import type { AuthContext } from "@grackle-ai/auth";
import type { ToolRegistry, ToolDefinition } from "./tool-registry.js";
/** Tools exposed to scoped-token (agent) callers when no persona override is set. */
export declare const SCOPED_TOOLS: ReadonlySet<string>;
/**
 * Resolve a tool by name with scope checks.
 *
 * @param personaAllowedTools - Optional persona-specific tool set. When provided
 *   and non-empty, overrides the default SCOPED_TOOLS for this scoped caller.
 */
export declare function resolveToolForAuth(registry: ToolRegistry, name: string, authContext: AuthContext, personaAllowedTools?: ReadonlySet<string>): ToolDefinition | undefined;
/**
 * List tools visible to the given auth context.
 *
 * @param personaAllowedTools - Optional persona-specific tool set. When provided
 *   and non-empty, overrides the default SCOPED_TOOLS for this scoped caller.
 */
export declare function listToolsForAuth(registry: ToolRegistry, authContext: AuthContext, personaAllowedTools?: ReadonlySet<string>): ToolDefinition[];
//# sourceMappingURL=tool-scoping.d.ts.map