import type { AgentSourceContext } from '../../agent/source-context/types.js';
import { type CapabilityDispatcher } from '../../capabilities/runtime/dispatcher.js';
import type { ResolvedGatewayAuth } from '../auth.js';
import type { GatewayPrincipal } from '../security/gateway-principal.js';
/** A queued read retains its original scope ceiling, but never a revoked identity. */
export declare function checkAppContextAccess(source: AgentSourceContext, dispatcher: CapabilityDispatcher, auth: ResolvedGatewayAuth): Promise<void>;
export declare function prepareAppContext(input: unknown, principal: GatewayPrincipal, auth: ResolvedGatewayAuth, dispatcher: CapabilityDispatcher, previous?: AgentSourceContext): Promise<AgentSourceContext>;