/**
 * Model-facing plugin lifecycle tools (spec §1).
 *
 *   SearchPlugins        read-only — query registered marketplaces
 *   ListPlugins          read-only — what is installed
 *   SuggestPluginInstall suggest only — surface "there's a plugin for this"
 *   InstallPlugin        install from a trusted marketplace (transparent + reversible)
 *   UninstallPlugin      remove an installed plugin (low risk; the reversible half)
 *
 * Trust model: adding a marketplace stays a human action, so these tools never
 * cross the source-trust boundary — install only pulls from already-registered
 * marketplaces. Install is autonomous but transparent (it announces what it did
 * and is reversible via UninstallPlugin). The injection carve-out — pause for a
 * human check when the impetus traces to untrusted external content — is a model
 * behavior surfaced through the tool guidelines, since provenance is a judgment
 * the tool cannot make on its own.
 *
 * These tools are registered on the TOP-LEVEL agent only (see main.ts) and must
 * never appear in an authored subagent's allowlist — that guardrail (spec §3)
 * relies on {@link PLUGIN_SYSTEM_TOOL_NAMES}.
 */
import { type ToolDefinition } from "../extensions/types.js";
export { PLUGIN_SYSTEM_TOOL_NAMES } from "./plugin-tool-names.js";
export declare function createSearchPluginsToolDefinition(): ToolDefinition;
export declare function createListPluginsToolDefinition(): ToolDefinition;
export declare function createInstallPluginToolDefinition(): ToolDefinition;
export declare function createUninstallPluginToolDefinition(): ToolDefinition;
/** All five lifecycle tool definitions, for registration on the top-level agent. */
export declare function createPluginLifecycleToolDefinitions(): ToolDefinition[];
//# sourceMappingURL=plugins.d.ts.map