldHint: boolean;
}
/** Open-ended web access, publication or caller-selected callback delivery. */
export interface ExternalReach {
    /** The outside system contacted, named for the justification text. */
    system: string;
    /** Whether this call reads from it, writes to it, or queues work that will. */
    how: "reads" | "writes" | "queues";
}
/**
 * A private model computation is not open-world merely because it uses a
 * hosted provider; web research, public publishing and arbitrary callbacks are.
 * Classify the union of all supported modes, including downstream jobs.
 */
export declare const EXTERNAL_REACH: Readonly<Record<string, ExternalReach>>;
/**
 * Every advertised tool, with all four MCP hints resolved to an explicit
 * boolean. `openWorldHint` comes from `EXTERNAL_REACH` alone so the hint and
 * the justification that explains it can never disagree.
 */
export declare const TOOL_ANNOTATIONS: Record<string, ToolAnnotations>;
/** The four justification strings an OpenAI reviewer reads, per tool. */
export interface ToolJustifications {
    read_only_justification: string;
    destructive_justification: string;
    idempotent_justification: string;
    open_world_justification: string;
}
/** Each explanation names the behavior reviewed, rather than guessing from a title. */
export declare function buildJustifications(name: string): ToolJustifications;
//# sourceMappingURL=annotations.d.ts.map