import { type AccessGrant, type ToolGatewayCatalog, type ToolGatewayIdentity } from "@opengeni/contracts";
import { type ApiRouteDeps } from "@opengeni/core";
import { Hono } from "hono";
export type McpOAuthResource = {
    resource: string;
    workspaceId: string;
    kind: "all" | "docs" | "files";
};
export type McpOAuthRouteAccess = {
    grant: AccessGrant;
    allowedToolIdentities: ToolGatewayIdentity[];
};
export declare function registerMcpOAuthRoutes(app: Hono, deps: ApiRouteDeps): void;
export declare function resolveMcpOAuthRouteAccess(deps: ApiRouteDeps, request: Request, workspaceId: string): Promise<McpOAuthRouteAccess | null>;
export declare function mcpOAuthBearerToken(request: Request): string | null;
export declare function isMcpOAuthResourcePath(pathname: string): boolean;
export declare function mcpOAuthConsentToolIdentities(catalog: ToolGatewayCatalog): ToolGatewayIdentity[];
export declare function isMcpOAuthPublicProtocolPath(pathname: string): boolean;
export declare function mcpOAuthAuthenticateHeader(deps: ApiRouteDeps, pathname: string): string;