/**
 * Remote transport tool gate (RF-RMT25).
 *
 * A modern api_key can only carry `stats:read` / `sites:read` / `accounts:read`
 * (api/src/sealmetrics_api/models/api_tokens.py — API_KEY_ALLOWED_SCOPES), and the
 * scope hierarchy is one-way ("read" implies "stats:read", never the reverse).
 * The tools below hit routers gated by `require_scope("read")` (segments,
 * channel-groups, alerts, bot-stats, webhooks), so a remote OAuth connection —
 * whose server-side api_key is a modern one — could never call them. Per the PRD
 * decision (2026-07-02) the scopes/routers are NOT touched; the remote transport
 * simply does not list these tools.
 *
 * Note: `get_top_channels` stays (it hits `/stats/top-channels` on the stats
 * router, covered by `stats:read`); `get_channels` goes through
 * `/channel-groups/stats/channels` and is excluded with the rest of the
 * channel-groups router.
 */
export declare const REMOTE_EXCLUDED_TOOLS: ReadonlySet<string>;
//# sourceMappingURL=gate.d.ts.map