/**
 * Resources that are simply *there* (#1278).
 *
 * `describeResources` answers "what do I manage" and `observeDependencies`
 * answers "what do I rely on". Both resolve outward from the declared estate,
 * so neither can see a resource nothing points at — and "which of my security
 * groups are unused" is precisely a question about resources nothing points at.
 *
 * A state file cannot answer this at all: it knows what it created, and an
 * unused resource is by definition not something it created and attached. A
 * lexicon that can enumerate a kind can.
 *
 * Bounded by the kinds the project declares. A project managing security groups
 * is asked about security groups, not about the account.
 */
import type { ResourceMetadata } from "@intentius/chant/lexicon";
/** The requested kinds, plus the ones they imply. */
export declare function withImplied(kinds: string[]): string[];
/** The kinds this reader can enumerate. Declared so a caller can mention
 * `--ambient` without paying for a scan to discover it is relevant. */
export declare const AMBIENT_KINDS: string[];
/** True when this lexicon can enumerate the kind, so a caller can say what it skipped. */
export declare function canEnumerate(kind: string): boolean;
/**
 * List resources of the declared kinds that exist in the account but are
 * neither managed nor already observed.
 *
 * Attachment is deliberately NOT decided here. Whether a security group is
 * "unused" is a graph question — does anything reference it — and the graph
 * answers it once the group is a node. Deciding it in the reader would put a
 * conclusion in the observation, which is the mistake `liveInternetFacing` made
 * and #1271 undid.
 */
export declare function observeAwsAmbient(options: {
    kinds: string[];
    observed: Record<string, ResourceMetadata>;
    region?: string;
}): Promise<Record<string, ResourceMetadata>>;
//# sourceMappingURL=ambient.d.ts.map